$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: 04+E6IKrhGRY+9FgB/M4HlV+nNI5BN8IsQTNIjRH7AQ= Subject key identifier: 8E:19:3C:0C:FE:08:9C:4D:07:AE:55:F0:10:51:6E:29:61:DA:33:FD Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 224F8F36EC083798FBA779400606A94D2FCF96AF Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa Signing time: Sat 03 Oct 2026 07:57:06 +0000 ROA not before: Sat 03 Oct 2026 07:52:06 +0000 ROA not after: Sat 02 Oct 2027 07:57:06 +0000 asID: 20473 IP address blocks: 23.95.134.0/24 maxlen: 24 23.226.140.0/23 maxlen: 24 23.226.143.0/24 maxlen: 24 64.50.166.0/24 maxlen: 24 72.11.136.0/23 maxlen: 24 96.47.228.0/24 maxlen: 24 96.47.236.0/23 maxlen: 24 104.129.44.0/24 maxlen: 24 104.129.55.0/24 maxlen: 24 107.150.28.0/23 maxlen: 24 167.160.163.0/24 maxlen: 24 167.160.172.0/24 maxlen: 24 167.160.174.0/23 maxlen: 24 173.44.37.0/24 maxlen: 24 173.44.42.0/23 maxlen: 24 173.44.45.0/24 maxlen: 24 173.44.47.0/24 maxlen: 24 173.44.48.0/22 maxlen: 24 173.44.52.0/23 maxlen: 24 173.44.54.0/24 maxlen: 24 173.44.56.0/23 maxlen: 24 173.44.59.0/24 maxlen: 24 173.44.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 14:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:4f:8f:36:ec:08:37:98:fb:a7:79:40:06:06:a9:4d:2f:cf:96:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Oct 3 07:52:06 2026 GMT Not After : Oct 2 07:57:06 2027 GMT Subject: CN=8E193C0CFE089C4D07AE55F010516E2961DA33FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c9:68:08:d0:68:a2:ae:a0:42:b5:08:cd:1e: 87:f4:c4:cb:a6:bd:a5:90:6c:c8:3e:1d:d6:8f:e8: 85:e8:c8:d0:01:6a:ad:a2:39:af:0c:fd:95:90:22: 14:c8:41:c7:dd:0a:f4:02:32:dd:a6:37:ef:f4:82: 9b:ad:a3:51:ad:9e:e4:9b:e7:cd:60:f5:6f:4a:e1: 20:39:93:2c:a4:e9:72:e8:fe:e1:46:6e:46:3a:89: ec:85:5b:bc:01:be:8c:81:f1:6b:d8:d5:5d:aa:34: 03:b4:ca:47:c7:38:3d:fb:13:06:18:1d:c3:22:63: f9:b3:c1:eb:f3:81:55:5b:a4:3c:01:f4:c1:4b:cb: da:80:a5:7a:53:8f:c9:e2:78:fc:dc:5a:4e:8e:ad: a3:9f:f9:89:8c:e0:02:a6:12:8a:76:b6:05:80:51: 92:bf:4c:3c:c5:50:ed:6e:5e:d7:e9:e5:c1:c1:51: 48:01:14:52:97:b7:0c:61:58:dd:32:2b:60:ca:02: 96:96:3d:67:7a:99:13:52:31:1b:56:d0:c4:2b:fc: 5b:ea:69:b3:f4:96:9e:84:06:5d:30:09:68:e2:39: 11:a6:09:16:b7:1b:af:3b:4b:b5:4a:53:2b:64:d6: 94:95:13:2f:ac:63:21:d9:20:7f:bc:a3:e9:69:63: 65:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:19:3C:0C:FE:08:9C:4D:07:AE:55:F0:10:51:6E:29:61:DA:33:FD X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.134.0/24 23.226.140.0/23 23.226.143.0/24 64.50.166.0/24 72.11.136.0/23 96.47.228.0/24 96.47.236.0/23 104.129.44.0/24 104.129.55.0/24 107.150.28.0/23 167.160.163.0/24 167.160.172.0/24 167.160.174.0/23 173.44.37.0/24 173.44.42.0/23 173.44.45.0/24 173.44.47.0-173.44.54.255 173.44.56.0/23 173.44.59.0/24 173.44.63.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:40:05:d7:6c:24:f6:b6:ad:e2:d2:06:f8:af:e4:69:80:bb: bb:88:5f:78:e3:26:ca:67:f5:fa:ee:2a:dc:b1:5f:a0:23:88: dd:bf:68:73:4b:50:72:ce:eb:a4:a9:a9:a2:55:68:5e:07:b5: 20:a5:46:c8:a2:76:05:97:c9:cb:8e:8b:37:00:7c:f4:5d:df: ca:b5:8b:ef:81:6e:d5:d6:f3:6c:7f:80:c4:05:e2:d3:2e:76: 69:95:87:8b:43:d7:b6:71:b8:fa:72:46:fc:73:7b:6d:ae:a0: 99:5d:19:94:bc:c9:5e:2a:9d:dd:8a:8b:39:78:40:9e:97:bb: 3c:67:29:64:5a:72:c3:e7:f1:1c:8c:b8:a8:f3:8d:4c:e4:84: d2:91:f2:45:a4:d9:7a:fc:34:01:ea:1c:9d:04:0f:21:e6:13: 76:ab:13:33:d9:c1:e2:b9:c8:ed:93:40:fa:33:3e:bb:49:21: 4d:5e:1c:63:22:9a:ba:5e:19:c0:f0:af:e9:f1:62:c9:86:23: 50:12:97:70:b7:55:89:d1:70:ea:73:76:f2:af:5b:57:45:a1: 65:4f:4c:92:2b:9f:9b:31:22:f9:af:2a:e2:8c:f0:1c:65:cc: e5:eb:a7:df:a9:7f:05:47:8b:c8:b0:80:ee:04:58:f7:5b:5a: f1:8f:0c:72 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgIUIk+PNuwIN5j7p3lABgapTS/Plq8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYxMDAzMDc1MjA2WhcNMjcxMDAyMDc1NzA2 WjAzMTEwLwYDVQQDEyg4RTE5M0MwQ0ZFMDg5QzREMDdBRTU1RjAxMDUxNkUyOTYx REEzM0ZEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsloCNBooq6g QrUIzR6H9MTLpr2lkGzIPh3Wj+iF6MjQAWqtojmvDP2VkCIUyEHH3Qr0AjLdpjfv 9IKbraNRrZ7km+fNYPVvSuEgOZMspOly6P7hRm5GOonshVu8Ab6MgfFr2NVdqjQD tMpHxzg9+xMGGB3DImP5s8Hr84FVW6Q8AfTBS8vagKV6U4/J4nj83FpOjq2jn/mJ jOACphKKdrYFgFGSv0w8xVDtbl7X6eXBwVFIARRSl7cMYVjdMitgygKWlj1nepkT UjEbVtDEK/xb6mmz9JaehAZdMAlo4jkRpgkWtxuvO0u1SlMrZNaUlRMvrGMh2SB/ vKPpaWNlrwIDAQABo4IC/TCCAvkwHQYDVR0OBBYEFI4ZPAz+CJxNB65V8BBRbilh 2jP9MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGd BggrBgEFBQcBBwEB/wSBjTCBijCBhwQCAAEwgYADBAAXX4YDBAEX4owDBAAX4o8D BABAMqYDBAFIC4gDBABgL+QDBAFgL+wDBABogSwDBABogTcDBAFrlhwDBACnoKMD BACnoKwDBAGnoK4DBACtLCUDBAGtLCoDBACtLC0wDAMEAK0sLwMEAK0sNgMEAa0s OAMEAK0sOwMEAK0sPzANBgkqhkiG9w0BAQsFAAOCAQEAX0AF12wk9rat4tIG+K/k aYC7u4hfeOMmymf1+u4q3LFfoCOI3b9oc0tQcs7rpKmpolVoXge1IKVGyKJ2BZfJ y46LNwB89F3fyrWL74Fu1dbzbH+AxAXi0y52aZWHi0PXtnG4+nJG/HN7ba6gmV0Z lLzJXiqd3YqLOXhAnpe7PGcpZFpyw+fxHIy4qPONTOSE0pHyRaTZevw0AeocnQQP IeYTdqsTM9nB4rnI7ZNA+jM+u0khTV4cYyKaul4ZwPCv6fFiyYYjUBKXcLdVidFw 6nN28q9bV0WhZU9MkiufmzEi+a8q4ozwHGXM5eun36l/BUeLyLCA7gRY91ta8Y8M cg== -----END CERTIFICATE-----Generated at Thu Nov 5 15:10:09 2026 by rpki-client