$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: GucWPCajuP3p9JDT9vYZVzOUx5UglsHRTurgCoRa1kI= Subject key identifier: A2:49:EC:BA:FD:5B:B2:47:18:AB:96:6B:19:D3:36:AB:30:B1:FA:18 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 44D336BF31BF24E14F3C86374BD89BBEECB8F390 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa Signing time: Wed 27 Aug 2025 00:00:07 +0000 ROA not before: Tue 26 Aug 2025 23:55:07 +0000 ROA not after: Wed 26 Aug 2026 00:00:07 +0000 asID: 20473 IP address blocks: 23.226.140.0/23 maxlen: 24 23.226.143.0/24 maxlen: 24 66.63.167.0/24 maxlen: 24 72.11.136.0/23 maxlen: 24 96.47.228.0/24 maxlen: 24 96.47.231.0/24 maxlen: 24 96.47.236.0/23 maxlen: 24 104.129.44.0/24 maxlen: 24 104.129.55.0/24 maxlen: 24 107.150.28.0/23 maxlen: 24 167.160.163.0/24 maxlen: 24 167.160.172.0/24 maxlen: 24 167.160.174.0/23 maxlen: 24 173.44.37.0/24 maxlen: 24 173.44.42.0/23 maxlen: 24 173.44.45.0/24 maxlen: 24 173.44.47.0/24 maxlen: 24 173.44.48.0/22 maxlen: 24 173.44.52.0/23 maxlen: 24 173.44.54.0/24 maxlen: 24 173.44.56.0/23 maxlen: 24 173.44.59.0/24 maxlen: 24 173.44.63.0/24 maxlen: 24 216.97.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Sep 2025 11:09:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d3:36:bf:31:bf:24:e1:4f:3c:86:37:4b:d8:9b:be:ec:b8:f3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Aug 26 23:55:07 2025 GMT Not After : Aug 26 00:00:07 2026 GMT Subject: CN=A249ECBAFD5BB24718AB966B19D336AB30B1FA18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c0:56:3c:55:c8:7b:51:2d:a5:62:90:7f:7e: 8a:63:35:b0:ff:06:89:32:22:ea:57:9d:80:f6:85: e0:96:5b:4b:02:2e:46:7e:31:c7:ce:45:b8:29:13: 9d:0a:e5:d6:e0:e8:78:be:af:a9:5c:24:0b:a2:e8: a9:42:7e:ab:6d:78:8c:f2:68:56:75:93:3f:b6:81: ba:3d:a2:f4:a3:08:d4:85:58:a2:3f:17:63:0d:bd: a0:a0:52:59:53:eb:48:4c:59:0f:61:de:88:ba:6f: f7:10:42:af:44:44:bc:d6:26:e8:b7:27:27:54:88: 38:85:d7:79:cb:e4:d3:16:00:e2:ab:48:8f:2d:5a: 54:5e:13:e4:bb:70:63:57:7e:97:d6:b5:16:0b:81: 56:a5:d9:0f:ef:65:9d:3f:52:ff:ba:d8:45:c3:85: b9:fc:11:42:96:a6:6d:c8:8b:49:ff:73:36:9c:7f: 3b:58:62:c2:24:99:e8:58:4c:e9:c6:b6:c7:4a:eb: f1:cc:2f:84:6f:55:0e:0d:b1:9b:d6:4b:a1:a9:92: 17:38:1f:82:07:60:6d:67:6a:10:7f:0f:27:75:eb: 9f:16:60:26:00:62:24:1a:8a:9f:3b:a5:27:63:25: 6c:29:1f:f3:09:8e:7d:c6:c8:c8:f3:86:aa:e9:80: f5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:49:EC:BA:FD:5B:B2:47:18:AB:96:6B:19:D3:36:AB:30:B1:FA:18 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.226.140.0/23 23.226.143.0/24 66.63.167.0/24 72.11.136.0/23 96.47.228.0/24 96.47.231.0/24 96.47.236.0/23 104.129.44.0/24 104.129.55.0/24 107.150.28.0/23 167.160.163.0/24 167.160.172.0/24 167.160.174.0/23 173.44.37.0/24 173.44.42.0/23 173.44.45.0/24 173.44.47.0-173.44.54.255 173.44.56.0/23 173.44.59.0/24 173.44.63.0/24 216.97.225.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:90:06:8d:99:86:86:b9:b4:f4:62:a1:9e:d1:bd:94:46:09: 9c:7a:05:f0:b9:e1:88:78:11:13:ee:01:5f:2a:4a:c3:a5:47: 9d:61:81:f8:c2:d4:de:1c:ae:fa:22:ac:e6:21:58:4a:e4:4c: 4c:e4:79:c9:5e:81:25:df:a5:72:a4:73:2c:98:3a:3f:6d:a5: eb:68:5d:5b:e8:f0:13:b7:8f:84:67:d3:34:4a:09:10:42:3c: 1d:98:95:ea:01:17:4e:e0:dd:ab:2f:77:67:21:26:2e:73:86: fc:74:a7:63:5b:c5:7a:c2:dd:0a:10:11:9f:25:21:80:65:2b: f1:f8:0d:ce:6f:ea:32:4b:fa:85:aa:36:99:a8:d8:5e:e5:0a: e3:73:ac:c8:98:c7:1d:03:d7:98:bf:d1:5e:8c:45:50:74:ec: 88:23:73:6d:7a:f4:0d:fa:36:3f:fe:43:7e:d4:f0:d5:e7:c0: c0:81:8f:e7:78:e3:29:58:c3:07:6e:a3:a3:c4:e0:38:39:00: d0:9a:d4:c5:e7:ac:46:a5:92:bc:9d:36:02:63:2c:04:d1:7f: f1:48:2e:d6:1b:ad:9d:ca:40:6b:df:b3:c8:7c:db:fb:08:1e: 86:88:57:e0:19:cb:20:65:0d:73:5d:5b:44:b2:c4:8b:31:b6: 76:c1:ac:50 -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgIURNM2vzG/JOFPPIY3S9ibvuy485AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwODI2MjM1NTA3WhcNMjYwODI2MDAwMDA3 WjAzMTEwLwYDVQQDEyhBMjQ5RUNCQUZENUJCMjQ3MThBQjk2NkIxOUQzMzZBQjMw QjFGQTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38BWPFXIe1Et pWKQf36KYzWw/waJMiLqV52A9oXglltLAi5GfjHHzkW4KROdCuXW4Oh4vq+pXCQL ouipQn6rbXiM8mhWdZM/toG6PaL0owjUhViiPxdjDb2goFJZU+tITFkPYd6Ium/3 EEKvRES81ibotycnVIg4hdd5y+TTFgDiq0iPLVpUXhPku3BjV36X1rUWC4FWpdkP 72WdP1L/uthFw4W5/BFClqZtyItJ/3M2nH87WGLCJJnoWEzpxrbHSuvxzC+Eb1UO DbGb1kuhqZIXOB+CB2BtZ2oQfw8ndeufFmAmAGIkGoqfO6UnYyVsKR/zCY59xsjI 84aq6YD11wIDAQABo4IDAzCCAv8wHQYDVR0OBBYEFKJJ7Lr9W7JHGKuWaxnTNqsw sfoYMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGj BggrBgEFBQcBBwEB/wSBkzCBkDCBjQQCAAEwgYYDBAEX4owDBAAX4o8DBABCP6cD BAFIC4gDBABgL+QDBABgL+cDBAFgL+wDBABogSwDBABogTcDBAFrlhwDBACnoKMD BACnoKwDBAGnoK4DBACtLCUDBAGtLCoDBACtLC0wDAMEAK0sLwMEAK0sNgMEAa0s OAMEAK0sOwMEAK0sPwMEANhh4TANBgkqhkiG9w0BAQsFAAOCAQEAP5AGjZmGhrm0 9GKhntG9lEYJnHoF8LnhiHgRE+4BXypKw6VHnWGB+MLU3hyu+iKs5iFYSuRMTOR5 yV6BJd+lcqRzLJg6P22l62hdW+jwE7ePhGfTNEoJEEI8HZiV6gEXTuDdqy93ZyEm LnOG/HSnY1vFesLdChARnyUhgGUr8fgNzm/qMkv6hao2majYXuUK43OsyJjHHQPX mL/RXoxFUHTsiCNzbXr0Dfo2P/5DftTw1efAwIGP53jjKVjDB26jo8TgODkA0JrU xeesRqWSvJ02AmMsBNF/8Ugu1hutncpAa9+zyHzb+wgehohX4BnLIGUNc11bRLLE izG2dsGsUA== -----END CERTIFICATE-----Generated at Sat Sep 13 19:52:49 2025 by rpki-client