
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: C/aPjeVckQ/sxBoGYrK6QMW1zUQCjYizdsUR/shkeeA=
Subject key identifier: B5:66:73:BF:3E:CC:3F:FA:81:C7:38:36:44:01:2B:B9:29:D5:4E:89
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 7E3941664E18B79D766CE6A5DD1CE16877D38ACF
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa
Signing time: Wed 22 Jul 2026 05:26:39 +0000
ROA not before: Wed 22 Jul 2026 05:21:39 +0000
ROA not after: Wed 21 Jul 2027 05:26:39 +0000
asID: 20473
IP address blocks: 104.234.150.0/24 maxlen: 24
104.234.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 23:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:39:41:66:4e:18:b7:9d:76:6c:e6:a5:dd:1c:e1:68:77:d3:8a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jul 22 05:21:39 2026 GMT
Not After : Jul 21 05:26:39 2027 GMT
Subject: CN=B56673BF3ECC3FFA81C7383644012BB929D54E89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:83:e4:42:c0:17:a8:59:ba:fa:84:55:b6:55:
ff:89:3b:0f:be:fb:39:16:3d:51:9d:8e:01:36:c0:
4c:40:e8:70:bc:bb:1e:1a:3e:ae:f8:c6:c7:d3:82:
1e:08:8d:0a:6a:55:4d:35:57:52:22:d4:b3:1c:67:
e6:25:96:db:f0:11:14:a2:86:53:ec:fe:2e:b7:81:
05:a7:55:0e:b3:69:87:c0:33:9f:a1:13:d5:2a:ad:
19:29:ba:aa:e5:63:97:88:ff:5f:5d:ff:48:eb:2a:
0f:32:43:c2:f7:c6:f5:53:e2:15:aa:db:be:b0:af:
84:c5:40:b8:d3:42:ec:67:62:50:c8:12:2e:d4:be:
f6:ea:db:c1:83:df:c2:7f:fb:dd:c0:fa:b5:6c:be:
7b:61:3c:7f:ce:dc:7e:8c:33:f4:02:13:6a:90:52:
57:59:c1:d2:cf:d3:b1:ce:6b:96:dc:db:48:f4:88:
91:78:ef:86:7d:34:c2:3a:8c:01:27:b9:bb:89:64:
e5:3c:da:89:71:b8:fd:d6:9b:83:94:32:76:86:98:
f6:6c:b9:18:fb:34:6f:61:70:78:b8:c9:a1:7e:2b:
74:66:ae:79:51:b1:e9:44:d2:01:82:57:d9:3b:84:
4b:f5:b2:db:12:fd:dd:2d:37:12:ae:b5:e0:e8:4b:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:66:73:BF:3E:CC:3F:FA:81:C7:38:36:44:01:2B:B9:29:D5:4E:89
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.150.0/24
104.234.242.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:cc:09:d3:f7:2a:be:20:78:e7:ef:7e:f5:45:48:8f:84:b9:
1a:80:c9:61:01:c6:c3:d0:3b:92:7e:90:c4:14:39:31:61:9c:
35:82:47:0c:84:24:1f:2a:fb:5c:92:56:a5:c7:06:83:71:5c:
71:93:56:be:47:d9:04:f1:3e:e7:e9:72:2a:f7:45:d0:2f:df:
e8:47:a7:2b:2a:ed:e5:d8:df:b0:c1:07:e1:56:d2:33:b4:a4:
1b:06:8b:83:8b:98:92:be:f0:eb:8f:fa:76:5c:0a:22:f2:9a:
9e:9c:70:e4:8e:86:32:81:ec:e6:44:88:82:80:4c:f6:e6:57:
55:90:76:28:d6:f0:50:a3:a0:ba:a0:d9:e8:ef:7c:14:d1:3d:
50:8c:22:d3:fc:c1:73:78:1c:1c:2a:90:70:00:0f:ab:ea:4b:
c4:55:d9:44:17:da:63:50:ae:c4:eb:4c:28:c5:4a:13:2a:08:
57:f4:2a:9e:45:55:1b:12:30:ba:5f:5c:bb:ac:b7:51:14:88:
f4:0b:34:0e:8f:4b:9f:31:59:7b:f3:51:3a:35:ea:13:4d:01:
11:16:fe:ef:69:53:6d:57:66:29:6a:2d:c2:5e:18:86:eb:b0:
ab:16:b3:77:8c:1d:90:28:04:0a:9d:2e:bf:ec:73:bd:65:53:
39:e4:bc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:41:43 2026 by rpki-client