$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: Ybg4iSoNfIyJBf5fXwDmX1xfzhdEAuE+ZKHYEpuVHA8= Subject key identifier: 46:B2:22:E9:9F:0A:40:F0:C5:3D:F3:30:63:CA:99:89:FF:92:70:00 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 62EAD85C477BF5F7AC7C90ADB1E8FFD0A662AC98 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa Signing time: Fri 30 May 2025 19:18:20 +0000 ROA not before: Fri 30 May 2025 19:13:20 +0000 ROA not after: Fri 29 May 2026 19:18:20 +0000 asID: 20473 IP address blocks: 23.226.140.0/23 maxlen: 24 23.226.143.0/24 maxlen: 24 66.63.167.0/24 maxlen: 24 72.11.136.0/23 maxlen: 24 96.47.228.0/24 maxlen: 24 96.47.231.0/24 maxlen: 24 96.47.236.0/23 maxlen: 24 104.129.44.0/24 maxlen: 24 104.129.55.0/24 maxlen: 24 107.150.28.0/23 maxlen: 24 167.160.163.0/24 maxlen: 24 167.160.172.0/24 maxlen: 24 167.160.174.0/23 maxlen: 24 173.44.37.0/24 maxlen: 24 173.44.42.0/23 maxlen: 24 173.44.45.0/24 maxlen: 24 173.44.47.0/24 maxlen: 24 173.44.48.0/22 maxlen: 24 173.44.52.0/23 maxlen: 24 173.44.54.0/24 maxlen: 24 173.44.56.0/23 maxlen: 24 173.44.59.0/24 maxlen: 24 173.44.63.0/24 maxlen: 24 192.228.120.0/23 maxlen: 24 209.200.237.0/24 maxlen: 24 216.97.225.0/24 maxlen: 24 216.97.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 17:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ea:d8:5c:47:7b:f5:f7:ac:7c:90:ad:b1:e8:ff:d0:a6:62:ac:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: May 30 19:13:20 2025 GMT Not After : May 29 19:18:20 2026 GMT Subject: CN=46B222E99F0A40F0C53DF33063CA9989FF927000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5e:b9:de:17:a7:e3:c2:f6:a3:ae:21:4e:33: 99:a2:b2:fb:05:07:0e:0d:fa:68:df:3f:3d:2f:8f: 83:21:c5:3c:34:03:c4:c7:87:e7:79:cd:45:0d:0c: e7:12:1a:42:db:67:ef:98:51:d9:eb:c9:63:3a:52: a8:39:d9:14:35:67:72:4e:75:02:c1:fa:ca:d9:db: 77:2c:3a:9b:4f:59:61:67:f3:f9:34:4d:80:06:21: 29:14:da:32:1d:ee:1b:f7:92:4e:10:18:a3:ee:f3: c0:37:75:dc:80:3b:8c:83:5e:ae:0e:a5:55:20:10: 10:89:76:5a:32:85:eb:17:a5:22:ea:9c:d5:01:08: 48:b6:fc:f1:7e:8f:f5:10:e2:31:d9:39:c5:e3:dc: e7:ce:ec:7f:82:00:33:82:54:22:76:26:95:74:6f: 0e:ad:e1:7b:fa:b3:05:93:5e:2e:8a:98:fc:ce:e2: 27:53:58:59:3b:ed:52:da:6a:0a:5d:b6:5e:3c:c3: ff:23:3c:0a:a3:ef:f3:69:9a:3b:a8:4e:bb:45:e3: b1:4e:17:a6:2b:94:f0:da:4e:06:55:80:e5:cb:03: 5b:e8:ca:13:7e:55:72:29:00:b4:d0:1d:1b:d3:50: 97:1e:10:ee:54:9c:9e:74:82:e3:6d:82:bc:8f:0e: 6e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B2:22:E9:9F:0A:40:F0:C5:3D:F3:30:63:CA:99:89:FF:92:70:00 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.226.140.0/23 23.226.143.0/24 66.63.167.0/24 72.11.136.0/23 96.47.228.0/24 96.47.231.0/24 96.47.236.0/23 104.129.44.0/24 104.129.55.0/24 107.150.28.0/23 167.160.163.0/24 167.160.172.0/24 167.160.174.0/23 173.44.37.0/24 173.44.42.0/23 173.44.45.0/24 173.44.47.0-173.44.54.255 173.44.56.0/23 173.44.59.0/24 173.44.63.0/24 192.228.120.0/23 209.200.237.0/24 216.97.225.0/24 216.97.228.0/23 Signature Algorithm: sha256WithRSAEncryption b2:ab:bb:3b:08:ca:4f:eb:17:06:1b:d6:ed:da:b3:87:2e:55: 19:9c:2a:3f:ec:8a:89:5a:15:69:d2:06:e1:a9:9a:b2:3d:09: 06:a3:c8:43:85:8e:c3:fb:e3:c6:cb:85:04:6f:93:43:16:1a: 56:01:bf:4f:c5:b5:38:8a:71:b1:e8:e9:42:6f:2d:91:29:e5: 59:a0:c7:d3:49:b1:dd:91:77:4d:e6:45:94:aa:52:9f:b3:80: a3:9f:5d:48:18:c0:45:75:e1:82:c1:6f:2e:1b:c7:97:a1:10: bc:c2:d9:88:7b:39:1c:fd:9f:ea:ea:76:8e:22:c9:04:e7:f4: c2:7c:67:5d:34:e5:1d:f1:f9:ab:e1:fd:e6:f8:af:58:a1:f0: b9:65:09:9b:f5:c2:ff:b8:33:30:8d:73:10:48:eb:0e:2d:c7: ad:a6:ff:81:2a:1c:95:9b:02:69:6a:29:a8:c8:43:25:79:23: 12:82:28:86:dc:3a:2c:d1:ef:92:10:02:dc:a1:02:b6:6c:d1: d8:12:ec:20:51:12:0f:1c:57:dd:a0:f7:8c:e8:a6:58:39:39: 9b:db:43:db:19:ad:e8:28:f1:82:6f:91:fa:d7:ae:48:42:0b: 5c:f7:3e:d5:de:42:a5:33:6a:1f:51:d1:12:9e:08:43:27:38: f4:6b:fa:6c -----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgIUYurYXEd79fesfJCtsej/0KZirJgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNTMwMTkxMzIwWhcNMjYwNTI5MTkxODIw WjAzMTEwLwYDVQQDEyg0NkIyMjJFOTlGMEE0MEYwQzUzREYzMzA2M0NBOTk4OUZG OTI3MDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl653hen48L2 o64hTjOZorL7BQcODfpo3z89L4+DIcU8NAPEx4fnec1FDQznEhpC22fvmFHZ68lj OlKoOdkUNWdyTnUCwfrK2dt3LDqbT1lhZ/P5NE2ABiEpFNoyHe4b95JOEBij7vPA N3XcgDuMg16uDqVVIBAQiXZaMoXrF6Ui6pzVAQhItvzxfo/1EOIx2TnF49znzux/ ggAzglQidiaVdG8OreF7+rMFk14uipj8zuInU1hZO+1S2moKXbZePMP/IzwKo+/z aZo7qE67ReOxThemK5Tw2k4GVYDlywNb6MoTflVyKQC00B0b01CXHhDuVJyedILj bYK8jw5uSwIDAQABo4IDFTCCAxEwHQYDVR0OBBYEFEayIumfCkDwxT3zMGPKmYn/ knAAMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIG1 BggrBgEFBQcBBwEB/wSBpTCBojCBnwQCAAEwgZgDBAEX4owDBAAX4o8DBABCP6cD BAFIC4gDBABgL+QDBABgL+cDBAFgL+wDBABogSwDBABogTcDBAFrlhwDBACnoKMD BACnoKwDBAGnoK4DBACtLCUDBAGtLCoDBACtLC0wDAMEAK0sLwMEAK0sNgMEAa0s OAMEAK0sOwMEAK0sPwMEAcDkeAMEANHI7QMEANhh4QMEAdhh5DANBgkqhkiG9w0B AQsFAAOCAQEAsqu7OwjKT+sXBhvW7dqzhy5VGZwqP+yKiVoVadIG4amasj0JBqPI Q4WOw/vjxsuFBG+TQxYaVgG/T8W1OIpxsejpQm8tkSnlWaDH00mx3ZF3TeZFlKpS n7OAo59dSBjARXXhgsFvLhvHl6EQvMLZiHs5HP2f6up2jiLJBOf0wnxnXTTlHfH5 q+H95vivWKHwuWUJm/XC/7gzMI1zEEjrDi3Hrab/gSoclZsCaWopqMhDJXkjEoIo htw6LNHvkhAC3KECtmzR2BLsIFESDxxX3aD3jOimWDk5m9tD2xmt6Cjxgm+R+teu SEILXPc+1d5CpTNqH1HREp4IQyc49Gv6bA== -----END CERTIFICATE-----Generated at Sat Jun 7 04:05:42 2025 by rpki-client