$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: RXoCZyN5s/2oxewdBU9pWQb2eJ1m8rPJA4dl2Ul6Lt0= Subject key identifier: 48:14:D8:BC:DB:18:DE:96:22:9D:7C:E3:E6:07:2E:69:C4:97:CC:86 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 24422A11EBD4D1611D34A8F1645D2B74A15EF0AC Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa Signing time: Mon 27 Oct 2025 14:17:42 +0000 ROA not before: Mon 27 Oct 2025 14:12:42 +0000 ROA not after: Mon 26 Oct 2026 14:17:42 +0000 asID: 20473 IP address blocks: 23.226.140.0/23 maxlen: 24 23.226.143.0/24 maxlen: 24 64.50.166.0/24 maxlen: 24 66.63.167.0/24 maxlen: 24 72.11.136.0/23 maxlen: 24 96.47.228.0/24 maxlen: 24 96.47.231.0/24 maxlen: 24 96.47.236.0/23 maxlen: 24 104.129.44.0/24 maxlen: 24 104.129.55.0/24 maxlen: 24 107.150.28.0/23 maxlen: 24 167.160.163.0/24 maxlen: 24 167.160.172.0/24 maxlen: 24 167.160.174.0/23 maxlen: 24 173.44.37.0/24 maxlen: 24 173.44.42.0/23 maxlen: 24 173.44.45.0/24 maxlen: 24 173.44.47.0/24 maxlen: 24 173.44.48.0/22 maxlen: 24 173.44.52.0/23 maxlen: 24 173.44.54.0/24 maxlen: 24 173.44.56.0/23 maxlen: 24 173.44.59.0/24 maxlen: 24 173.44.63.0/24 maxlen: 24 216.97.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 05:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:42:2a:11:eb:d4:d1:61:1d:34:a8:f1:64:5d:2b:74:a1:5e:f0:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Oct 27 14:12:42 2025 GMT Not After : Oct 26 14:17:42 2026 GMT Subject: CN=4814D8BCDB18DE96229D7CE3E6072E69C497CC86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:5a:81:42:94:b2:3e:ec:ba:03:08:c3:e6: 7a:89:8d:43:92:99:85:ed:d2:8f:02:43:0b:ae:70: b4:af:e2:03:5c:28:2c:33:15:71:67:a2:d6:41:64: ef:d3:67:00:06:0c:3a:0b:de:40:09:16:09:31:e1: fd:7b:b6:85:c5:ea:22:80:56:a6:aa:64:94:10:ee: a3:77:3a:25:93:07:15:b6:89:22:dc:4e:06:68:33: c0:1e:e4:15:cd:22:43:14:e0:e3:90:f5:0d:08:9d: 2f:41:9f:6c:ff:ac:12:95:65:54:d0:d0:b9:83:e8: ac:ab:b1:1f:9e:32:cb:fb:a2:ac:ce:73:e1:e7:37: 1e:34:05:d2:c7:86:35:0a:87:37:d9:c1:55:66:54: 2b:03:ec:c2:ea:92:81:10:c0:9f:cd:68:79:2e:12: 58:d2:c3:17:a5:66:68:02:df:4c:9d:fe:7f:3e:f7: 8f:dd:2c:90:5a:41:12:04:04:c2:ff:56:15:ec:23: d5:ca:10:31:ac:03:dd:d8:50:b9:3e:b8:74:78:72: d3:06:c7:29:ea:a9:08:32:16:c4:f8:61:9e:ef:b1: 69:1e:13:e5:56:f8:6d:3b:92:98:8f:c8:6b:b9:1f: 55:84:7c:14:b0:37:00:da:f9:0b:9d:21:3a:02:2d: 90:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:14:D8:BC:DB:18:DE:96:22:9D:7C:E3:E6:07:2E:69:C4:97:CC:86 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.226.140.0/23 23.226.143.0/24 64.50.166.0/24 66.63.167.0/24 72.11.136.0/23 96.47.228.0/24 96.47.231.0/24 96.47.236.0/23 104.129.44.0/24 104.129.55.0/24 107.150.28.0/23 167.160.163.0/24 167.160.172.0/24 167.160.174.0/23 173.44.37.0/24 173.44.42.0/23 173.44.45.0/24 173.44.47.0-173.44.54.255 173.44.56.0/23 173.44.59.0/24 173.44.63.0/24 216.97.225.0/24 Signature Algorithm: sha256WithRSAEncryption a4:b2:0c:ab:ad:cf:1a:53:d5:25:8b:69:59:99:0a:0c:c3:e2: 37:e0:91:46:b7:31:aa:90:8e:39:54:3d:21:c5:64:24:20:c7: 5f:5c:e1:a5:76:e7:b2:d7:52:5a:5e:c7:4a:b6:b7:b7:11:42: 4a:23:53:2c:dc:3c:04:46:78:9c:ca:7b:e5:86:a5:a4:d3:7a: e6:82:fc:75:b0:c2:02:34:65:e2:32:26:e2:84:ee:27:18:53: cc:3e:9b:c2:33:fa:ee:c3:bb:fb:58:9b:69:7e:98:89:6b:53: d1:7a:6b:45:5c:24:fc:dc:69:f4:d4:cd:69:18:b2:57:a8:59: 75:f3:0c:22:57:2d:fb:0c:c7:37:38:6f:32:b5:5b:4f:f6:9b: 00:62:bb:d7:8b:47:b0:12:50:8e:38:dc:9a:a4:36:b9:6c:2b: d2:a1:15:c2:70:70:0a:49:04:48:59:d9:5c:f7:1b:09:78:26: de:bd:09:41:aa:f5:91:77:db:13:bc:af:02:33:19:2e:b6:6c: 23:fc:4f:b8:71:4f:f0:41:79:82:76:4f:c7:bd:83:d9:58:84: f7:d8:34:b9:22:60:e3:7d:60:58:61:79:22:13:0c:8b:83:a5: 76:61:72:c8:88:70:6f:2a:81:d4:90:f4:dd:11:ed:9a:81:eb: e0:e1:bf:55 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUJEIqEevU0WEdNKjxZF0rdKFe8KwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUxMDI3MTQxMjQyWhcNMjYxMDI2MTQxNzQy WjAzMTEwLwYDVQQDEyg0ODE0RDhCQ0RCMThERTk2MjI5RDdDRTNFNjA3MkU2OUM0 OTdDQzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRhagUKUsj7s ugMIw+Z6iY1DkpmF7dKPAkMLrnC0r+IDXCgsMxVxZ6LWQWTv02cABgw6C95ACRYJ MeH9e7aFxeoigFamqmSUEO6jdzolkwcVtoki3E4GaDPAHuQVzSJDFODjkPUNCJ0v QZ9s/6wSlWVU0NC5g+isq7EfnjLL+6KsznPh5zceNAXSx4Y1Coc32cFVZlQrA+zC 6pKBEMCfzWh5LhJY0sMXpWZoAt9Mnf5/PveP3SyQWkESBATC/1YV7CPVyhAxrAPd 2FC5Prh0eHLTBscp6qkIMhbE+GGe77FpHhPlVvhtO5KYj8hruR9VhHwUsDcA2vkL nSE6Ai2Q/QIDAQABo4IDCTCCAwUwHQYDVR0OBBYEFEgU2LzbGN6WIp184+YHLmnE l8yGMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGp BggrBgEFBQcBBwEB/wSBmTCBljCBkwQCAAEwgYwDBAEX4owDBAAX4o8DBABAMqYD BABCP6cDBAFIC4gDBABgL+QDBABgL+cDBAFgL+wDBABogSwDBABogTcDBAFrlhwD BACnoKMDBACnoKwDBAGnoK4DBACtLCUDBAGtLCoDBACtLC0wDAMEAK0sLwMEAK0s NgMEAa0sOAMEAK0sOwMEAK0sPwMEANhh4TANBgkqhkiG9w0BAQsFAAOCAQEApLIM q63PGlPVJYtpWZkKDMPiN+CRRrcxqpCOOVQ9IcVkJCDHX1zhpXbnstdSWl7HSra3 txFCSiNTLNw8BEZ4nMp75YalpNN65oL8dbDCAjRl4jIm4oTuJxhTzD6bwjP67sO7 +1ibaX6YiWtT0XprRVwk/Nxp9NTNaRiyV6hZdfMMIlct+wzHNzhvMrVbT/abAGK7 14tHsBJQjjjcmqQ2uWwr0qEVwnBwCkkESFnZXPcbCXgm3r0JQar1kXfbE7yvAjMZ LrZsI/xPuHFP8EF5gnZPx72D2ViE99g0uSJg431gWGF5IhMMi4OldmFyyIhwbyqB 1JD03RHtmoHr4OG/VQ== -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:38 2025 by rpki-client