$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: 5PgjHnwYhJOgeZo3qaR4Q2BCfY7PlckAM2uBv6vYskU= Subject key identifier: 90:A6:4C:6C:D2:E3:C3:5A:79:B1:D0:95:BD:9B:39:03:83:8D:52:3E Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 3F30DA967FC0FE12433E24F35A481CD690F84D8F Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa Signing time: Thu 11 Apr 2024 13:13:42 +0000 ROA not before: Thu 11 Apr 2024 13:08:42 +0000 ROA not after: Thu 10 Apr 2025 13:13:42 +0000 asID: 14618 IP address blocks: 157.254.2.0/23 maxlen: 24 157.254.49.0/24 maxlen: 24 157.254.200.0/22 maxlen: 22 157.254.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 11:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:30:da:96:7f:c0:fe:12:43:3e:24:f3:5a:48:1c:d6:90:f8:4d:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Apr 11 13:08:42 2024 GMT Not After : Apr 10 13:13:42 2025 GMT Subject: CN=90A64C6CD2E3C35A79B1D095BD9B3903838D523E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:18:66:c1:c9:ee:05:e2:59:13:c9:69:f7:c3: 8b:97:35:5d:1b:e9:63:02:ad:16:f7:f6:63:ff:f6: 7b:7a:d7:e7:e2:c7:97:13:7f:e5:30:75:af:3d:b9: 0b:8d:48:62:81:e4:8b:e3:30:5b:47:42:20:79:d2: 83:9e:27:2f:6d:47:47:6f:a7:61:96:10:fb:25:32: 4a:a4:31:b1:6a:da:56:9e:a7:cb:45:2f:7d:67:1c: b1:6d:67:0c:05:45:02:cc:ee:14:0f:c0:0f:64:96: 41:10:1a:3c:5a:02:fb:90:29:8c:8e:d6:36:51:9d: a8:20:39:33:fb:15:59:05:f7:12:cf:cc:6f:a7:37: 7e:33:44:be:a6:72:ee:a5:8e:9d:96:d4:ad:84:d2: 15:df:55:c3:6f:99:06:3d:38:ba:69:33:2b:8e:d4: a6:04:57:6a:bc:42:8c:18:ca:70:a0:34:7f:e4:43: ca:df:dd:69:b5:74:85:19:d1:21:8f:bd:32:b7:d9: 1e:3e:ee:d5:54:5a:df:71:cb:10:5d:92:c3:d3:47: 5c:bd:a3:7c:02:a3:6e:f6:bc:30:89:35:f9:6c:7c: bb:12:7b:af:03:06:03:19:d3:c5:15:ab:2a:83:96: b0:4c:dc:78:48:94:39:89:b7:8d:ac:74:28:8c:4a: 92:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A6:4C:6C:D2:E3:C3:5A:79:B1:D0:95:BD:9B:39:03:83:8D:52:3E X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.2.0/23 157.254.49.0/24 157.254.200.0/22 157.254.217.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:0d:a8:b4:79:b4:44:09:9b:a1:55:ab:11:fe:98:36:0f:f9: 2c:83:ea:11:b1:f7:c7:7c:70:be:e8:99:2f:d1:58:0a:ac:1e: 87:b4:cb:e6:57:db:4e:59:87:41:0e:4d:e7:17:ad:ea:90:86: e7:78:4c:33:62:72:81:3c:cb:02:d0:9f:ec:f2:52:0e:f3:27: cc:10:50:3c:9b:92:1a:28:74:62:20:2d:1e:62:b9:e8:81:6e: 04:80:3e:65:da:3e:b5:76:44:5c:f3:4b:30:b4:fb:9e:62:25: cd:65:98:71:2c:9b:e0:53:e6:9a:8e:5c:54:86:a8:20:41:46: d5:2c:13:31:39:58:1c:bf:cd:80:c6:0f:7b:01:0f:d7:4c:f6: 8c:08:28:21:ba:8c:83:a5:79:78:31:43:46:a1:15:38:de:82: e6:cf:49:6b:e2:9d:d4:ac:8d:92:35:5a:cf:23:bb:f1:c1:e8: 7c:d6:b6:df:14:37:18:94:57:a6:77:38:a6:50:f0:4e:d5:ba: 97:de:0b:41:6e:46:01:41:79:4b:d5:e7:e9:fe:7d:1d:76:bb: d6:74:31:7b:cc:cd:64:60:ec:b3:ad:08:2d:9f:18:32:1c:f3: ea:86:73:1a:7d:d0:fe:4a:59:d9:db:6b:21:09:83:8b:df:87: 44:12:19:c2 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIUPzDaln/A/hJDPiTzWkgc1pD4TY8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQwNDExMTMwODQyWhcNMjUwNDEwMTMxMzQy WjAzMTEwLwYDVQQDEyg5MEE2NEM2Q0QyRTNDMzVBNzlCMUQwOTVCRDlCMzkwMzgz OEQ1MjNFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxhmwcnuBeJZ E8lp98OLlzVdG+ljAq0W9/Zj//Z7etfn4seXE3/lMHWvPbkLjUhigeSL4zBbR0Ig edKDnicvbUdHb6dhlhD7JTJKpDGxatpWnqfLRS99ZxyxbWcMBUUCzO4UD8APZJZB EBo8WgL7kCmMjtY2UZ2oIDkz+xVZBfcSz8xvpzd+M0S+pnLupY6dltSthNIV31XD b5kGPTi6aTMrjtSmBFdqvEKMGMpwoDR/5EPK391ptXSFGdEhj70yt9kePu7VVFrf ccsQXZLD00dcvaN8AqNu9rwwiTX5bHy7EnuvAwYDGdPFFasqg5awTNx4SJQ5ibeN rHQojEqSAwIDAQABo4ICkDCCAowwHQYDVR0OBBYEFJCmTGzS48NaebHQlb2bOQOD jVI+MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE0NjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBnf4CAwQAnf4xAwQCnf7IAwQAnf7Z MA0GCSqGSIb3DQEBCwUAA4IBAQAPDai0ebRECZuhVasR/pg2D/ksg+oRsffHfHC+ 6Jkv0VgKrB6HtMvmV9tOWYdBDk3nF63qkIbneEwzYnKBPMsC0J/s8lIO8yfMEFA8 m5IaKHRiIC0eYrnogW4EgD5l2j61dkRc80swtPueYiXNZZhxLJvgU+aajlxUhqgg QUbVLBMxOVgcv82Axg97AQ/XTPaMCCghuoyDpXl4MUNGoRU43oLmz0lr4p3UrI2S NVrPI7vxweh81rbfFDcYlFemdzimUPBO1bqX3gtBbkYBQXlL1efp/n0ddrvWdDF7 zM1kYOyzrQgtnxgyHPPqhnMafdD+SlnZ22shCYOL34dEEhnC -----END CERTIFICATE-----Generated at Thu May 2 10:17:28 2024 by rpki-client on console-ams.rpki-client.org