$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS63023.roa File: AS63023.roa (raw, json) Hash identifier: F/1g5YBoxCS1S9e/k8KxXXsfuCyOyeS1cjOwvupYmWg= Subject key identifier: 2D:60:1B:B0:99:D4:28:26:49:47:0B:D7:B0:E4:37:47:84:C3:09:13 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 14B2367B18FCAEC10BA6C8A97F647DB3B80B9D3A Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS63023.roa Signing time: Fri 15 Aug 2025 01:29:44 +0000 ROA not before: Fri 15 Aug 2025 01:24:44 +0000 ROA not after: Fri 14 Aug 2026 01:29:44 +0000 asID: 63023 IP address blocks: 140.99.83.0/24 maxlen: 24 140.99.101.0/24 maxlen: 24 140.99.252.0/24 maxlen: 24 140.99.254.0/24 maxlen: 24 140.99.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 22:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:b2:36:7b:18:fc:ae:c1:0b:a6:c8:a9:7f:64:7d:b3:b8:0b:9d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Aug 15 01:24:44 2025 GMT Not After : Aug 14 01:29:44 2026 GMT Subject: CN=2D601BB099D4282649470BD7B0E4374784C30913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5a:08:84:33:a9:e0:2c:f1:74:1d:40:75:10: f3:3a:16:7f:b6:77:ba:21:c6:1c:4a:3a:2c:1d:3f: 67:ed:d9:3c:28:a5:d0:7a:af:40:c3:32:8c:f1:f0: 32:66:b4:2c:c6:44:d8:79:3f:7e:3d:45:6a:3e:15: 41:2b:98:51:0e:2a:a1:e9:86:06:4a:60:9e:e0:22: be:ad:78:5f:0e:a1:f3:13:65:0d:18:6b:2f:8e:a0: 45:2d:3d:be:9b:2d:44:78:3b:55:e7:61:e7:6c:ff: b6:8f:35:48:27:4e:55:94:a7:81:a4:8f:7e:f7:aa: 84:59:61:08:42:ed:2b:b9:45:31:04:71:42:d5:19: 1e:ed:66:fa:3f:d9:59:cf:a8:b7:b7:3f:a7:ea:a6: aa:e6:5d:47:2b:08:a4:d5:00:0a:c9:78:a3:99:be: ea:39:2d:c3:df:90:57:ce:2b:82:d2:da:e5:5c:82: ff:7f:f3:ff:d7:f3:de:e7:9b:53:e7:63:ce:40:3e: df:fe:b2:b1:b1:76:ba:8f:52:05:c6:4c:4b:8c:12: 26:bb:e5:d4:ff:39:a0:dc:cc:22:5b:7e:12:a5:b4: e0:40:78:eb:07:aa:36:3f:86:dd:51:08:16:d5:89: 61:10:7b:6a:ed:22:da:e2:bd:5f:32:99:a8:69:89: ba:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:60:1B:B0:99:D4:28:26:49:47:0B:D7:B0:E4:37:47:84:C3:09:13 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS63023.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.83.0/24 140.99.101.0/24 140.99.252.0/24 140.99.254.0/23 Signature Algorithm: sha256WithRSAEncryption a8:72:ae:6a:f2:cd:b9:db:4e:d3:18:48:47:c6:ad:be:99:6a: bf:f0:32:dc:d3:96:39:ef:86:6b:27:0b:33:ab:7c:c8:12:12: b7:2a:53:96:dc:b1:a9:6d:bf:48:d2:cb:cd:d7:84:48:67:a3: 73:b5:7c:0e:45:a8:3c:13:6d:bb:13:59:a0:b4:41:17:a9:77: 12:33:ff:e2:99:ba:2c:ca:5f:78:27:c3:5f:85:df:e2:fb:78: c6:37:ce:db:e5:86:e9:44:21:b2:ad:58:07:cb:64:d4:54:d8: 0d:4f:08:82:bf:23:28:39:37:a5:3e:8a:ef:48:a4:ea:5c:90: b0:44:97:b7:1f:1f:a1:e3:ba:be:4f:29:58:36:b4:cb:a1:a1: ca:3f:0b:95:0e:12:6c:21:f9:94:bc:37:04:13:13:70:6e:3e: e7:35:c9:67:07:21:2d:95:e6:8c:4b:0a:38:29:13:75:72:35: 03:82:f1:6e:94:be:34:ae:3d:11:b9:c1:45:86:3e:d9:ec:1e: c3:17:ba:5d:26:b9:06:48:c4:d9:81:33:14:4a:9a:f8:f9:ab: ef:41:7a:7b:6c:36:66:34:52:2b:df:9f:ee:87:31:33:1f:9a: f3:64:0d:ad:3f:8c:0b:da:3c:7d:18:30:04:e7:cd:58:9d:fd: fc:ea:fd:61 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIUFLI2exj8rsELpsipf2R9s7gLnTowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUwODE1MDEyNDQ0WhcNMjYwODE0MDEyOTQ0 WjAzMTEwLwYDVQQDEygyRDYwMUJCMDk5RDQyODI2NDk0NzBCRDdCMEU0Mzc0Nzg0 QzMwOTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFoIhDOp4Czx dB1AdRDzOhZ/tne6IcYcSjosHT9n7dk8KKXQeq9AwzKM8fAyZrQsxkTYeT9+PUVq PhVBK5hRDiqh6YYGSmCe4CK+rXhfDqHzE2UNGGsvjqBFLT2+my1EeDtV52HnbP+2 jzVIJ05VlKeBpI9+96qEWWEIQu0ruUUxBHFC1Rke7Wb6P9lZz6i3tz+n6qaq5l1H Kwik1QAKyXijmb7qOS3D35BXziuC0trlXIL/f/P/1/Pe55tT52POQD7f/rKxsXa6 j1IFxkxLjBImu+XU/zmg3MwiW34SpbTgQHjrB6o2P4bdUQgW1YlhEHtq7SLa4r1f MpmoaYm6NwIDAQABo4ICkDCCAowwHQYDVR0OBBYEFC1gG7CZ1CgmSUcL17DkN0eE wwkTMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzYzMDIzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAjGNTAwQAjGNlAwQAjGP8AwQBjGP+ MA0GCSqGSIb3DQEBCwUAA4IBAQCocq5q8s25207TGEhHxq2+mWq/8DLc05Y574Zr Jwszq3zIEhK3KlOW3LGpbb9I0svN14RIZ6NztXwORag8E227E1mgtEEXqXcSM//i mbosyl94J8Nfhd/i+3jGN87b5YbpRCGyrVgHy2TUVNgNTwiCvyMoOTelPorvSKTq XJCwRJe3Hx+h47q+TylYNrTLoaHKPwuVDhJsIfmUvDcEExNwbj7nNclnByEtleaM Swo4KRN1cjUDgvFulL40rj0RucFFhj7Z7B7DF7pdJrkGSMTZgTMUSpr4+avvQXp7 bDZmNFIr35/uhzEzH5rzZA2tP4wL2jx9GDAE581Ynf386v1h -----END CERTIFICATE-----Generated at Sat Aug 23 13:16:59 2025 by rpki-client