$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: 1pjwlAMiOZXS8z/mqAQYVaLvlN7ZWeGa/uuQLinVPVY= Subject key identifier: 51:C9:25:B6:D5:83:8F:7F:37:3A:6E:C9:B1:B1:13:03:C2:E7:B1:E8 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 0A8D91DEFD772DED25681DF124DBF4EBD8FB9853 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS20473.roa Signing time: Tue 23 Jun 2026 07:21:49 +0000 ROA not before: Tue 23 Jun 2026 07:16:49 +0000 ROA not after: Tue 22 Jun 2027 07:21:49 +0000 asID: 20473 IP address blocks: 157.254.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 00:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:8d:91:de:fd:77:2d:ed:25:68:1d:f1:24:db:f4:eb:d8:fb:98:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jun 23 07:16:49 2026 GMT Not After : Jun 22 07:21:49 2027 GMT Subject: CN=51C925B6D5838F7F373A6EC9B1B11303C2E7B1E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fc:fa:d4:d0:3f:7a:29:3e:df:60:3a:94:14: 1a:f9:52:90:de:60:dc:a2:c5:57:dc:8e:48:0a:bd: 87:00:4a:94:18:d8:da:ac:1d:a7:e3:9e:3a:8b:13: dc:df:f8:53:94:e5:fa:f1:f5:bf:27:66:0c:2f:d9: ff:c8:55:7d:eb:14:5d:67:7a:ad:42:e2:77:97:bf: 33:de:5e:55:34:81:53:bd:46:f3:01:b6:ae:28:11: f6:39:e5:ad:65:c3:77:b6:d5:93:9d:9c:8d:b4:d7: 16:c6:53:a6:8e:cb:31:94:45:a5:68:a5:58:8d:c4: d2:be:a2:1f:92:aa:b2:f1:24:3f:a8:fd:ee:c2:49: f6:28:26:c7:25:77:d9:8e:b6:16:1d:cb:bd:e3:68: db:86:66:ca:3a:7c:b4:f3:63:92:fb:f7:16:0d:51: 24:f2:84:bf:46:24:d2:42:4f:e3:6d:d5:33:25:8c: 65:02:04:ec:cd:2b:8b:c2:40:54:43:a0:9c:7c:23: 51:63:8e:d2:4a:4b:c1:a1:3e:a4:8f:f1:75:3a:de: ea:87:da:e4:ad:9a:a5:3b:fc:57:8a:bc:4a:be:22: f8:7d:c5:71:09:f2:41:69:00:a9:69:78:a7:ae:b1: 8e:71:9e:4b:8d:10:cb:64:70:f3:12:8f:85:64:d2: 89:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C9:25:B6:D5:83:8F:7F:37:3A:6E:C9:B1:B1:13:03:C2:E7:B1:E8 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.195.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:8b:2c:92:2a:10:24:84:cb:60:8e:b6:1f:65:24:52:a2:74: 4c:b1:6c:04:75:15:7a:9f:fd:a4:81:cc:96:78:01:03:3c:57: cd:43:ca:17:cc:0e:df:4f:85:b2:cb:18:39:f2:2e:02:ae:d2: 84:ed:ca:0e:bd:12:dd:38:43:bd:18:cb:71:38:29:ea:0c:4e: 98:9c:fb:25:1c:b7:b3:e2:6c:d6:61:d7:8f:e5:27:0b:9c:5e: a1:2b:e3:18:17:41:c8:7a:f3:1c:57:b5:e9:1e:b5:59:4d:a3: 07:af:dc:bd:8e:0d:2c:2a:ee:1a:fc:be:75:5e:4d:db:1e:19: 5f:92:2a:26:5f:b6:77:b7:b1:e6:87:31:d1:60:28:7c:77:88: c3:40:15:ed:86:3d:8f:ab:b4:32:86:c6:5d:f7:27:88:92:96: 23:f3:b7:57:96:d9:0e:4e:be:a9:51:b5:df:40:f7:f4:f5:de: f2:88:f3:99:2e:18:7f:8c:9a:ac:e4:c7:10:94:2f:99:0f:46: b9:3b:7f:d0:a9:21:e5:3e:60:43:6f:6a:61:b8:06:8d:01:c5: 58:d8:94:0f:64:c6:80:f7:13:93:d5:37:e2:0d:61:87:5c:65: fe:e3:4d:a1:1b:59:a9:19:c0:1b:93:75:2b:4f:3d:fa:f6:1f: 5b:aa:b5:ab -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUCo2R3v13Le0laB3xJNv069j7mFMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNjIzMDcxNjQ5WhcNMjcwNjIyMDcyMTQ5 WjAzMTEwLwYDVQQDEyg1MUM5MjVCNkQ1ODM4RjdGMzczQTZFQzlCMUIxMTMwM0My RTdCMUU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPz61NA/eik+ 32A6lBQa+VKQ3mDcosVX3I5ICr2HAEqUGNjarB2n4546ixPc3/hTlOX68fW/J2YM L9n/yFV96xRdZ3qtQuJ3l78z3l5VNIFTvUbzAbauKBH2OeWtZcN3ttWTnZyNtNcW xlOmjssxlEWlaKVYjcTSvqIfkqqy8SQ/qP3uwkn2KCbHJXfZjrYWHcu942jbhmbK Ony082OS+/cWDVEk8oS/RiTSQk/jbdUzJYxlAgTszSuLwkBUQ6CcfCNRY47SSkvB oT6kj/F1Ot7qh9rkrZqlO/xXirxKviL4fcVxCfJBaQCpaXinrrGOcZ5LjRDLZHDz Eo+FZNKJowIDAQABo4ICfjCCAnowHQYDVR0OBBYEFFHJJbbVg49/NzpuybGxEwPC 57HoMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf7DMA0GCSqGSIb3DQEBCwUAA4IB AQAciyySKhAkhMtgjrYfZSRSonRMsWwEdRV6n/2kgcyWeAEDPFfNQ8oXzA7fT4Wy yxg58i4CrtKE7coOvRLdOEO9GMtxOCnqDE6YnPslHLez4mzWYdeP5ScLnF6hK+MY F0HIevMcV7XpHrVZTaMHr9y9jg0sKu4a/L51Xk3bHhlfkiomX7Z3t7HmhzHRYCh8 d4jDQBXthj2Pq7QyhsZd9yeIkpYj87dXltkOTr6pUbXfQPf09d7yiPOZLhh/jJqs 5McQlC+ZD0a5O3/QqSHlPmBDb2phuAaNAcVY2JQPZMaA9xOT1TfiDWGHXGX+402h G1mpGcAbk3UrTz369h9bqrWr -----END CERTIFICATE-----Generated at Thu Jul 23 23:41:45 2026 by rpki-client