$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: fqe9dzof6mcOM1/QryQMc1rYcX6db5GFko+ouGi1q8g= Subject key identifier: D4:40:FF:6B:26:AF:1C:AB:74:D7:D2:D4:B0:8D:75:77:17:5B:D5:69 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 2F8DD72E3DBFA4580432C0F9856F64FA582D9DF1 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa Signing time: Mon 23 Sep 2024 07:22:39 +0000 ROA not before: Mon 23 Sep 2024 07:17:39 +0000 ROA not after: Mon 22 Sep 2025 07:22:39 +0000 asID: 20473 IP address blocks: 192.228.119.0/24 maxlen: 24 192.228.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 08:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:8d:d7:2e:3d:bf:a4:58:04:32:c0:f9:85:6f:64:fa:58:2d:9d:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Sep 23 07:17:39 2024 GMT Not After : Sep 22 07:22:39 2025 GMT Subject: CN=D440FF6B26AF1CAB74D7D2D4B08D7577175BD569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cf:04:4e:76:ac:ef:b9:ef:a4:0c:04:ac:f5: 18:bc:6a:3e:47:b7:0c:cd:c6:08:a1:10:f7:44:15: 56:c0:24:12:c0:a1:51:7e:23:39:a0:c3:38:38:ef: 77:c5:62:5b:3d:ec:94:37:7e:c7:da:0c:f1:f4:73: a9:c3:59:b7:98:78:7b:c9:34:bc:a7:eb:40:00:c8: 31:ff:b4:ff:cf:4a:4f:d7:0f:15:11:60:72:e8:7f: e1:8c:01:0b:12:56:cc:10:8b:d4:7d:c8:8c:17:ec: 58:07:34:4f:e8:83:8b:8e:c6:8b:3c:ff:75:1b:d8: 04:a7:09:e3:2d:81:f1:01:44:81:82:d4:c6:f2:d4: e8:f0:ca:47:3c:8f:a4:e5:9a:2d:30:6f:9c:e2:d8: de:0a:7f:a4:c8:78:2a:ed:fd:9b:aa:95:12:8d:49: 58:e7:8c:87:d1:7b:66:ac:64:3a:d8:4d:c8:8a:3e: 4c:e2:22:9c:9a:e4:91:24:2a:b0:ec:b6:23:2c:4a: 32:e7:7f:f8:41:d7:9c:6f:ae:86:a4:88:cc:f7:de: 0f:19:0c:b2:07:f7:71:0b:e4:2e:2e:c1:53:c0:0a: ee:fa:d8:31:c7:1a:62:98:db:9b:a1:1b:00:b9:06: 7b:36:f1:b4:67:4b:3b:a8:f5:91:e7:a5:bb:61:13: ab:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:40:FF:6B:26:AF:1C:AB:74:D7:D2:D4:B0:8D:75:77:17:5B:D5:69 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.228.119.0/24 192.228.122.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:19:0f:5c:10:c9:2c:a7:da:58:fc:65:3d:9c:9b:17:54:82: 05:19:4e:4d:ed:bf:cd:a8:1d:94:1c:1d:75:e7:e9:d8:e4:9a: 00:55:43:b6:04:3d:ba:d8:7c:5b:9e:d7:f0:29:c8:d6:37:a6: 6d:24:c4:b2:38:d0:1f:be:da:33:46:fd:41:c9:bb:6a:55:44: 05:fc:2e:62:f6:66:0e:f2:04:ab:9c:66:c3:02:76:1b:c5:fa: 91:41:64:b3:47:ea:9a:db:d5:65:ef:8d:fc:30:6f:b1:8d:49: 7b:e9:ee:5e:f9:07:7d:a9:50:f9:83:f3:dc:f4:da:fd:39:b7: 6a:70:0a:4b:0a:60:8c:bb:14:fc:80:48:ba:cb:fe:34:db:6f: 3b:27:92:70:17:9f:19:1d:24:8b:93:43:6a:e1:13:6a:90:6c: fb:6f:ee:29:a3:13:3b:de:61:d0:1e:2c:cd:21:77:38:36:4d: 1e:dd:71:9b:94:1a:d7:08:60:73:1d:59:a4:d7:6d:2f:3d:49: 34:81:ad:35:47:06:9b:6d:c7:60:f1:c5:44:78:2e:a0:de:80: e2:ed:b8:52:6c:f7:36:00:dd:ae:44:50:08:1f:36:48:7c:96: ba:f1:50:6a:e8:fc:95:d1:de:01:a6:3b:6f:eb:42:23:c4:ba: b1:c1:f2:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUL43XLj2/pFgEMsD5hW9k+lgtnfEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjQwOTIzMDcxNzM5WhcNMjUwOTIyMDcyMjM5 WjAzMTEwLwYDVQQDEyhENDQwRkY2QjI2QUYxQ0FCNzREN0QyRDRCMDhENzU3NzE3 NUJENTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos8ETnas77nv pAwErPUYvGo+R7cMzcYIoRD3RBVWwCQSwKFRfiM5oMM4OO93xWJbPeyUN37H2gzx 9HOpw1m3mHh7yTS8p+tAAMgx/7T/z0pP1w8VEWBy6H/hjAELElbMEIvUfciMF+xY BzRP6IOLjsaLPP91G9gEpwnjLYHxAUSBgtTG8tTo8MpHPI+k5ZotMG+c4tjeCn+k yHgq7f2bqpUSjUlY54yH0XtmrGQ62E3Iij5M4iKcmuSRJCqw7LYjLEoy53/4Qdec b66GpIjM994PGQyyB/dxC+QuLsFTwAru+tgxxxpimNuboRsAuQZ7NvG0Z0s7qPWR 56W7YROrwQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFNRA/2smrxyrdNfS1LCNdXcX W9VpMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwOR3AwQAwOR6MA0GCSqGSIb3DQEB CwUAA4IBAQBOGQ9cEMksp9pY/GU9nJsXVIIFGU5N7b/NqB2UHB115+nY5JoAVUO2 BD262HxbntfwKcjWN6ZtJMSyONAfvtozRv1BybtqVUQF/C5i9mYO8gSrnGbDAnYb xfqRQWSzR+qa29Vl7438MG+xjUl76e5e+Qd9qVD5g/Pc9Nr9ObdqcApLCmCMuxT8 gEi6y/402287J5JwF58ZHSSLk0Nq4RNqkGz7b+4poxM73mHQHizNIXc4Nk0e3XGb lBrXCGBzHVmk120vPUk0ga01Rwabbcdg8cVEeC6g3oDi7bhSbPc2AN2uRFAIHzZI fJa68VBq6PyV0d4Bpjtv60IjxLqxwfLc -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:09 2025 by rpki-client