$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: PlIBJlyjdQOeFcZwN3efM5NeofG9z5bQxGh93WaWsM8= Subject key identifier: FF:61:20:57:39:CD:82:8D:3A:94:13:51:4E:DA:92:8B:3D:C4:CC:0F Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 5DDCE1B95A69D8BAC9A5B02CECCEFC0086250907 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa Signing time: Sun 07 Jul 2024 00:00:23 +0000 ROA not before: Sat 06 Jul 2024 23:55:23 +0000 ROA not after: Sun 06 Jul 2025 00:00:23 +0000 asID: 14618 IP address blocks: 157.254.2.0/23 maxlen: 24 157.254.200.0/22 maxlen: 22 157.254.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:45:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:dc:e1:b9:5a:69:d8:ba:c9:a5:b0:2c:ec:ce:fc:00:86:25:09:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jul 6 23:55:23 2024 GMT Not After : Jul 6 00:00:23 2025 GMT Subject: CN=FF61205739CD828D3A9413514EDA928B3DC4CC0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f3:d5:ae:27:dc:bb:c1:e2:ce:d2:f7:a0:a3: a2:c3:c6:42:1f:d5:64:7d:49:6d:23:18:26:ec:4e: 26:09:bc:05:1e:b2:9f:2d:45:da:18:48:e0:ed:e2: 28:e2:b6:92:7d:c6:68:7c:ac:d3:eb:c9:ba:2c:5c: ba:31:18:5d:3d:d8:c9:ed:22:d5:fd:2e:1d:8f:27: 7e:62:36:49:dc:6b:f8:ad:e0:5d:21:49:e9:de:d8: 48:e8:92:ce:ce:5f:e5:05:62:1a:26:d3:db:24:4b: 9f:93:01:0d:a1:90:63:d0:21:6d:b9:3a:8e:f8:46: 51:4d:c2:c0:33:d2:f4:74:12:9b:48:d0:68:46:48: 66:81:1c:ba:4a:00:e1:48:24:02:51:45:ea:37:fa: 4c:63:12:6e:b2:ca:64:c8:31:58:19:1d:70:60:5f: ba:5a:e4:81:89:f9:cb:62:4d:89:35:22:5a:91:be: f6:e1:1a:af:43:b5:f7:d4:44:25:cb:9f:7d:7b:53: 6f:d9:28:89:f0:01:5e:56:bd:f4:70:34:76:07:d4: 70:e2:a4:a3:7f:b6:9e:48:93:79:7f:75:ea:b5:32: e1:11:97:5c:ed:5f:31:fe:00:01:f6:5e:85:1f:8b: 79:13:07:92:8a:09:af:52:ba:4c:14:94:64:fe:c2: 39:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:61:20:57:39:CD:82:8D:3A:94:13:51:4E:DA:92:8B:3D:C4:CC:0F X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.2.0/23 157.254.200.0/22 157.254.217.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:32:bd:7e:1a:86:9d:da:27:50:6c:fb:d0:10:c6:5e:e3:e2: ce:1a:f1:77:2a:f7:b8:4b:58:ce:75:dc:57:9e:8a:13:70:bd: 59:e2:1a:d4:f4:39:fb:1d:cb:eb:5f:d8:2b:6f:11:25:ed:bf: c1:b9:44:20:2e:97:63:b4:2d:5e:b6:62:eb:ac:8a:7b:08:17: 1f:3b:aa:a4:55:e8:03:49:13:8f:d6:48:c8:4f:24:ca:8b:53: 29:cf:18:2a:6b:22:20:f5:98:66:50:1e:f7:8b:a4:82:62:06: 40:b4:fc:73:12:f4:df:97:d7:e0:b8:d9:f5:11:98:25:04:79: 18:c5:d5:3d:e4:fd:04:91:6a:44:c4:cb:21:22:a3:22:ce:a3: 19:54:18:dd:0e:dd:d9:cc:f8:64:ce:b4:af:0d:57:d8:fb:e5: 7f:57:28:5d:42:fb:59:5e:cd:4c:f8:cf:64:f6:7b:02:e8:99: c1:a3:c5:d5:9a:3d:da:ab:ce:cb:90:63:b4:4c:87:69:4e:b8: c7:83:72:5c:b1:19:0d:94:71:8d:a3:38:a7:1f:10:2d:1c:f9: 86:6b:16:c7:b5:22:9f:4b:f2:66:1e:e4:3b:69:16:e0:83:39: 07:05:d9:a4:97:06:2a:88:02:19:d5:a9:bf:52:97:c1:56:4c: bb:9d:2d:e1 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUXdzhuVpp2LrJpbAs7M78AIYlCQcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQwNzA2MjM1NTIzWhcNMjUwNzA2MDAwMDIz WjAzMTEwLwYDVQQDEyhGRjYxMjA1NzM5Q0Q4MjhEM0E5NDEzNTE0RURBOTI4QjNE QzRDQzBGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/PVrifcu8Hi ztL3oKOiw8ZCH9VkfUltIxgm7E4mCbwFHrKfLUXaGEjg7eIo4raSfcZofKzT68m6 LFy6MRhdPdjJ7SLV/S4djyd+YjZJ3Gv4reBdIUnp3thI6JLOzl/lBWIaJtPbJEuf kwENoZBj0CFtuTqO+EZRTcLAM9L0dBKbSNBoRkhmgRy6SgDhSCQCUUXqN/pMYxJu sspkyDFYGR1wYF+6WuSBifnLYk2JNSJakb724RqvQ7X31EQly599e1Nv2SiJ8AFe Vr30cDR2B9Rw4qSjf7aeSJN5f3XqtTLhEZdc7V8x/gAB9l6FH4t5EweSigmvUrpM FJRk/sI5AQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFP9hIFc5zYKNOpQTUU7akos9 xMwPMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE0NjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnf4CAwQCnf7IAwQAnf7ZMA0GCSqG SIb3DQEBCwUAA4IBAQAPMr1+Goad2idQbPvQEMZe4+LOGvF3Kve4S1jOddxXnooT cL1Z4hrU9Dn7HcvrX9grbxEl7b/BuUQgLpdjtC1etmLrrIp7CBcfO6qkVegDSROP 1kjITyTKi1MpzxgqayIg9ZhmUB73i6SCYgZAtPxzEvTfl9fguNn1EZglBHkYxdU9 5P0EkWpExMshIqMizqMZVBjdDt3ZzPhkzrSvDVfY++V/VyhdQvtZXs1M+M9k9nsC 6JnBo8XVmj3aq87LkGO0TIdpTrjHg3JcsRkNlHGNozinHxAtHPmGaxbHtSKfS/Jm HuQ7aRbggzkHBdmklwYqiAIZ1am/UpfBVky7nS3h -----END CERTIFICATE-----Generated at Fri Nov 22 03:52:49 2024 by rpki-client on console-fra.rpki-client.org