$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: IfZtubIjv8IBkqsWuu/eRxWlrgaVgHhjTR/LBByNcbc= Subject key identifier: B4:E6:32:20:2B:68:73:14:DC:87:8E:E8:27:4E:D4:A3:D0:94:5B:94 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 38F7BFE91173F400E1A86F27C6AE1D0030712438 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa Signing time: Fri 15 Dec 2023 00:00:11 +0000 ROA not before: Thu 14 Dec 2023 23:55:11 +0000 ROA not after: Fri 13 Dec 2024 00:00:11 +0000 asID: 20473 IP address blocks: 98.142.241.0/24 maxlen: 24 104.234.150.0/24 maxlen: 24 104.234.193.0/24 maxlen: 24 104.234.242.0/24 maxlen: 24 206.53.50.0/24 maxlen: 24 206.53.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 Mar 2024 02:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f7:bf:e9:11:73:f4:00:e1:a8:6f:27:c6:ae:1d:00:30:71:24:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Dec 14 23:55:11 2023 GMT Not After : Dec 13 00:00:11 2024 GMT Subject: CN=B4E632202B687314DC878EE8274ED4A3D0945B94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e3:bd:8c:af:ab:8d:49:8a:0d:9b:de:7a:26: 08:ab:39:49:f0:f9:62:28:84:01:2a:7f:34:87:da: 33:c6:6c:14:31:69:6f:03:7b:92:60:fd:a1:77:91: 45:3f:2f:9d:c7:b7:48:d0:67:3f:38:66:5e:ee:d4: 32:97:6d:a4:f1:54:f9:55:e0:d2:b0:3e:14:4d:18: 98:19:02:38:f1:11:4f:a3:e5:65:6c:33:72:f8:b9: 5d:44:a2:95:c9:8c:c4:92:6c:f8:03:0d:70:f4:29: 05:b6:89:1c:3a:ef:b3:ef:10:5a:7e:d0:45:d6:32: 91:be:3a:7d:a8:27:f3:eb:83:e9:08:24:00:10:23: e4:5c:db:f7:b1:22:4c:ac:f2:23:8b:93:11:41:b0: 51:43:6e:5c:d3:88:73:1e:6f:bd:94:0b:2e:4b:2a: 9b:ba:39:a9:99:4e:0b:e0:58:47:4b:8e:95:8f:03: d4:0d:2c:6e:d0:fb:72:56:5a:83:8f:fb:6b:1c:46: c1:e6:65:b8:17:ee:91:09:55:fe:1f:34:a0:90:da: 1f:df:ac:80:cd:ba:e1:50:5c:e4:84:60:34:96:b3: 8c:1a:93:f5:d4:71:0f:9c:64:f5:d4:ef:71:ff:83: b6:6d:e0:09:68:4f:ee:5e:36:41:79:b5:88:c9:8c: 56:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E6:32:20:2B:68:73:14:DC:87:8E:E8:27:4E:D4:A3:D0:94:5B:94 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.142.241.0/24 104.234.150.0/24 104.234.193.0/24 104.234.242.0/24 206.53.50.0/24 206.53.56.0/24 Signature Algorithm: sha256WithRSAEncryption 89:7c:74:a0:43:51:ce:71:52:a5:eb:75:46:15:3b:2f:a9:a9: a4:21:78:4a:e0:4a:7f:85:25:51:a2:eb:85:37:a8:14:51:89: d8:ca:28:37:67:1f:f3:f2:64:f8:32:92:e3:41:81:6f:a7:c6: f7:b7:10:64:a7:15:2f:7f:de:24:cf:05:4b:89:f8:ea:68:c2: 0d:b1:d5:11:97:49:59:a8:fb:c4:6d:f6:2d:61:61:c7:34:13: 75:bd:d8:f5:90:7f:07:02:ef:ef:c8:81:9e:8e:5b:ce:09:b9: b6:42:e8:57:3d:60:1f:1e:af:08:b6:94:4f:bb:6d:7f:3d:0b: be:92:fb:8d:e6:7f:d4:af:ee:78:cd:2a:1b:00:9a:99:36:e4: 88:23:fa:fd:b3:5b:80:e3:b9:c2:bf:bb:cd:67:98:14:d3:e5: 8e:48:ad:d1:b8:0e:81:3b:45:84:31:69:76:73:98:2c:c0:1f: 00:a0:09:bf:a1:0e:c6:0b:06:ca:1a:69:af:b1:d8:d1:56:73: 6e:88:4e:09:18:db:a8:95:f9:46:7c:e4:06:c8:d6:67:ba:be: 60:e4:3c:08:5c:09:84:e6:0a:fd:36:fe:7a:8f:21:e2:52:e9: a7:fd:c0:cb:38:30:ba:a7:2e:dc:03:f9:d6:83:6d:3f:93:8a: 40:e1:52:7d -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUOPe/6RFz9ADhqG8nxq4dADBxJDgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjMxMjE0MjM1NTExWhcNMjQxMjEzMDAwMDEx WjAzMTEwLwYDVQQDEyhCNEU2MzIyMDJCNjg3MzE0REM4NzhFRTgyNzRFRDRBM0Qw OTQ1Qjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreO9jK+rjUmK DZveeiYIqzlJ8PliKIQBKn80h9ozxmwUMWlvA3uSYP2hd5FFPy+dx7dI0Gc/OGZe 7tQyl22k8VT5VeDSsD4UTRiYGQI48RFPo+VlbDNy+LldRKKVyYzEkmz4Aw1w9CkF tokcOu+z7xBaftBF1jKRvjp9qCfz64PpCCQAECPkXNv3sSJMrPIji5MRQbBRQ25c 04hzHm+9lAsuSyqbujmpmU4L4FhHS46VjwPUDSxu0PtyVlqDj/trHEbB5mW4F+6R CVX+HzSgkNof36yAzbrhUFzkhGA0lrOMGpP11HEPnGT11O9x/4O2beAJaE/uXjZB ebWIyYxWmwIDAQABo4ICnDCCApgwHQYDVR0OBBYEFLTmMiAraHMU3IeO6CdO1KPQ lFuUMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0G CCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAYo7xAwQAaOqWAwQAaOrBAwQAaOry AwQAzjUyAwQAzjU4MA0GCSqGSIb3DQEBCwUAA4IBAQCJfHSgQ1HOcVKl63VGFTsv qamkIXhK4Ep/hSVRouuFN6gUUYnYyig3Zx/z8mT4MpLjQYFvp8b3txBkpxUvf94k zwVLifjqaMINsdURl0lZqPvEbfYtYWHHNBN1vdj1kH8HAu/vyIGejlvOCbm2QuhX PWAfHq8ItpRPu21/PQu+kvuN5n/Ur+54zSobAJqZNuSII/r9s1uA47nCv7vNZ5gU 0+WOSK3RuA6BO0WEMWl2c5gswB8AoAm/oQ7GCwbKGmmvsdjRVnNuiE4JGNuolflG fOQGyNZnur5g5DwIXAmE5gr9Nv56jyHiUumn/cDLODC6py7cA/nWg20/k4pA4VJ9 -----END CERTIFICATE-----Generated at Wed Mar 27 23:35:16 2024 by rpki-client on console-ams.rpki-client.org