$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: 4elyEdVl95pJZ9+O4dOT+ZkTwTRgSByjrsdos51+gqs= Subject key identifier: FE:D2:5B:82:3F:97:5E:64:DE:64:FC:3F:69:93:A0:B1:3C:B2:5D:6C Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 1B6295AE180A593D1297C3E3EE2B4922B3A8B882 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa Signing time: Wed 23 Apr 2025 11:54:28 +0000 ROA not before: Wed 23 Apr 2025 11:49:28 +0000 ROA not after: Wed 22 Apr 2026 11:54:28 +0000 asID: 20473 IP address blocks: 64.50.184.0/24 maxlen: 24 209.200.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 10:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:62:95:ae:18:0a:59:3d:12:97:c3:e3:ee:2b:49:22:b3:a8:b8:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Apr 23 11:49:28 2025 GMT Not After : Apr 22 11:54:28 2026 GMT Subject: CN=FED25B823F975E64DE64FC3F6993A0B13CB25D6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7b:6c:dd:bd:83:86:35:ce:04:da:56:e9:d3: 54:44:a7:19:7e:eb:3e:04:ed:44:4a:85:76:b0:6e: ad:d6:a2:1a:ba:99:5a:6f:c7:10:09:d3:1a:b9:6a: 96:55:14:1d:a4:35:f0:55:a8:bd:f9:13:0f:d9:57: bd:b7:11:e3:69:01:d6:4e:cc:f0:60:74:10:c6:d7: be:a4:62:1d:4c:1a:bf:af:40:29:fa:7a:14:c4:a1: 21:d2:c8:25:0c:3b:1d:d0:89:cd:3d:1e:74:bf:a0: 26:1d:4f:b4:cb:bd:40:35:a4:62:38:b2:05:12:d2: 1d:ab:31:b2:dd:7d:e5:63:8e:55:2c:81:68:d5:49: 05:d3:3c:de:fe:4d:3a:55:67:ec:10:e6:2a:2a:6e: 49:eb:f2:7d:7b:f1:73:08:d7:2e:52:b4:11:c2:3a: b2:67:af:f5:84:5a:26:ff:e9:29:6f:a5:fd:2e:28: a6:a2:a2:0f:af:0e:06:f5:47:23:75:33:d2:63:c6: ed:b0:c1:b9:2a:0f:6c:02:a7:38:3e:d2:b5:a6:36: fe:e8:0f:83:16:50:60:0b:81:35:51:74:94:cf:a1: 13:90:6a:70:c7:47:bb:eb:d4:35:d6:0b:eb:10:69: 46:ec:a7:9b:04:e1:74:8b:2b:29:be:65:60:2f:05: 0a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D2:5B:82:3F:97:5E:64:DE:64:FC:3F:69:93:A0:B1:3C:B2:5D:6C X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.50.184.0/24 209.200.237.0/24 Signature Algorithm: sha256WithRSAEncryption 05:0b:8f:b9:48:55:c9:a7:e3:8d:d2:d4:ba:a7:c9:9a:c1:e2: eb:bf:ff:03:6b:1d:1d:10:f2:eb:6f:1c:d8:ab:9f:db:6c:be: 39:cd:5b:ef:a4:c5:00:d3:77:01:cd:65:6b:f7:7f:f4:39:40: b9:cb:49:c2:37:a3:b6:1c:7b:25:6d:ca:f5:bc:aa:cb:07:ac: ea:c7:17:4d:e8:a3:23:3d:37:f6:36:4d:8a:74:31:be:df:8e: 59:cb:96:65:66:aa:b9:d3:d0:86:59:2e:83:15:04:80:5b:26: 68:0a:6f:dc:d9:89:9d:e1:dc:0f:d8:a8:b3:1b:11:87:55:08: 0d:95:8f:36:18:3c:d2:20:48:75:94:3e:e7:42:3f:64:88:92: 52:ac:1c:3e:6d:6d:83:ac:e2:56:96:01:f4:d2:3d:55:7c:d1: d9:29:b2:51:93:f4:83:e2:5e:70:0c:5f:41:e9:69:ef:4a:08: fb:b4:3d:f9:cc:f1:bb:70:25:c2:80:9e:27:29:43:a2:81:8e: 54:d8:08:19:8c:0a:aa:6c:2e:fc:d8:04:dc:3c:7d:b2:87:9a: c7:0e:a4:9c:ce:14:91:4b:71:dd:0c:d0:dc:21:08:8b:65:98: 15:d0:eb:bf:d3:bc:6c:d1:9f:ce:4f:fd:7f:0d:ad:e3:b7:c3: 3f:ad:55:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUG2KVrhgKWT0Sl8Pj7itJIrOouIIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNDIzMTE0OTI4WhcNMjYwNDIyMTE1NDI4 WjAzMTEwLwYDVQQDEyhGRUQyNUI4MjNGOTc1RTY0REU2NEZDM0Y2OTkzQTBCMTND QjI1RDZDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43ts3b2DhjXO BNpW6dNURKcZfus+BO1ESoV2sG6t1qIauplab8cQCdMauWqWVRQdpDXwVai9+RMP 2Ve9txHjaQHWTszwYHQQxte+pGIdTBq/r0Ap+noUxKEh0sglDDsd0InNPR50v6Am HU+0y71ANaRiOLIFEtIdqzGy3X3lY45VLIFo1UkF0zze/k06VWfsEOYqKm5J6/J9 e/FzCNcuUrQRwjqyZ6/1hFom/+kpb6X9LiimoqIPrw4G9UcjdTPSY8btsMG5Kg9s Aqc4PtK1pjb+6A+DFlBgC4E1UXSUz6ETkGpwx0e769Q11gvrEGlG7KebBOF0iysp vmVgLwUKuQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFP7SW4I/l15k3mT8P2mToLE8 sl1sMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQDK4AwQA0cjtMA0GCSqGSIb3DQEB CwUAA4IBAQAFC4+5SFXJp+ON0tS6p8maweLrv/8Dax0dEPLrbxzYq5/bbL45zVvv pMUA03cBzWVr93/0OUC5y0nCN6O2HHslbcr1vKrLB6zqxxdN6KMjPTf2Nk2KdDG+ 345Zy5ZlZqq509CGWS6DFQSAWyZoCm/c2Ymd4dwP2KizGxGHVQgNlY82GDzSIEh1 lD7nQj9kiJJSrBw+bW2DrOJWlgH00j1VfNHZKbJRk/SD4l5wDF9B6WnvSgj7tD35 zPG7cCXCgJ4nKUOigY5U2AgZjAqqbC782ATcPH2yh5rHDqSczhSRS3HdDNDcIQiL ZZgV0Ou/07xs0Z/OT/1/Da3jt8M/rVVb -----END CERTIFICATE-----Generated at Sat Apr 26 15:56:59 2025 by rpki-client