$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: JgEsadBQmFfpGPAsdC1/quHghf/2Cy+yEjmnXLV6ys8= Subject key identifier: B4:7E:D1:E7:79:DE:78:19:68:CA:52:A8:32:B4:09:04:59:FB:69:55 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 2A020272A215062411EB571483D7978BBFDEB77C Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa Signing time: Fri 03 Jul 2026 08:39:17 +0000 ROA not before: Fri 03 Jul 2026 08:34:17 +0000 ROA not after: Fri 02 Jul 2027 08:39:17 +0000 asID: 20473 IP address blocks: 104.234.112.0/24 maxlen: 24 104.234.123.0/24 maxlen: 24 104.234.150.0/24 maxlen: 24 104.234.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 Jul 2026 07:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:02:02:72:a2:15:06:24:11:eb:57:14:83:d7:97:8b:bf:de:b7:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jul 3 08:34:17 2026 GMT Not After : Jul 2 08:39:17 2027 GMT Subject: CN=B47ED1E779DE781968CA52A832B4090459FB6955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:bb:15:1c:6c:ce:3f:e3:ba:9e:16:f7:a5: 44:ad:8f:66:03:31:04:ad:10:f3:78:a4:39:4f:79: 90:74:3d:b5:23:64:ef:b7:a9:3e:63:e4:b8:f0:9c: bf:75:e6:95:8d:55:19:ad:cd:dd:90:d9:45:05:d6: 98:07:34:85:03:16:69:3c:f6:98:00:91:e3:a2:42: 0a:9e:65:02:3f:c3:85:d6:a0:8e:e3:de:86:fe:8a: cf:00:1a:ca:4b:fd:bb:ce:21:2f:df:90:8c:22:e0: 7f:15:45:dd:48:4b:56:d1:0b:c4:c4:a7:e0:ef:b8: e1:2d:74:c6:74:01:21:dd:7e:58:8c:69:bb:ba:dc: 4a:f1:5b:fa:d2:49:bb:0a:a9:55:1d:e4:77:0b:22: a7:c5:cc:09:9f:86:72:16:8f:da:b7:a7:9f:b5:ef: 05:93:6d:09:15:26:a0:0a:99:e6:5c:b3:f3:89:19: ed:b6:ed:6f:81:52:d1:4e:c4:13:aa:37:4f:ba:57: 15:b6:fc:ed:df:16:3f:75:a2:b2:be:df:48:07:e7: 42:a7:17:57:98:fa:38:9f:ff:b4:7c:28:09:5f:7a: 8a:e9:69:5a:0d:b6:40:82:0c:26:3b:08:63:27:f9: 3e:eb:0c:0e:6e:dc:d7:15:51:3d:2b:c8:be:28:0c: 6c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:7E:D1:E7:79:DE:78:19:68:CA:52:A8:32:B4:09:04:59:FB:69:55 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.112.0/24 104.234.123.0/24 104.234.150.0/24 104.234.242.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:56:e4:2a:24:d4:0c:bc:9e:d1:d8:85:7d:ae:c1:87:53:20: f0:9a:28:6b:20:f3:2a:68:40:06:4a:b3:10:f8:49:b6:df:f1: db:31:e3:dc:9e:cd:78:1e:f4:0a:51:af:71:e3:6c:6d:e0:8d: 2e:a0:dd:ab:ad:cc:d1:b7:6b:84:ff:c6:5b:ce:4b:e5:4a:0f: b1:40:c8:c2:b6:64:e4:70:97:54:00:6b:5b:8e:a8:03:16:fd: 87:ba:20:cd:fc:cf:4e:e8:f8:59:4a:12:3e:2d:c8:2a:39:10: e3:d8:f8:b8:8e:c4:70:60:9f:58:e4:58:3c:c8:00:1e:39:bd: 4a:09:f0:71:0f:8f:08:3d:ac:67:8e:e9:41:03:43:65:eb:e0: b2:77:f7:6d:9c:99:c0:af:3c:56:44:4d:77:31:ef:63:b7:85: d0:ab:d7:35:10:4b:32:e7:a5:6b:60:f5:71:d3:76:92:b1:a7: ed:58:f9:ee:1c:e1:80:bd:c3:4a:79:28:1a:84:18:bc:84:c9: f2:d5:68:91:0c:69:f7:9a:2f:d3:e5:89:38:60:45:4f:5b:ce: f1:93:ea:8d:9c:dd:09:7e:ad:d6:49:52:59:64:01:77:61:b4: 7a:5e:4f:a5:a2:31:60:0b:5c:9f:ca:9c:39:75:9b:50:10:06: b0:38:36:e3 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIUKgICcqIVBiQR61cUg9eXi7/et3wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwNzAzMDgzNDE3WhcNMjcwNzAyMDgzOTE3 WjAzMTEwLwYDVQQDEyhCNDdFRDFFNzc5REU3ODE5NjhDQTUyQTgzMkI0MDkwNDU5 RkI2OTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsi7FRxszj/j up4W96VErY9mAzEErRDzeKQ5T3mQdD21I2Tvt6k+Y+S48Jy/deaVjVUZrc3dkNlF BdaYBzSFAxZpPPaYAJHjokIKnmUCP8OF1qCO496G/orPABrKS/27ziEv35CMIuB/ FUXdSEtW0QvExKfg77jhLXTGdAEh3X5YjGm7utxK8Vv60km7CqlVHeR3CyKnxcwJ n4ZyFo/at6efte8Fk20JFSagCpnmXLPziRnttu1vgVLRTsQTqjdPulcVtvzt3xY/ daKyvt9IB+dCpxdXmPo4n/+0fCgJX3qK6WlaDbZAggwmOwhjJ/k+6wwObtzXFVE9 K8i+KAxs5wIDAQABo4ICkDCCAowwHQYDVR0OBBYEFLR+0ed53ngZaMpSqDK0CQRZ +2lVMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAaOpwAwQAaOp7AwQAaOqWAwQAaOry MA0GCSqGSIb3DQEBCwUAA4IBAQAvVuQqJNQMvJ7R2IV9rsGHUyDwmihrIPMqaEAG SrMQ+Em23/HbMePcns14HvQKUa9x42xt4I0uoN2rrczRt2uE/8ZbzkvlSg+xQMjC tmTkcJdUAGtbjqgDFv2HuiDN/M9O6PhZShI+LcgqORDj2Pi4jsRwYJ9Y5Fg8yAAe Ob1KCfBxD48IPaxnjulBA0Nl6+Cyd/dtnJnArzxWRE13Me9jt4XQq9c1EEsy56Vr YPVx03aSsaftWPnuHOGAvcNKeSgahBi8hMny1WiRDGn3mi/T5Yk4YEVPW87xk+qN nN0Jfq3WSVJZZAF3YbR6Xk+lojFgC1yfypw5dZtQEAawODbj -----END CERTIFICATE-----Generated at Sat Jul 4 17:19:23 2026 by rpki-client