$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: W1DbSpptp39Mv8oBg+4gBzODHpPTYMAJlK0SQGamXzY= Subject key identifier: FF:D9:8A:6A:09:77:AA:E0:81:DD:6A:C5:73:D2:7B:38:C1:75:B8:F2 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 47EDE0EB238A47905D4961CADEC596F9FA80FA12 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa Signing time: Tue 25 Mar 2025 14:10:22 +0000 ROA not before: Tue 25 Mar 2025 14:05:22 +0000 ROA not after: Tue 24 Mar 2026 14:10:22 +0000 asID: 14618 IP address blocks: 23.95.142.0/24 maxlen: 24 209.200.231.0/24 maxlen: 24 209.200.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 23:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ed:e0:eb:23:8a:47:90:5d:49:61:ca:de:c5:96:f9:fa:80:fa:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Mar 25 14:05:22 2025 GMT Not After : Mar 24 14:10:22 2026 GMT Subject: CN=FFD98A6A0977AAE081DD6AC573D27B38C175B8F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5a:0a:1c:43:fa:04:c4:15:6e:81:dc:f6:71: 4e:2f:0e:3f:21:49:73:f6:12:e0:21:43:ed:16:57: a1:01:32:8f:ec:4f:6a:db:0b:9e:9a:e5:03:12:63: 0f:17:07:2b:97:28:1c:ed:09:34:52:d8:9d:35:d3: 47:0b:9e:97:91:2b:42:cf:6b:e2:46:84:4d:18:6c: ac:70:3f:c8:2f:13:4e:73:b6:a8:84:c6:5c:59:09: 2a:e8:90:0d:96:98:b7:15:a6:c9:92:80:00:7d:b5: 64:11:df:69:99:cd:f7:45:67:ea:1f:ed:86:44:92: 75:9d:3b:c2:6c:b8:1e:53:90:e5:2f:af:e1:c5:fc: b1:26:ba:a9:ba:88:2e:84:f7:9a:d4:f3:10:40:dd: be:fe:4e:28:cc:4c:a6:1b:66:9f:bf:e2:5a:fb:f6: 85:fe:e4:df:95:c4:3f:0e:53:e3:99:e2:44:e3:53: a8:1d:24:52:92:5f:00:a0:c9:1b:c1:c2:22:78:ca: 8d:5f:2b:26:d7:b4:88:61:b7:fb:4f:36:ac:d5:bd: c3:89:9f:f2:eb:8d:dc:38:b5:8e:15:7b:82:37:f7: 9e:ad:e4:7b:e8:6b:f2:bf:02:4d:7c:34:be:68:0f: e0:c2:da:ef:fc:2d:67:e6:00:ff:62:a7:ca:fe:74: 76:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D9:8A:6A:09:77:AA:E0:81:DD:6A:C5:73:D2:7B:38:C1:75:B8:F2 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.142.0/24 209.200.231.0/24 209.200.241.0/24 Signature Algorithm: sha256WithRSAEncryption 51:db:9f:73:db:c9:7b:e2:36:c5:25:4d:7c:4f:8d:f6:7e:57: 5c:39:df:7b:16:09:71:2d:56:c6:c8:83:33:f2:88:7c:a7:e8: fc:59:e9:79:bf:9d:5a:ec:ff:87:42:1c:99:48:52:6b:50:fe: a1:57:17:3e:b1:69:62:88:52:69:f1:a1:68:18:7b:b8:35:03: a6:80:81:20:4b:1f:3f:0a:04:b4:b6:c3:a7:2a:2b:4f:eb:ee: 0c:2e:80:5f:56:5d:56:2a:d5:13:12:e0:0e:8c:22:32:9d:2a: 14:64:c8:97:e4:ef:84:96:0e:77:8e:88:ad:5c:cc:aa:47:df: ec:9c:f5:62:f3:e1:a0:0c:9b:25:e2:30:c4:67:de:75:fc:40: 41:cc:44:67:63:ec:b8:6f:dc:98:87:85:ec:30:ce:1e:d2:59: 37:6f:31:88:c1:07:98:90:5f:67:49:e6:15:9a:d7:5c:ce:10: 3d:43:4d:97:24:cc:2b:33:38:02:d9:6c:01:d6:bc:45:6d:5a: ca:17:74:50:e5:58:1a:33:9d:15:87:84:77:e9:3a:a4:46:5d: 9a:1c:c3:28:db:f3:09:d6:e1:76:37:43:c3:09:a4:c8:cd:ba: 30:aa:21:6e:5f:ea:24:19:38:53:2c:65:7e:af:93:58:9a:fc: 50:57:84:c0 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUR+3g6yOKR5BdSWHK3sWW+fqA+hIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwMzI1MTQwNTIyWhcNMjYwMzI0MTQxMDIy WjAzMTEwLwYDVQQDEyhGRkQ5OEE2QTA5NzdBQUUwODFERDZBQzU3M0QyN0IzOEMx NzVCOEYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1oKHEP6BMQV boHc9nFOLw4/IUlz9hLgIUPtFlehATKP7E9q2wuemuUDEmMPFwcrlygc7Qk0Utid NdNHC56XkStCz2viRoRNGGyscD/ILxNOc7aohMZcWQkq6JANlpi3FabJkoAAfbVk Ed9pmc33RWfqH+2GRJJ1nTvCbLgeU5DlL6/hxfyxJrqpuoguhPea1PMQQN2+/k4o zEymG2afv+Ja+/aF/uTflcQ/DlPjmeJE41OoHSRSkl8AoMkbwcIieMqNXysm17SI Ybf7Tzas1b3DiZ/y643cOLWOFXuCN/eereR76GvyvwJNfDS+aA/gwtrv/C1n5gD/ YqfK/nR24wIDAQABo4ICijCCAoYwHQYDVR0OBBYEFP/ZimoJd6rggd1qxXPSezjB dbjyMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzE0NjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAF1+OAwQA0cjnAwQA0cjxMA0GCSqG SIb3DQEBCwUAA4IBAQBR259z28l74jbFJU18T432fldcOd97FglxLVbGyIMz8oh8 p+j8Wel5v51a7P+HQhyZSFJrUP6hVxc+sWliiFJp8aFoGHu4NQOmgIEgSx8/CgS0 tsOnKitP6+4MLoBfVl1WKtUTEuAOjCIynSoUZMiX5O+Elg53joitXMyqR9/snPVi 8+GgDJsl4jDEZ951/EBBzERnY+y4b9yYh4XsMM4e0lk3bzGIwQeYkF9nSeYVmtdc zhA9Q02XJMwrMzgC2WwB1rxFbVrKF3RQ5VgaM50Vh4R36TqkRl2aHMMo2/MJ1uF2 N0PDCaTIzbowqiFuX+okGThTLGV+r5NYmvxQV4TA -----END CERTIFICATE-----Generated at Sun Apr 20 02:07:03 2025 by rpki-client