$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: Zvp4kGG+gLXi5diY5YY6FU8yLVly9TB1whaqxId37tk= Subject key identifier: 43:83:DE:4A:76:4B:2A:45:09:B8:55:54:FF:8D:D1:14:27:4D:12:52 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 4401E38663E56793EF57F0059942476E80201016 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14618.roa Signing time: Thu 02 May 2024 07:29:24 +0000 ROA not before: Thu 02 May 2024 07:24:24 +0000 ROA not after: Thu 01 May 2025 07:29:24 +0000 asID: 14618 IP address blocks: 104.234.137.0/24 maxlen: 24 104.234.141.0/24 maxlen: 24 104.234.143.0/24 maxlen: 24 104.234.160.0/24 maxlen: 24 104.234.175.0/24 maxlen: 24 104.234.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 20:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:01:e3:86:63:e5:67:93:ef:57:f0:05:99:42:47:6e:80:20:10:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: May 2 07:24:24 2024 GMT Not After : May 1 07:29:24 2025 GMT Subject: CN=4383DE4A764B2A4509B85554FF8DD114274D1252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d2:63:39:b1:2f:65:7d:fb:2d:5c:48:e4:16: 46:0e:30:b6:5f:fb:b6:43:55:9c:62:2f:5c:1a:be: 5e:bc:7c:1a:ef:08:28:4e:f7:47:93:6d:a4:f9:f2: 66:f1:37:3b:22:55:70:0d:b5:e9:36:66:16:8e:54: dd:58:02:a3:af:26:7b:c1:16:71:40:84:59:85:1f: 9b:40:2f:eb:b7:8f:e8:aa:5b:73:b1:6f:02:0d:cc: 29:de:b3:7b:3c:67:b3:52:88:25:f4:d2:6f:bd:26: 38:1a:c0:e8:b0:a2:de:64:d0:48:ca:1b:48:07:a8: 60:2e:31:ff:53:35:7b:26:7b:1b:3c:7e:ac:31:4b: 37:d0:aa:bd:14:be:77:ce:b3:44:24:42:39:78:11: 13:9b:e9:04:b7:b1:43:c9:04:32:61:35:96:a1:02: 96:69:2d:c7:8c:68:c3:d8:c3:c6:a4:4b:14:5c:ea: 00:5c:9a:ac:7a:3b:8f:35:23:7f:91:5e:c2:cc:dd: ce:f4:8a:70:1f:e2:d0:b3:d4:1f:b1:e0:d4:7c:ff: 96:f6:dc:33:ca:54:25:e3:de:20:16:56:97:a7:1c: 66:48:b6:5e:85:59:07:76:e7:37:c7:3a:e0:35:9a: 21:c4:3d:4e:86:88:96:31:16:89:77:96:a2:45:0c: 36:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:83:DE:4A:76:4B:2A:45:09:B8:55:54:FF:8D:D1:14:27:4D:12:52 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.137.0/24 104.234.141.0/24 104.234.143.0/24 104.234.160.0/24 104.234.175.0/24 104.234.187.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:f4:e2:41:0c:06:a7:e6:8f:83:9f:90:8a:88:71:13:d4:c6: f1:66:eb:fa:cf:38:a7:d5:e5:f6:d5:e0:6d:1d:58:54:d7:0e: c0:24:b0:1f:53:b3:57:36:4d:0d:13:d1:2a:7b:20:e9:a1:71: 8d:2d:db:f2:be:b2:1f:2b:5c:f4:20:5b:de:44:4c:cf:d0:8e: 9e:b1:34:2b:20:fa:a3:48:86:ea:dc:9a:e1:6d:8d:1a:20:21: 25:f2:97:8d:46:b1:fb:ad:1f:1a:b4:98:61:cc:9b:b8:2e:27: bf:11:f9:50:71:68:e5:73:de:bf:2a:2a:e6:aa:69:ca:66:86: 94:7e:2d:d6:59:02:e7:9b:12:52:97:fd:9c:59:f2:cf:b5:13: fa:42:ce:62:4a:e7:5a:cb:28:4e:a8:c2:3a:93:58:6e:b6:b3: 0c:66:e9:be:ca:b9:c7:a6:78:76:9f:c6:4c:f6:c0:ea:8e:80: 23:48:1e:1c:6b:6e:10:d0:f2:d4:c1:57:77:c6:4c:31:9e:01: 8d:85:2e:fc:67:72:75:e1:df:91:94:53:a4:13:2a:2d:1e:06: e9:d7:45:d9:ce:15:3d:1a:93:74:84:6e:2d:6c:7c:63:28:ea: 7a:02:cb:ac:50:67:ce:3d:31:f8:89:6f:6b:5d:2a:89:08:df: f7:bb:36:34 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIURAHjhmPlZ5PvV/AFmUJHboAgEBYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwNTAyMDcyNDI0WhcNMjUwNTAxMDcyOTI0 WjAzMTEwLwYDVQQDEyg0MzgzREU0QTc2NEIyQTQ1MDlCODU1NTRGRjhERDExNDI3 NEQxMjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdJjObEvZX37 LVxI5BZGDjC2X/u2Q1WcYi9cGr5evHwa7wgoTvdHk22k+fJm8Tc7IlVwDbXpNmYW jlTdWAKjryZ7wRZxQIRZhR+bQC/rt4/oqltzsW8CDcwp3rN7PGezUogl9NJvvSY4 GsDosKLeZNBIyhtIB6hgLjH/UzV7JnsbPH6sMUs30Kq9FL53zrNEJEI5eBETm+kE t7FDyQQyYTWWoQKWaS3HjGjD2MPGpEsUXOoAXJqsejuPNSN/kV7CzN3O9IpwH+LQ s9QfseDUfP+W9twzylQl494gFlaXpxxmSLZehVkHduc3xzrgNZohxD1OhoiWMRaJ d5aiRQw2nwIDAQABo4ICnDCCApgwHQYDVR0OBBYEFEOD3kp2SypFCbhVVP+N0RQn TRJSMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzE0NjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0G CCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAaOqJAwQAaOqNAwQAaOqPAwQAaOqg AwQAaOqvAwQAaOq7MA0GCSqGSIb3DQEBCwUAA4IBAQAb9OJBDAan5o+Dn5CKiHET 1MbxZuv6zzin1eX21eBtHVhU1w7AJLAfU7NXNk0NE9EqeyDpoXGNLdvyvrIfK1z0 IFveREzP0I6esTQrIPqjSIbq3JrhbY0aICEl8peNRrH7rR8atJhhzJu4Lie/EflQ cWjlc96/KirmqmnKZoaUfi3WWQLnmxJSl/2cWfLPtRP6Qs5iSudayyhOqMI6k1hu trMMZum+yrnHpnh2n8ZM9sDqjoAjSB4ca24Q0PLUwVd3xkwxngGNhS78Z3J14d+R lFOkEyotHgbp10XZzhU9GpN0hG4tbHxjKOp6AsusUGfOPTH4iW9rXSqJCN/3uzY0 -----END CERTIFICATE-----Generated at Sun May 5 21:18:50 2024 by rpki-client on console-ams.rpki-client.org