
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63023.roa
File: AS63023.roa (raw, json)
Hash identifier: oYow6l5+PoJoh/XBVXBLgclCCNY8oV65yjt5/YLmqg4=
Subject key identifier: B3:07:BE:20:7C:0A:51:AE:3C:C4:CA:CA:E7:60:C1:62:56:EC:00:8C
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 1F1FBFB631A6BA1B989A69DAEA5873085114BC55
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63023.roa
Signing time: Tue 03 Nov 2026 19:36:22 +0000
ROA not before: Tue 03 Nov 2026 19:31:22 +0000
ROA not after: Tue 02 Nov 2027 19:36:22 +0000
asID: 63023
IP address blocks: 104.234.100.0/24 maxlen: 24
104.234.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 08 Nov 2026 00:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:1f:bf:b6:31:a6:ba:1b:98:9a:69:da:ea:58:73:08:51:14:bc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Nov 3 19:31:22 2026 GMT
Not After : Nov 2 19:36:22 2027 GMT
Subject: CN=B307BE207C0A51AE3CC4CACAE760C16256EC008C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:15:44:aa:1b:b6:e4:f8:e0:fe:86:ed:f8:a7:
f9:66:2a:c8:b4:64:d2:02:14:51:b7:e5:e5:e7:90:
a4:72:1e:e2:92:48:66:e8:57:fd:83:7a:9a:2f:15:
4a:80:3f:f5:73:b4:44:b6:aa:ee:1e:2f:f2:45:8c:
bf:b7:f9:a9:fc:2d:a9:9f:84:23:59:05:18:28:77:
e6:63:98:a9:be:2b:df:cb:8e:51:1c:4f:e9:33:62:
2c:03:6f:5c:7b:1e:35:58:40:b2:65:39:4b:d8:81:
57:6e:07:13:9e:d7:59:ca:65:69:77:df:5e:8d:20:
d2:41:11:80:98:ba:66:c4:5e:6b:6d:bd:ef:a4:c4:
a1:2d:7c:86:1e:af:6e:05:51:25:07:30:f9:2c:1e:
ab:b0:49:65:e7:95:6d:0b:a0:8b:7a:fa:52:70:be:
71:d8:40:da:ec:6a:50:53:7f:70:e9:8b:2d:2e:0c:
ff:34:a9:7a:fb:e1:f4:61:5a:e6:34:19:fd:54:2f:
10:bf:39:34:4d:62:d9:a8:bf:15:47:de:08:1e:83:
d7:76:30:2f:a5:0f:db:e2:cc:0d:18:ba:46:0e:ab:
35:49:80:a2:2e:cd:31:ab:a0:6b:a5:b2:30:47:ed:
7e:1d:4e:00:f8:df:7f:d6:e0:01:56:db:76:d5:48:
56:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:07:BE:20:7C:0A:51:AE:3C:C4:CA:CA:E7:60:C1:62:56:EC:00:8C
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63023.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.100.0/24
104.234.117.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:3b:00:22:0b:72:6d:1f:ef:6c:17:29:91:a9:3e:d0:c8:35:
57:81:04:74:b9:ec:4a:e0:24:b4:51:24:7c:1b:e6:9f:8b:a5:
ce:80:43:96:39:5c:0b:cc:b8:46:af:f3:2d:69:74:d3:d7:24:
45:77:63:fb:55:49:e1:dc:05:7e:18:45:72:5f:a6:81:04:29:
11:c3:c1:d4:1d:68:10:ac:39:d5:2e:5f:c3:6d:c9:b5:94:67:
6c:41:26:96:62:32:10:a1:1a:fa:85:1b:47:dd:83:57:4f:72:
a3:77:99:7a:d4:e2:af:33:c9:a7:66:22:be:1e:8e:3c:5e:b3:
17:a2:ed:de:d2:a1:09:3b:09:bd:b1:6a:69:a2:32:e6:85:8f:
a5:a8:6d:66:85:c4:11:d5:27:a6:52:43:8e:6e:76:30:64:0d:
45:a1:6d:56:b8:8f:42:4e:ac:e8:f4:2d:28:e0:0f:71:49:d3:
05:d8:2e:0c:64:e0:8b:26:91:37:2e:82:76:b6:5b:77:47:10:
d1:e8:a7:cb:3f:47:0a:62:5e:b1:e0:22:5a:d0:81:55:08:49:
93:ed:9b:c1:ca:de:1f:ac:7d:aa:6a:ec:44:b1:7b:6e:e0:16:
73:5c:65:43:7a:36:64:23:55:9d:69:1f:5c:05:24:2e:62:01:
81:d7:4d:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIUHx+/tjGmuhuYmmna6lhzCFEUvFUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYxMTAzMTkzMTIyWhcNMjcxMTAyMTkzNjIy
WjAzMTEwLwYDVQQDEyhCMzA3QkUyMDdDMEE1MUFFM0NDNENBQ0FFNzYwQzE2MjU2
RUMwMDhDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhVEqhu25Pjg
/obt+Kf5ZirItGTSAhRRt+Xl55Ckch7ikkhm6Ff9g3qaLxVKgD/1c7REtqruHi/y
RYy/t/mp/C2pn4QjWQUYKHfmY5ipvivfy45RHE/pM2IsA29cex41WECyZTlL2IFX
bgcTntdZymVpd99ejSDSQRGAmLpmxF5rbb3vpMShLXyGHq9uBVElBzD5LB6rsEll
55VtC6CLevpScL5x2EDa7GpQU39w6YstLgz/NKl6++H0YVrmNBn9VC8Qvzk0TWLZ
qL8VR94IHoPXdjAvpQ/b4swNGLpGDqs1SYCiLs0xq6BrpbIwR+1+HU4A+N9/1uAB
Vtt21UhWnwIDAQABo4IChDCCAoAwHQYDVR0OBBYEFLMHviB8ClGuPMTKyudgwWJW
7ACMMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzYzMDIzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaOpkAwQAaOp1MA0GCSqGSIb3DQEB
CwUAA4IBAQCNOwAiC3JtH+9sFymRqT7QyDVXgQR0uexK4CS0USR8G+afi6XOgEOW
OVwLzLhGr/MtaXTT1yRFd2P7VUnh3AV+GEVyX6aBBCkRw8HUHWgQrDnVLl/Dbcm1
lGdsQSaWYjIQoRr6hRtH3YNXT3Kjd5l61OKvM8mnZiK+Ho48XrMXou3e0qEJOwm9
sWppojLmhY+lqG1mhcQR1SemUkOObnYwZA1FoW1WuI9CTqzo9C0o4A9xSdMF2C4M
ZOCLJpE3LoJ2tlt3RxDR6KfLP0cKYl6x4CJa0IFVCEmT7ZvByt4frH2qauxEsXtu
4BZzXGVDejZkI1WdaR9cBSQuYgGB101x
-----END CERTIFICATE-----
Generated at Sat Nov 7 16:55:58 2026 by rpki-client