$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: hLVhdcu9/FXHtAshtueOQJkuz+sCe9v1BQXa/PRBLyQ= Subject key identifier: BB:71:56:BB:A5:FB:17:AB:69:E1:F8:05:C6:B0:58:F5:96:15:93:EE Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 28B65D238869E887B4BEDBBAD444FCACF42A477B Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa Signing time: Fri 21 Aug 2026 12:54:13 +0000 ROA not before: Fri 21 Aug 2026 12:49:13 +0000 ROA not after: Fri 20 Aug 2027 12:54:13 +0000 asID: 20473 IP address blocks: 23.226.140.0/23 maxlen: 24 23.226.143.0/24 maxlen: 24 64.50.166.0/24 maxlen: 24 66.63.167.0/24 maxlen: 24 72.11.136.0/23 maxlen: 24 96.47.228.0/24 maxlen: 24 96.47.231.0/24 maxlen: 24 96.47.236.0/23 maxlen: 24 104.129.44.0/24 maxlen: 24 104.129.55.0/24 maxlen: 24 107.150.28.0/23 maxlen: 24 167.160.163.0/24 maxlen: 24 167.160.172.0/24 maxlen: 24 167.160.174.0/23 maxlen: 24 173.44.37.0/24 maxlen: 24 173.44.42.0/23 maxlen: 24 173.44.45.0/24 maxlen: 24 173.44.47.0/24 maxlen: 24 173.44.48.0/22 maxlen: 24 173.44.52.0/23 maxlen: 24 173.44.54.0/24 maxlen: 24 173.44.56.0/23 maxlen: 24 173.44.59.0/24 maxlen: 24 173.44.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 12:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b6:5d:23:88:69:e8:87:b4:be:db:ba:d4:44:fc:ac:f4:2a:47:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Aug 21 12:49:13 2026 GMT Not After : Aug 20 12:54:13 2027 GMT Subject: CN=BB7156BBA5FB17AB69E1F805C6B058F5961593EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f8:b3:f9:d1:da:f0:3c:f1:77:fb:f3:56:90: 1e:93:be:c0:95:1f:32:44:c2:59:01:73:3c:d1:f7: b9:ef:b9:9a:64:eb:eb:f2:7e:4d:29:ff:3f:45:16: d2:99:8b:25:4f:dd:20:27:c8:3d:11:29:8c:f5:c6: 25:2b:f7:2b:9d:f2:12:4f:15:fb:6f:1c:21:4c:64: 78:83:95:dd:51:79:79:c8:5d:21:69:e0:a1:5a:91: 8d:9f:25:f7:fb:da:0b:40:91:df:ae:3d:ea:6b:08: a2:b2:58:bb:8c:19:07:41:56:19:49:db:52:13:6c: 7c:29:46:d4:05:98:43:17:1f:1f:08:b0:3a:32:56: 80:a3:03:98:bc:69:b3:ee:ac:2e:ad:de:51:e7:b6: 78:3d:41:e4:1d:a7:65:a7:d6:03:5e:d2:d6:28:40: 90:ea:bd:a8:c3:f1:41:f4:5c:19:e0:00:ca:65:59: 7d:55:c2:c0:d1:7c:68:ab:af:81:ff:e3:4b:21:71: 74:2e:2e:33:88:98:22:ee:df:ef:64:e1:4f:18:59: 50:41:ef:c1:59:4a:3d:50:56:25:ad:fb:3b:bb:96: 3e:4b:1e:08:8b:42:d1:b4:6f:21:ac:0b:14:7c:ca: 11:0e:f4:f4:a1:87:3f:c4:9c:57:9a:92:36:5a:40: 4b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:71:56:BB:A5:FB:17:AB:69:E1:F8:05:C6:B0:58:F5:96:15:93:EE X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.226.140.0/23 23.226.143.0/24 64.50.166.0/24 66.63.167.0/24 72.11.136.0/23 96.47.228.0/24 96.47.231.0/24 96.47.236.0/23 104.129.44.0/24 104.129.55.0/24 107.150.28.0/23 167.160.163.0/24 167.160.172.0/24 167.160.174.0/23 173.44.37.0/24 173.44.42.0/23 173.44.45.0/24 173.44.47.0-173.44.54.255 173.44.56.0/23 173.44.59.0/24 173.44.63.0/24 Signature Algorithm: sha256WithRSAEncryption bd:40:db:2f:a2:d2:57:30:42:92:34:d6:fb:c3:03:9c:bb:f7: 9a:46:f4:6f:dc:f2:37:dc:1c:ef:31:3f:ea:56:d3:6e:43:ed: 79:92:a1:2d:d9:da:ab:34:16:7b:82:08:f8:ce:ec:7a:d6:a9: 94:d3:6c:1e:1a:25:ee:82:b6:bb:ed:2e:2d:f0:b2:ce:73:ff: aa:db:fa:a1:75:44:b7:72:c3:be:9e:37:b1:32:1e:b9:63:49: 4a:4c:da:c4:da:29:9c:cc:c4:e3:05:00:41:6f:7d:cf:cc:b0: 18:35:81:e9:25:49:45:5a:08:dc:47:cd:9f:6b:77:70:f9:6f: 44:6c:a2:47:3d:e4:1b:6a:0d:9c:2c:a9:d9:b6:f4:b1:de:43: f1:cd:46:62:e4:2a:1a:3b:25:1d:22:91:f1:69:d9:e4:e4:7d: 46:de:48:15:ab:ee:61:57:cd:12:37:7f:ad:ff:40:88:75:79: 35:c6:59:74:10:bd:b1:00:55:40:90:95:48:59:d3:04:f6:71: ff:e0:6d:6f:98:fa:03:f7:97:18:d3:f9:45:06:77:27:30:45: c6:cd:91:99:a2:f3:de:fc:39:df:8f:33:5e:33:37:87:f1:35: 4e:34:8c:6b:d3:98:2b:11:c7:56:d6:56:1b:36:0a:42:34:77: 05:f0:9f:2d -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgIUKLZdI4hp6Ie0vtu61ET8rPQqR3swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwODIxMTI0OTEzWhcNMjcwODIwMTI1NDEz WjAzMTEwLwYDVQQDEyhCQjcxNTZCQkE1RkIxN0FCNjlFMUY4MDVDNkIwNThGNTk2 MTU5M0VFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqviz+dHa8Dzx d/vzVpAek77AlR8yRMJZAXM80fe577maZOvr8n5NKf8/RRbSmYslT90gJ8g9ESmM 9cYlK/crnfISTxX7bxwhTGR4g5XdUXl5yF0haeChWpGNnyX3+9oLQJHfrj3qawii sli7jBkHQVYZSdtSE2x8KUbUBZhDFx8fCLA6MlaAowOYvGmz7qwurd5R57Z4PUHk Hadlp9YDXtLWKECQ6r2ow/FB9FwZ4ADKZVl9VcLA0Xxoq6+B/+NLIXF0Li4ziJgi 7t/vZOFPGFlQQe/BWUo9UFYlrfs7u5Y+Sx4Ii0LRtG8hrAsUfMoRDvT0oYc/xJxX mpI2WkBLhwIDAQABo4IDAzCCAv8wHQYDVR0OBBYEFLtxVrul+xeraeH4BcawWPWW FZPuMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGj BggrBgEFBQcBBwEB/wSBkzCBkDCBjQQCAAEwgYYDBAEX4owDBAAX4o8DBABAMqYD BABCP6cDBAFIC4gDBABgL+QDBABgL+cDBAFgL+wDBABogSwDBABogTcDBAFrlhwD BACnoKMDBACnoKwDBAGnoK4DBACtLCUDBAGtLCoDBACtLC0wDAMEAK0sLwMEAK0s NgMEAa0sOAMEAK0sOwMEAK0sPzANBgkqhkiG9w0BAQsFAAOCAQEAvUDbL6LSVzBC kjTW+8MDnLv3mkb0b9zyN9wc7zE/6lbTbkPteZKhLdnaqzQWe4II+M7setaplNNs Hhol7oK2u+0uLfCyznP/qtv6oXVEt3LDvp43sTIeuWNJSkzaxNopnMzE4wUAQW99 z8ywGDWB6SVJRVoI3EfNn2t3cPlvRGyiRz3kG2oNnCyp2bb0sd5D8c1GYuQqGjsl HSKR8WnZ5OR9Rt5IFavuYVfNEjd/rf9AiHV5NcZZdBC9sQBVQJCVSFnTBPZx/+Bt b5j6A/eXGNP5RQZ3JzBFxs2RmaLz3vw5348zXjM3h/E1TjSMa9OYKxHHVtZWGzYK QjR3BfCfLQ== -----END CERTIFICATE-----Generated at Sun Sep 20 16:14:42 2026 by rpki-client