$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: QXKFoFVvj+ubJ1OhPz7OVJpjFeKI8jHZrE8twhsIOEA= Subject key identifier: F1:56:83:D8:C3:D8:00:19:8C:D7:2C:99:DD:4A:BF:43:D0:04:86:12 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 215C0A4355829D2DB294E6C21FB1944E73EFE210 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa Signing time: Mon 06 Mar 2023 07:56:41 +0000 ROA not before: Mon 06 Mar 2023 07:51:41 +0000 ROA not after: Mon 04 Mar 2024 07:56:41 +0000 asID: 20473 IP address blocks: 98.142.241.0/24 maxlen: 24 104.234.68.0/24 maxlen: 24 104.234.194.0/24 maxlen: 24 104.234.242.0/24 maxlen: 24 206.53.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Mar 2023 20:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:5c:0a:43:55:82:9d:2d:b2:94:e6:c2:1f:b1:94:4e:73:ef:e2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Mar 6 07:51:41 2023 GMT Not After : Mar 4 07:56:41 2024 GMT Subject: CN=F15683D8C3D800198CD72C99DD4ABF43D0048612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ed:5e:c4:0e:76:59:30:ae:3d:73:5d:ce:77: ed:f1:93:7c:b5:92:36:bb:ca:b8:26:ac:49:20:55: 2b:a9:2e:be:73:26:59:19:2a:e1:63:ea:ae:d3:93: 9f:2f:a7:92:60:98:08:61:6d:f6:77:8e:7c:70:54: 66:6b:07:ae:10:40:f6:c7:8e:08:c0:77:87:ee:b0: bf:12:00:cb:8c:03:2f:1f:c1:63:d8:55:83:36:60: 9e:cd:b1:84:ef:d9:9f:05:88:3c:db:39:c5:89:b2: e8:51:23:b1:15:d7:b2:6c:bd:ce:25:5b:47:ed:4d: e1:4c:e8:a2:37:64:f4:60:ef:f4:6a:93:8f:1f:85: cc:b8:02:46:13:9b:10:75:46:55:a4:35:b5:a9:31: 78:25:f6:25:9f:bd:e2:64:cc:af:a4:5a:2e:27:49: 0f:ec:12:fd:d0:ca:f3:e1:00:61:cd:7e:55:1f:36: 86:5c:e3:5b:5d:0c:57:f1:41:6b:37:fb:26:a3:cd: 44:b3:79:f3:99:ed:72:90:92:57:74:dc:5a:1b:1d: 91:51:c2:8f:2f:61:3e:64:8f:9c:e0:ec:2e:8c:78: 97:89:b2:a5:67:da:e9:b8:9e:9a:f2:c4:41:e2:86: bd:fd:a8:7e:65:27:3c:54:44:50:49:18:5e:c1:2d: 50:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:56:83:D8:C3:D8:00:19:8C:D7:2C:99:DD:4A:BF:43:D0:04:86:12 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.142.241.0/24 104.234.68.0/24 104.234.194.0/24 104.234.242.0/24 206.53.50.0/24 Signature Algorithm: sha256WithRSAEncryption 10:4a:ba:0e:c2:9d:86:06:34:a7:a4:35:ca:be:a6:5e:e6:31: 32:4f:f5:8f:a8:eb:b0:a6:4a:06:71:08:c7:93:5c:6b:84:8a: 73:6b:f9:67:7a:84:43:7d:0e:60:8d:6a:2c:25:56:79:49:b4: 9a:20:a1:8f:bf:91:e7:5e:d0:e0:bb:cf:4c:ee:c3:c2:0c:fc: 54:a6:09:23:13:e5:c2:52:3c:ac:4c:aa:b4:24:65:33:0f:7d: 68:f4:9c:8f:b2:72:cc:57:4e:df:57:36:11:ce:3b:f7:78:28: e2:4d:a7:f5:17:5e:dc:f0:dd:bf:c3:05:bf:9c:ea:b5:67:b4: d6:6a:be:cb:e9:e7:11:3c:9b:96:c6:ad:a0:a1:f8:af:c2:20: 4e:54:bc:28:35:80:ad:c9:6b:e2:6a:31:8c:3c:7e:58:3d:e5: 7a:68:4e:44:c6:ba:5d:bb:a6:b4:26:b1:14:ca:2e:18:d8:20: 23:75:01:03:5d:5f:4d:ac:ff:31:1c:14:72:ba:85:26:00:b2: b6:11:f7:6f:00:49:df:68:63:cf:8f:31:23:ad:de:87:83:09: a8:4d:db:7a:c9:7e:c9:2d:95:59:44:85:e0:63:24:98:3b:f5: 8c:dd:bd:d9:8a:32:a3:4c:44:68:02:e9:45:e7:b8:bb:fd:a7: e0:f0:c1:9e -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUIVwKQ1WCnS2ylObCH7GUTnPv4hAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjMwMzA2MDc1MTQxWhcNMjQwMzA0MDc1NjQx WjAzMTEwLwYDVQQDEyhGMTU2ODNEOEMzRDgwMDE5OENENzJDOTlERDRBQkY0M0Qw MDQ4NjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu1exA52WTCu PXNdznft8ZN8tZI2u8q4JqxJIFUrqS6+cyZZGSrhY+qu05OfL6eSYJgIYW32d458 cFRmaweuEED2x44IwHeH7rC/EgDLjAMvH8Fj2FWDNmCezbGE79mfBYg82znFibLo USOxFdeybL3OJVtH7U3hTOiiN2T0YO/0apOPH4XMuAJGE5sQdUZVpDW1qTF4JfYl n73iZMyvpFouJ0kP7BL90Mrz4QBhzX5VHzaGXONbXQxX8UFrN/smo81Es3nzme1y kJJXdNxaGx2RUcKPL2E+ZI+c4OwujHiXibKlZ9rpuJ6a8sRB4oa9/ah+ZSc8VERQ SRhewS1QMQIDAQABo4ICljCCApIwHQYDVR0OBBYEFPFWg9jD2AAZjNcsmd1Kv0PQ BIYSMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAYo7xAwQAaOpEAwQAaOrCAwQAaOry AwQAzjUyMA0GCSqGSIb3DQEBCwUAA4IBAQAQSroOwp2GBjSnpDXKvqZe5jEyT/WP qOuwpkoGcQjHk1xrhIpza/lneoRDfQ5gjWosJVZ5SbSaIKGPv5HnXtDgu89M7sPC DPxUpgkjE+XCUjysTKq0JGUzD31o9JyPsnLMV07fVzYRzjv3eCjiTaf1F17c8N2/ wwW/nOq1Z7TWar7L6ecRPJuWxq2gofivwiBOVLwoNYCtyWviajGMPH5YPeV6aE5E xrpdu6a0JrEUyi4Y2CAjdQEDXV9NrP8xHBRyuoUmALK2EfdvAEnfaGPPjzEjrd6H gwmoTdt6yX7JLZVZRIXgYySYO/WM3b3ZijKjTERoAulF57i7/afg8MGe -----END CERTIFICATE-----Generated at Wed Mar 15 11:52:13 2023 by rpki-client on console-fra.rpki-client.org