$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: MKzcSurFt6g5Ay7zDoPkHH27+xnqTAn2+gZYYHzcOgs= Subject key identifier: FE:53:11:C1:DD:28:C1:E2:E0:E9:FB:93:4C:3A:AD:BB:0A:D8:20:0B Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 05C74483D8814A5F72DA9593C75E3FC9F9CDE69E Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS20473.roa Signing time: Tue 17 Dec 2024 13:47:51 +0000 ROA not before: Tue 17 Dec 2024 13:42:51 +0000 ROA not after: Tue 16 Dec 2025 13:47:51 +0000 asID: 20473 IP address blocks: 157.254.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c7:44:83:d8:81:4a:5f:72:da:95:93:c7:5e:3f:c9:f9:cd:e6:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Dec 17 13:42:51 2024 GMT Not After : Dec 16 13:47:51 2025 GMT Subject: CN=FE5311C1DD28C1E2E0E9FB934C3AADBB0AD8200B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ab:45:0f:f0:04:8f:29:6f:14:c6:81:74:c5: a8:96:5f:a7:00:61:23:c1:76:55:6a:a0:87:0b:1f: 64:e0:e3:c4:05:d8:d1:0c:17:c3:7c:a3:1f:36:e4: 5b:d7:dd:a6:0c:b1:19:e0:0c:8b:f1:aa:4f:f5:7f: 6a:4d:db:70:7f:c4:1f:f8:46:81:c8:2a:fc:7f:6e: a5:8a:5d:a7:36:8b:ef:6e:21:ab:c6:40:56:06:18: 05:e0:4c:c3:50:3e:37:56:0d:d3:ed:4f:f1:0c:fc: 9b:c3:45:4d:a2:f5:cf:32:39:2c:30:a9:73:ab:17: 1c:3b:74:ad:d7:5c:ae:21:bd:26:63:03:05:e3:13: a5:ff:64:4a:32:e5:be:c3:60:66:89:b7:84:8b:10: e0:1a:ad:b2:b8:c7:e0:e6:5e:87:06:ee:f1:70:30: 5a:4a:a5:b3:1a:ec:23:22:d4:de:7a:f8:70:3c:7e: 3f:45:47:74:06:85:77:5d:ae:86:73:cb:b4:16:e5: 3d:9a:1b:a3:97:a6:bf:e4:8c:2f:11:11:6b:21:d5: b8:50:dc:00:a0:44:4f:c1:69:34:96:cb:81:87:ab: 33:27:ba:f2:a6:34:91:18:1d:c6:2d:ee:5b:4b:d1: de:41:b8:bd:6c:f6:cc:fa:f8:14:06:e9:3e:93:a7: 2b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:53:11:C1:DD:28:C1:E2:E0:E9:FB:93:4C:3A:AD:BB:0A:D8:20:0B X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.51.0/24 Signature Algorithm: sha256WithRSAEncryption 49:df:11:cc:57:9a:37:71:06:23:a6:52:d5:e0:8d:c3:87:3c: 3c:0b:e0:98:52:76:fb:f5:22:d7:5f:94:91:9f:bb:25:a2:82: 7a:17:65:bb:64:10:b2:81:4b:c9:53:76:17:f4:d7:6b:11:18: 21:56:92:82:8f:8c:a3:8d:e1:51:fd:f3:78:4e:f4:d3:48:2f: 09:d6:4c:2d:0f:e2:04:45:de:28:ff:7d:5a:ce:86:ba:b2:2f: 4d:8d:2e:1a:35:55:e7:0b:86:98:3b:48:d9:90:33:6f:42:27: 32:86:de:2a:16:b7:0c:41:76:03:22:3f:a5:85:79:19:05:e0: 44:78:7c:3f:2c:55:d2:55:60:53:2c:3e:11:05:b3:11:0d:09: 54:52:70:b9:be:65:fe:93:81:d9:1b:a1:46:14:b5:04:c2:6b: 9d:5a:11:a0:41:67:47:0f:f9:58:4e:cd:60:ae:ed:b7:7b:5f: 6a:57:37:77:27:a6:f2:cc:a0:6a:ff:0b:d9:95:c6:6b:ac:5b: 44:7c:3a:ba:c2:bf:8c:3c:a1:a1:19:90:14:99:b1:b9:ad:d7: eb:f2:c8:ed:61:1b:ca:0d:9d:0e:49:4c:6b:27:da:30:6f:46: fa:2d:1b:64:cd:4b:42:62:5e:2b:d1:41:60:a3:f7:b4:30:2c: 34:b3:42:34 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUBcdEg9iBSl9y2pWTx14/yfnN5p4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQxMjE3MTM0MjUxWhcNMjUxMjE2MTM0NzUx WjAzMTEwLwYDVQQDEyhGRTUzMTFDMUREMjhDMUUyRTBFOUZCOTM0QzNBQURCQjBB RDgyMDBCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KtFD/AEjylv FMaBdMWoll+nAGEjwXZVaqCHCx9k4OPEBdjRDBfDfKMfNuRb192mDLEZ4AyL8apP 9X9qTdtwf8Qf+EaByCr8f26lil2nNovvbiGrxkBWBhgF4EzDUD43Vg3T7U/xDPyb w0VNovXPMjksMKlzqxccO3St11yuIb0mYwMF4xOl/2RKMuW+w2BmibeEixDgGq2y uMfg5l6HBu7xcDBaSqWzGuwjItTeevhwPH4/RUd0BoV3Xa6Gc8u0FuU9mhujl6a/ 5IwvERFrIdW4UNwAoERPwWk0lsuBh6szJ7rypjSRGB3GLe5bS9HeQbi9bPbM+vgU Buk+k6crMQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFP5TEcHdKMHi4On7k0w6rbsK 2CALMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf4zMA0GCSqGSIb3DQEBCwUAA4IB AQBJ3xHMV5o3cQYjplLV4I3Dhzw8C+CYUnb79SLXX5SRn7slooJ6F2W7ZBCygUvJ U3YX9NdrERghVpKCj4yjjeFR/fN4TvTTSC8J1kwtD+IERd4o/31azoa6si9NjS4a NVXnC4aYO0jZkDNvQicyht4qFrcMQXYDIj+lhXkZBeBEeHw/LFXSVWBTLD4RBbMR DQlUUnC5vmX+k4HZG6FGFLUEwmudWhGgQWdHD/lYTs1gru23e19qVzd3J6byzKBq /wvZlcZrrFtEfDq6wr+MPKGhGZAUmbG5rdfr8sjtYRvKDZ0OSUxrJ9owb0b6LRtk zUtCYl4r0UFgo/e0MCw0s0I0 -----END CERTIFICATE-----Generated at Sat Apr 5 10:54:49 2025 by rpki-client