$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: +LFSNXKhc0mw8U+DGDy8eCBqZUV91hLdzhqSOHXcQ7E= Subject key identifier: CA:04:13:1E:4D:D1:D5:D3:A3:25:92:4D:C5:B5:7B:C1:24:6B:9A:84 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 7CB8DE9E77F85637330A13E8F104B328690650E4 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa Signing time: Sat 28 Jun 2025 00:01:04 +0000 ROA not before: Fri 27 Jun 2025 23:56:04 +0000 ROA not after: Sat 27 Jun 2026 00:01:04 +0000 asID: 20473 IP address blocks: 23.226.140.0/23 maxlen: 24 23.226.143.0/24 maxlen: 24 64.50.190.0/23 maxlen: 24 66.63.167.0/24 maxlen: 24 72.11.136.0/23 maxlen: 24 96.47.228.0/24 maxlen: 24 96.47.231.0/24 maxlen: 24 96.47.236.0/23 maxlen: 24 104.129.44.0/24 maxlen: 24 104.129.55.0/24 maxlen: 24 107.150.28.0/23 maxlen: 24 167.160.163.0/24 maxlen: 24 167.160.172.0/24 maxlen: 24 167.160.174.0/23 maxlen: 24 173.44.37.0/24 maxlen: 24 173.44.42.0/23 maxlen: 24 173.44.45.0/24 maxlen: 24 173.44.47.0/24 maxlen: 24 173.44.48.0/22 maxlen: 24 173.44.52.0/23 maxlen: 24 173.44.54.0/24 maxlen: 24 173.44.56.0/23 maxlen: 24 173.44.59.0/24 maxlen: 24 173.44.63.0/24 maxlen: 24 209.200.237.0/24 maxlen: 24 216.97.225.0/24 maxlen: 24 216.227.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 07:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b8:de:9e:77:f8:56:37:33:0a:13:e8:f1:04:b3:28:69:06:50:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jun 27 23:56:04 2025 GMT Not After : Jun 27 00:01:04 2026 GMT Subject: CN=CA04131E4DD1D5D3A325924DC5B57BC1246B9A84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:bf:63:da:70:7f:2c:8b:b0:3c:c5:2c:a8:7c: 2d:2c:9e:5f:6e:2b:13:d8:d7:71:6b:75:a8:a8:a9: d8:8f:5b:b3:3a:f0:97:e8:ee:dc:e9:0d:6b:c1:23: 9c:a9:0f:33:fe:aa:c1:e9:7d:a7:b2:05:2e:bd:20: c9:75:63:46:5e:30:ea:16:06:17:f9:3b:2f:0f:44: 76:a3:1c:e5:d1:cf:25:a7:ea:c8:0f:e2:1e:35:ed: 77:3d:5e:36:76:c5:b5:b7:ae:05:8c:aa:3b:34:8d: 4b:0b:7e:56:ab:59:35:73:8e:ed:59:60:68:6f:24: 9d:1a:70:ec:ad:28:7a:56:7d:fc:f2:d1:de:fe:5c: c1:9d:16:ab:72:c0:d7:9e:e0:7d:51:c0:77:28:93: e4:08:de:b9:de:6e:26:ed:d0:03:7e:6a:26:ba:45: 62:a2:79:20:74:b0:ca:f1:46:e0:d8:33:e0:6a:ac: bf:1f:5c:82:33:06:99:26:0c:ec:0a:17:0c:a3:9a: b1:fe:c5:87:95:d6:6c:bd:55:c0:3b:11:3d:f3:8e: 67:69:ee:c0:c4:28:24:91:3a:f4:2d:8c:72:13:35: a4:25:49:38:57:0d:c0:8b:ef:d6:58:4c:cc:58:52: e8:80:f9:99:6f:fe:b8:a7:32:0e:59:63:7e:f6:f6: 12:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:04:13:1E:4D:D1:D5:D3:A3:25:92:4D:C5:B5:7B:C1:24:6B:9A:84 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.226.140.0/23 23.226.143.0/24 64.50.190.0/23 66.63.167.0/24 72.11.136.0/23 96.47.228.0/24 96.47.231.0/24 96.47.236.0/23 104.129.44.0/24 104.129.55.0/24 107.150.28.0/23 167.160.163.0/24 167.160.172.0/24 167.160.174.0/23 173.44.37.0/24 173.44.42.0/23 173.44.45.0/24 173.44.47.0-173.44.54.255 173.44.56.0/23 173.44.59.0/24 173.44.63.0/24 209.200.237.0/24 216.97.225.0/24 216.227.216.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:dc:58:f1:42:c2:9f:e7:f3:1c:02:90:71:d3:f4:6a:bb:cd: 47:1f:7d:d1:da:56:d6:63:6e:7e:e3:79:f8:97:c4:15:84:fb: 49:7a:4e:ac:6e:54:46:32:8a:11:33:8a:d4:1c:e3:8f:a2:23: d6:db:34:12:79:23:b4:3a:06:0e:77:bd:73:ff:59:bf:6b:86: d5:a3:f3:25:92:f1:bf:87:90:f4:29:70:3b:9d:63:13:5d:97: e9:32:df:11:0a:26:3d:f8:44:c4:b6:47:3f:27:be:47:4d:0d: 46:17:2a:bd:75:59:e9:c8:74:7c:47:7b:7d:ae:3c:0a:66:3e: df:de:e0:28:aa:c4:43:c5:30:06:1c:b8:61:0e:0f:57:fe:8b: e7:a0:68:5b:0a:a9:b8:6e:53:78:cd:f3:80:59:7c:55:0e:72: 21:6e:ee:64:aa:d7:96:dc:38:5e:a2:1f:32:38:78:1e:94:71: e5:78:fc:79:78:80:25:e5:2c:40:e6:34:fc:9a:aa:13:a9:2c: 90:73:be:1f:e3:fb:c0:2d:30:8d:d0:46:84:42:9c:6c:ed:55: 23:48:5d:93:39:f1:88:f0:34:8a:61:a4:7e:33:68:b7:7e:e8: 8c:32:63:60:31:23:3c:f5:83:60:da:d7:4a:ba:ce:cf:33:4b: ac:bb:c9:e4 -----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgIUfLjennf4VjczChPo8QSzKGkGUOQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNjI3MjM1NjA0WhcNMjYwNjI3MDAwMTA0 WjAzMTEwLwYDVQQDEyhDQTA0MTMxRTRERDFENUQzQTMyNTkyNERDNUI1N0JDMTI0 NkI5QTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA779j2nB/LIuw PMUsqHwtLJ5fbisT2Ndxa3WoqKnYj1uzOvCX6O7c6Q1rwSOcqQ8z/qrB6X2nsgUu vSDJdWNGXjDqFgYX+TsvD0R2oxzl0c8lp+rID+IeNe13PV42dsW1t64FjKo7NI1L C35Wq1k1c47tWWBobySdGnDsrSh6Vn388tHe/lzBnRarcsDXnuB9UcB3KJPkCN65 3m4m7dADfmomukVionkgdLDK8Ubg2DPgaqy/H1yCMwaZJgzsChcMo5qx/sWHldZs vVXAOxE9845nae7AxCgkkTr0LYxyEzWkJUk4Vw3Ai+/WWEzMWFLogPmZb/64pzIO WWN+9vYSCwIDAQABo4IDFTCCAxEwHQYDVR0OBBYEFMoEEx5N0dXToyWSTcW1e8Ek a5qEMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIG1 BggrBgEFBQcBBwEB/wSBpTCBojCBnwQCAAEwgZgDBAEX4owDBAAX4o8DBAFAMr4D BABCP6cDBAFIC4gDBABgL+QDBABgL+cDBAFgL+wDBABogSwDBABogTcDBAFrlhwD BACnoKMDBACnoKwDBAGnoK4DBACtLCUDBAGtLCoDBACtLC0wDAMEAK0sLwMEAK0s NgMEAa0sOAMEAK0sOwMEAK0sPwMEANHI7QMEANhh4QMEAdjj2DANBgkqhkiG9w0B AQsFAAOCAQEAj9xY8ULCn+fzHAKQcdP0arvNRx990dpW1mNufuN5+JfEFYT7SXpO rG5URjKKETOK1Bzjj6Ij1ts0EnkjtDoGDne9c/9Zv2uG1aPzJZLxv4eQ9ClwO51j E12X6TLfEQomPfhExLZHPye+R00NRhcqvXVZ6ch0fEd7fa48CmY+397gKKrEQ8Uw Bhy4YQ4PV/6L56BoWwqpuG5TeM3zgFl8VQ5yIW7uZKrXltw4XqIfMjh4HpRx5Xj8 eXiAJeUsQOY0/JqqE6kskHO+H+P7wC0wjdBGhEKcbO1VI0hdkznxiPA0imGkfjNo t37ojDJjYDEjPPWDYNrXSrrOzzNLrLvJ5A== -----END CERTIFICATE-----Generated at Sun Jun 29 10:25:14 2025 by rpki-client