$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: z7uHuj+Ope5lXz79f74pPNd9cIup/ul1cSyv0bAdjoQ= Subject key identifier: 59:9A:1A:4A:37:8A:14:18:62:D5:F5:40:63:31:E3:CF:12:16:5E:37 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 112BB4DD5AF152632E1BF80A3B9D3822ECB98CA9 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa Signing time: Sat 03 May 2025 00:01:09 +0000 ROA not before: Fri 02 May 2025 23:56:09 +0000 ROA not after: Sat 02 May 2026 00:01:09 +0000 asID: 20473 IP address blocks: 23.226.140.0/23 maxlen: 24 23.226.143.0/24 maxlen: 24 66.63.167.0/24 maxlen: 24 72.11.136.0/23 maxlen: 24 96.47.228.0/24 maxlen: 24 96.47.231.0/24 maxlen: 24 96.47.236.0/23 maxlen: 24 104.129.44.0/24 maxlen: 24 104.129.55.0/24 maxlen: 24 107.150.28.0/23 maxlen: 24 167.160.163.0/24 maxlen: 24 167.160.172.0/24 maxlen: 24 167.160.174.0/23 maxlen: 24 173.44.37.0/24 maxlen: 24 173.44.42.0/23 maxlen: 24 173.44.45.0/24 maxlen: 24 173.44.47.0/24 maxlen: 24 173.44.48.0/22 maxlen: 24 173.44.52.0/23 maxlen: 24 173.44.54.0/24 maxlen: 24 173.44.56.0/23 maxlen: 24 173.44.59.0/24 maxlen: 24 173.44.63.0/24 maxlen: 24 209.200.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 19:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:2b:b4:dd:5a:f1:52:63:2e:1b:f8:0a:3b:9d:38:22:ec:b9:8c:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: May 2 23:56:09 2025 GMT Not After : May 2 00:01:09 2026 GMT Subject: CN=599A1A4A378A141862D5F5406331E3CF12165E37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6f:3a:18:7e:3f:78:97:1e:2e:63:1f:05:a7: 10:05:ec:d9:76:40:2b:6d:d2:10:3d:5e:56:b5:70: 9b:5c:89:b0:d1:86:e1:de:d3:7c:29:7c:29:f2:0a: e6:98:9c:37:ec:fd:7d:d2:b5:a8:c4:88:4c:30:e1: cf:82:6e:a4:f3:1d:02:28:c0:d8:29:5a:e8:24:ec: 4e:7c:8b:0c:bc:16:48:c7:48:77:ba:e8:8c:45:99: 97:9d:63:c2:52:ed:fb:60:68:cf:5c:52:e0:29:24: 56:14:36:a8:fe:28:4f:f0:f8:71:49:6c:52:f1:0d: 95:65:83:73:c1:87:52:f9:a8:0e:08:05:5f:50:f7: b2:99:61:a9:1c:ce:c4:16:66:7d:3d:16:81:06:a0: b8:60:28:a2:cc:be:60:89:fa:14:a2:5d:f4:4a:84: 76:17:a5:4f:be:b1:95:78:db:72:03:08:83:1e:13: 32:22:8d:8d:1f:b7:70:67:de:8e:2b:7d:99:3c:39: bb:52:0c:d9:e0:5b:b4:39:90:eb:2e:97:5b:16:3a: d5:0e:9a:65:e1:f3:03:17:70:97:22:51:73:2c:5e: b4:66:2c:6d:64:b5:a5:cd:ea:d8:13:5e:54:eb:7a: 9f:04:55:d0:4a:c1:a0:6f:7f:ae:fa:93:a3:ab:ae: 36:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9A:1A:4A:37:8A:14:18:62:D5:F5:40:63:31:E3:CF:12:16:5E:37 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.226.140.0/23 23.226.143.0/24 66.63.167.0/24 72.11.136.0/23 96.47.228.0/24 96.47.231.0/24 96.47.236.0/23 104.129.44.0/24 104.129.55.0/24 107.150.28.0/23 167.160.163.0/24 167.160.172.0/24 167.160.174.0/23 173.44.37.0/24 173.44.42.0/23 173.44.45.0/24 173.44.47.0-173.44.54.255 173.44.56.0/23 173.44.59.0/24 173.44.63.0/24 209.200.237.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:3d:19:7e:b7:ee:07:ff:5f:e0:37:c7:ce:a9:fe:83:bf:16: c0:53:30:8d:ec:61:c0:7d:a6:27:af:9c:1f:ac:36:17:b4:67: a5:b1:77:25:d6:8b:e6:07:2a:d2:0c:16:4f:43:e3:a7:c9:e2: f6:13:fd:07:d1:05:17:f6:43:79:45:a8:69:d7:17:e3:fd:6d: e4:54:c8:5c:b4:03:d4:1c:78:91:13:19:0b:3e:15:39:98:87: 38:65:08:7f:70:6c:4a:54:84:9e:21:ba:54:00:13:f6:a6:7c: 70:ed:8c:0b:c2:fa:45:d5:b8:90:89:4d:14:f9:b1:53:75:f7: 92:a8:85:eb:1a:18:be:64:70:a9:ee:01:59:5b:21:07:72:b5: ae:df:4f:68:29:61:e5:00:c2:47:17:23:a3:10:1f:61:30:09: 25:e8:f9:02:cd:74:c6:79:24:18:e3:09:20:4e:f5:22:cd:46: 78:0b:b2:20:1a:02:7a:50:a6:2e:cf:68:74:f1:82:4f:c5:03: 71:b6:91:ee:0f:2a:74:fb:0d:3f:b9:e6:13:0c:70:03:e8:18: b7:04:a7:bd:35:f2:fd:ac:a1:7c:5d:9b:b7:53:3e:7a:ae:08: 56:c2:a5:2d:bb:3e:2b:c0:8b:89:e0:d5:31:03:8d:60:9e:d5: a9:f9:a7:6f -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgIUESu03VrxUmMuG/gKO504Iuy5jKkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNTAyMjM1NjA5WhcNMjYwNTAyMDAwMTA5 WjAzMTEwLwYDVQQDEyg1OTlBMUE0QTM3OEExNDE4NjJENUY1NDA2MzMxRTNDRjEy MTY1RTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG86GH4/eJce LmMfBacQBezZdkArbdIQPV5WtXCbXImw0Ybh3tN8KXwp8grmmJw37P190rWoxIhM MOHPgm6k8x0CKMDYKVroJOxOfIsMvBZIx0h3uuiMRZmXnWPCUu37YGjPXFLgKSRW FDao/ihP8PhxSWxS8Q2VZYNzwYdS+agOCAVfUPeymWGpHM7EFmZ9PRaBBqC4YCii zL5gifoUol30SoR2F6VPvrGVeNtyAwiDHhMyIo2NH7dwZ96OK32ZPDm7UgzZ4Fu0 OZDrLpdbFjrVDppl4fMDF3CXIlFzLF60ZixtZLWlzerYE15U63qfBFXQSsGgb3+u +pOjq6425wIDAQABo4IDAzCCAv8wHQYDVR0OBBYEFFmaGko3ihQYYtX1QGMx488S Fl43MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGj BggrBgEFBQcBBwEB/wSBkzCBkDCBjQQCAAEwgYYDBAEX4owDBAAX4o8DBABCP6cD BAFIC4gDBABgL+QDBABgL+cDBAFgL+wDBABogSwDBABogTcDBAFrlhwDBACnoKMD BACnoKwDBAGnoK4DBACtLCUDBAGtLCoDBACtLC0wDAMEAK0sLwMEAK0sNgMEAa0s OAMEAK0sOwMEAK0sPwMEANHI7TANBgkqhkiG9w0BAQsFAAOCAQEAHT0ZfrfuB/9f 4DfHzqn+g78WwFMwjexhwH2mJ6+cH6w2F7RnpbF3JdaL5gcq0gwWT0Pjp8ni9hP9 B9EFF/ZDeUWoadcX4/1t5FTIXLQD1Bx4kRMZCz4VOZiHOGUIf3BsSlSEniG6VAAT 9qZ8cO2MC8L6RdW4kIlNFPmxU3X3kqiF6xoYvmRwqe4BWVshB3K1rt9PaClh5QDC RxcjoxAfYTAJJej5As10xnkkGOMJIE71Is1GeAuyIBoCelCmLs9odPGCT8UDcbaR 7g8qdPsNP7nmEwxwA+gYtwSnvTXy/ayhfF2bt1M+eq4IVsKlLbs+K8CLieDVMQON YJ7Vqfmnbw== -----END CERTIFICATE-----Generated at Tue May 6 00:37:12 2025 by rpki-client