$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63023.roa File: AS63023.roa (raw, json) Hash identifier: JTUKQL6Vb9R4Xgqmi7mKsrOpWwAdchXolB0H7WIUlU0= Subject key identifier: 23:E0:A0:35:38:3D:02:F2:2F:3B:5F:9C:74:00:55:5A:B6:E7:B9:BC Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 635F96587AE30A8691F642BB612D467D8B39C7F5 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63023.roa Signing time: Tue 28 Jan 2025 12:49:44 +0000 ROA not before: Tue 28 Jan 2025 12:44:44 +0000 ROA not after: Tue 27 Jan 2026 12:49:44 +0000 asID: 63023 IP address blocks: 190.92.164.0/24 maxlen: 24 192.210.252.0/24 maxlen: 24 198.23.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:5f:96:58:7a:e3:0a:86:91:f6:42:bb:61:2d:46:7d:8b:39:c7:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jan 28 12:44:44 2025 GMT Not After : Jan 27 12:49:44 2026 GMT Subject: CN=23E0A035383D02F22F3B5F9C7400555AB6E7B9BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:81:5d:23:4c:a8:f9:df:27:94:84:d9:1a:2f: 1d:1e:95:1c:bd:e4:9d:90:4b:37:9b:9b:8c:02:46: df:bb:a2:02:9e:13:e0:46:79:16:56:0a:82:51:8a: 9f:f8:21:bf:62:cf:fb:14:68:d1:83:db:7a:f8:d0: 0a:3a:62:58:29:fc:92:40:6c:69:ac:42:77:33:7c: 8b:e3:8b:5a:6b:50:8e:0a:71:15:8d:c0:ce:1f:28: 36:09:65:98:35:74:25:df:ed:2c:06:3c:f5:30:d0: 8f:9a:3d:da:30:db:49:b8:78:bc:c0:1c:ef:dd:15: 91:86:4a:07:8e:cc:13:f2:1f:1d:0f:5d:d5:60:ca: 63:0a:ce:df:9c:32:4b:cd:01:0e:26:ae:83:d4:59: d2:b9:26:e8:6b:06:e2:af:db:32:d5:a3:52:39:ec: 4d:d5:5f:f0:cc:af:91:35:3e:e0:00:67:95:ef:ed: 2e:71:a5:d4:16:85:66:fc:e8:3b:58:e2:f8:a1:15: d4:7b:9a:70:1c:e6:34:8a:c7:d9:2a:14:6a:3f:8f: 72:72:98:21:f9:ce:7a:0d:fb:be:04:7b:07:16:9e: 53:dd:d0:2d:b0:70:08:31:b1:0e:d0:39:84:51:18: 2c:da:38:93:c3:28:33:90:91:69:b3:a9:3b:94:83: 26:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E0:A0:35:38:3D:02:F2:2F:3B:5F:9C:74:00:55:5A:B6:E7:B9:BC X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63023.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.92.164.0/24 192.210.252.0/24 198.23.184.0/24 Signature Algorithm: sha256WithRSAEncryption 95:b6:ba:3b:fa:c3:ff:c7:b7:32:27:69:41:77:e7:2e:96:8a: ce:e3:37:e3:ee:7e:5f:86:0d:dc:60:9a:3e:e5:54:dc:5c:b5: 2b:74:61:dc:c7:82:61:db:12:65:b3:a7:46:0b:58:d4:82:c9: 84:3a:16:a1:a2:02:45:55:98:8f:a5:a9:34:42:6d:4b:5c:95: 2a:eb:6c:66:b6:63:82:96:7e:a2:87:47:b6:27:34:a6:bc:7a: 32:26:da:7e:63:c8:2f:f5:93:5a:eb:fb:a1:81:08:dd:1e:5a: 78:37:c7:62:c5:a1:56:45:1f:59:68:5b:ff:d9:a8:03:53:24: 96:ce:1c:81:7f:18:31:8a:d7:39:09:ed:ed:62:3d:23:3f:d9: 69:6a:63:1d:5e:c5:82:85:4a:45:78:e6:53:81:17:f5:18:58: a5:3d:a5:cd:4e:5b:b7:d5:88:67:6a:f5:a6:c0:c8:1a:ba:c9: 05:a6:d0:3e:47:f9:54:b6:a2:22:49:d3:1e:60:19:38:96:25: 90:53:c5:63:0e:2e:36:d3:98:4c:bf:90:a1:eb:8a:48:7f:10: 74:0a:55:4b:64:0e:bb:33:85:4c:21:dc:0c:57:04:f5:66:14: fd:f4:89:2f:9b:46:dc:0e:df:7f:f6:9d:ba:d6:27:8e:25:fd: b5:bd:59:48 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUY1+WWHrjCoaR9kK7YS1GfYs5x/UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwMTI4MTI0NDQ0WhcNMjYwMTI3MTI0OTQ0 WjAzMTEwLwYDVQQDEygyM0UwQTAzNTM4M0QwMkYyMkYzQjVGOUM3NDAwNTU1QUI2 RTdCOUJDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIFdI0yo+d8n lITZGi8dHpUcveSdkEs3m5uMAkbfu6ICnhPgRnkWVgqCUYqf+CG/Ys/7FGjRg9t6 +NAKOmJYKfySQGxprEJ3M3yL44taa1COCnEVjcDOHyg2CWWYNXQl3+0sBjz1MNCP mj3aMNtJuHi8wBzv3RWRhkoHjswT8h8dD13VYMpjCs7fnDJLzQEOJq6D1FnSuSbo awbir9sy1aNSOexN1V/wzK+RNT7gAGeV7+0ucaXUFoVm/Og7WOL4oRXUe5pwHOY0 isfZKhRqP49ycpgh+c56Dfu+BHsHFp5T3dAtsHAIMbEO0DmEURgs2jiTwygzkJFp s6k7lIMmJQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFCPgoDU4PQLyLztfnHQAVVq2 57m8MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzYzMDIzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAvlykAwQAwNL8AwQAxhe4MA0GCSqG SIb3DQEBCwUAA4IBAQCVtro7+sP/x7cyJ2lBd+culorO4zfj7n5fhg3cYJo+5VTc XLUrdGHcx4Jh2xJls6dGC1jUgsmEOhahogJFVZiPpak0Qm1LXJUq62xmtmOCln6i h0e2JzSmvHoyJtp+Y8gv9ZNa6/uhgQjdHlp4N8dixaFWRR9ZaFv/2agDUySWzhyB fxgxitc5Ce3tYj0jP9lpamMdXsWChUpFeOZTgRf1GFilPaXNTlu31YhnavWmwMga uskFptA+R/lUtqIiSdMeYBk4liWQU8VjDi4205hMv5Ch64pIfxB0ClVLZA67M4VM IdwMVwT1ZhT99Ikvm0bcDt9/9p261ieOJf21vVlI -----END CERTIFICATE-----Generated at Sat Apr 5 04:31:11 2025 by rpki-client