$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: doJqA09OsaKYHrnYFd9Y5pcsisO8XFysP8I8nZT+xww= Subject key identifier: A9:EE:23:5F:1C:2D:42:C4:55:82:57:44:B1:45:12:83:9E:8F:FF:B9 Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Certificate serial: 785A1577E2AB7563430806A3413C26FBAE17CB63 Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS14618.roa Signing time: Tue 31 Dec 2024 01:01:03 +0000 ROA not before: Tue 31 Dec 2024 00:56:03 +0000 ROA not after: Tue 30 Dec 2025 01:01:03 +0000 asID: 14618 IP address blocks: 157.53.253.0/24 maxlen: 24 157.53.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Feb 2025 23:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:5a:15:77:e2:ab:75:63:43:08:06:a3:41:3c:26:fb:ae:17:cb:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Validity Not Before: Dec 31 00:56:03 2024 GMT Not After : Dec 30 01:01:03 2025 GMT Subject: CN=A9EE235F1C2D42C455825744B14512839E8FFFB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ac:94:53:ff:d4:ed:01:c1:a3:d0:93:79:ef: 2b:24:d8:b3:02:4f:42:f6:8a:ff:bb:43:53:c3:97: 9a:41:76:1e:ba:77:5d:cd:90:e6:b7:fd:b9:b1:eb: f7:ee:d6:41:b6:db:bb:bd:81:bc:ae:d0:fe:94:5d: 5a:e7:d4:e9:5d:80:0c:8a:83:7f:04:31:5f:48:5a: 31:1a:0e:74:57:86:0f:0b:a4:2b:63:72:9c:6d:02: d1:a5:54:1a:7d:6a:1a:32:46:d9:69:dd:f9:21:ba: 54:2a:f7:24:ae:64:90:6b:93:9c:af:c2:99:20:a3: db:07:93:28:49:be:28:d8:29:2d:6c:1d:70:c2:4a: 78:2c:c9:51:82:48:57:bf:50:17:18:29:9c:e5:7f: 9e:a3:6d:a3:58:2b:3e:72:c7:6b:27:77:42:e6:b2: a7:16:c9:55:49:83:42:18:83:48:58:8a:cf:e8:c7: 60:15:60:6a:c5:5d:28:93:9a:ff:fe:08:bc:24:e7: b5:39:e6:53:64:72:ab:06:0c:1b:3b:a6:88:96:c0: 9f:5f:79:36:af:83:93:ac:df:73:33:3c:21:98:8e: 53:0b:c3:37:80:a0:0a:8d:15:d8:68:84:e9:78:37: c3:ee:67:dd:e1:b9:5b:89:ad:7b:a1:bb:b9:21:a5: f0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EE:23:5F:1C:2D:42:C4:55:82:57:44:B1:45:12:83:9E:8F:FF:B9 X509v3 Authority Key Identifier: keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.53.253.0-157.53.255.255 Signature Algorithm: sha256WithRSAEncryption 8a:20:53:98:80:0b:71:7b:54:43:20:8c:c9:a7:81:d6:75:9f: c9:ea:29:33:00:a7:2c:ee:32:a4:3c:d7:2e:ad:f8:74:06:3f: 0a:cd:82:ef:1d:ba:be:b5:0c:2f:ba:76:e2:b8:08:a3:63:a6: 13:d6:83:7e:1c:1c:16:d3:18:34:40:35:55:0d:42:2c:81:37: 73:73:74:b2:d1:50:f9:ef:25:f7:d2:05:03:17:c3:bc:1a:e5: b9:e2:94:38:72:31:79:02:f3:bb:46:2c:42:63:32:a5:77:e5: b6:53:c3:84:73:6f:9b:bf:1c:c8:dc:7a:a8:58:85:2c:c4:d8: df:a1:10:eb:6e:e8:2d:a3:3e:a3:e1:1e:39:ca:21:e5:e7:33: 6a:7d:9a:15:fa:2d:5e:b9:d9:a1:3b:d1:85:f2:ae:12:5e:72: c0:6b:06:0b:87:d5:72:ea:12:07:d8:34:97:03:90:39:c6:2f: fb:8c:00:92:cd:22:82:ff:90:b1:47:17:48:87:e5:6f:23:96: 28:5b:69:5a:c2:46:31:c8:eb:18:ea:c8:3a:e9:8c:a0:2b:20: 66:e2:cd:b4:0e:ee:38:0b:7e:18:96:4f:be:c5:05:b0:d9:2a: 67:88:e8:5d:de:b0:63:f5:34:41:57:1b:77:a2:f1:a2:aa:3d: d0:8a:63:1a -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUeFoVd+KrdWNDCAajQTwm+64Xy2MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjQxMjMxMDA1NjAzWhcNMjUxMjMwMDEwMTAz WjAzMTEwLwYDVQQDEyhBOUVFMjM1RjFDMkQ0MkM0NTU4MjU3NDRCMTQ1MTI4MzlF OEZGRkI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqyUU//U7QHB o9CTee8rJNizAk9C9or/u0NTw5eaQXYeunddzZDmt/25sev37tZBttu7vYG8rtD+ lF1a59TpXYAMioN/BDFfSFoxGg50V4YPC6QrY3KcbQLRpVQafWoaMkbZad35IbpU KvckrmSQa5Ocr8KZIKPbB5MoSb4o2CktbB1wwkp4LMlRgkhXv1AXGCmc5X+eo22j WCs+csdrJ3dC5rKnFslVSYNCGINIWIrP6MdgFWBqxV0ok5r//gi8JOe1OeZTZHKr BgwbO6aIlsCfX3k2r4OTrN9zMzwhmI5TC8M3gKAKjRXYaITpeDfD7mfd4blbia17 obu5IaXwhwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFKnuI18cLULEVYJXRLFFEoOe j/+5MB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0 ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw ODRiODYvMC9BUzE0NjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCYG CCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBACdNf0DAwGdNDANBgkqhkiG9w0B AQsFAAOCAQEAiiBTmIALcXtUQyCMyaeB1nWfyeopMwCnLO4ypDzXLq34dAY/Cs2C 7x26vrUML7p24rgIo2OmE9aDfhwcFtMYNEA1VQ1CLIE3c3N0stFQ+e8l99IFAxfD vBrlueKUOHIxeQLzu0YsQmMypXfltlPDhHNvm78cyNx6qFiFLMTY36EQ627oLaM+ o+EeOcoh5eczan2aFfotXrnZoTvRhfKuEl5ywGsGC4fVcuoSB9g0lwOQOcYv+4wA ks0igv+QsUcXSIflbyOWKFtpWsJGMcjrGOrIOumMoCsgZuLNtA7uOAt+GJZPvsUF sNkqZ4joXd6wY/U0QVcbd6Lxoqo90IpjGg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:33 2025 by rpki-client