$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: VTxGLkAs8m54+MUjg9Ndb7B+sp12Z001Hwue6avfvWU= Subject key identifier: 87:13:F9:25:95:99:6D:21:92:FD:33:21:4B:F9:93:63:5B:29:B0:4C Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4 Certificate serial: 3323CE245F151317027090C09A8B8C74FB31D635 Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS14618.roa Signing time: Wed 12 Feb 2025 17:59:49 +0000 ROA not before: Wed 12 Feb 2025 17:54:49 +0000 ROA not after: Wed 11 Feb 2026 17:59:49 +0000 asID: 14618 IP address blocks: 64.202.96.0/24 maxlen: 24 66.225.239.0/24 maxlen: 24 205.234.204.0/24 maxlen: 24 216.246.3.0/24 maxlen: 24 216.246.96.0/24 maxlen: 24 216.246.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Feb 2025 23:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:23:ce:24:5f:15:13:17:02:70:90:c0:9a:8b:8c:74:fb:31:d6:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4 Validity Not Before: Feb 12 17:54:49 2025 GMT Not After : Feb 11 17:59:49 2026 GMT Subject: CN=8713F92595996D2192FD33214BF993635B29B04C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f2:71:3c:57:2a:f4:11:7a:d6:37:ac:80:70: f1:97:da:a2:17:d2:37:10:14:cd:f7:20:88:1d:f4: cf:71:7d:16:76:31:2f:20:9b:6c:99:ea:eb:cb:3c: f9:2d:2e:41:1d:00:43:cc:d6:17:3d:eb:6f:54:01: 5c:36:47:69:49:e1:59:b1:c9:48:3d:b5:83:7a:59: 4b:66:e8:97:c8:a8:f4:e1:08:c7:54:37:e2:d3:76: 39:7c:37:39:2e:90:96:81:13:cf:39:c9:43:14:fa: 7f:15:1f:d9:84:1f:dd:40:08:3a:d7:0d:4b:82:93: 54:15:84:9e:3f:c1:6d:53:b4:f3:9d:18:48:05:09: 4a:13:91:16:90:52:88:c5:bd:34:ba:39:46:41:ab: 1b:19:bd:32:6a:96:94:f9:4e:e7:0a:98:f2:07:75: 1b:ad:a8:7b:88:5b:c1:4d:e1:9f:2b:c7:e8:1b:57: 58:d2:fc:7f:af:72:ff:84:3f:d6:8f:fe:1a:04:09: b6:36:79:ed:1e:34:b0:d4:d2:4c:ca:1d:24:da:85: e4:a4:71:d8:6b:76:2d:1d:34:4c:81:ef:a9:ee:8d: 7e:94:fc:5a:b2:a0:b9:b6:0d:16:15:d8:ec:64:f6: c1:d5:c4:73:df:0f:fd:62:89:53:18:37:68:0d:00: 89:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:13:F9:25:95:99:6D:21:92:FD:33:21:4B:F9:93:63:5B:29:B0:4C X509v3 Authority Key Identifier: keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.202.96.0/24 66.225.239.0/24 205.234.204.0/24 216.246.3.0/24 216.246.96.0/24 216.246.99.0/24 Signature Algorithm: sha256WithRSAEncryption 10:7d:32:8b:47:ff:c6:bd:bf:1f:7e:b4:a7:28:cc:2a:c0:02: 53:57:1f:cf:05:43:ef:bd:31:12:24:da:29:71:92:f1:30:f7: cd:f4:52:5a:1c:f9:ab:ed:37:32:11:81:2b:e6:70:87:37:31: 70:7e:16:47:dc:d7:d7:b5:95:4e:14:f6:1a:81:5e:77:e2:97: 3c:28:05:4e:d1:13:a7:09:f8:f0:e0:fd:ee:5c:56:26:b1:b6: d4:5c:51:e1:62:d0:56:44:97:c0:b7:d7:8a:0f:cb:ac:f6:af: f9:40:79:d2:bd:c7:66:52:8f:20:11:f8:5f:1a:2f:05:ca:c0: f7:3c:37:ac:c0:de:b3:8d:dc:a2:aa:65:5c:25:33:ae:71:e3: 8c:e3:7d:b2:06:91:f4:fe:d3:0c:a2:86:32:b0:7a:a3:a4:bb: 4c:b2:c5:9d:62:b5:2e:57:f6:d2:69:1b:cd:9b:61:6e:77:75: b7:bc:b4:c6:e5:76:45:aa:9c:b1:95:be:fd:8d:b7:80:0e:fa: fb:21:39:0d:c2:98:a5:00:c9:02:cd:ef:b3:7e:c1:93:83:11: af:42:59:da:c7:af:a8:9c:94:3e:7f:7c:6c:c6:94:28:d0:31: 2c:52:b8:2d:80:97:ea:5e:db:1c:0e:90:93:0d:c9:5a:60:6f: 8e:ab:f3:4d -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUMyPOJF8VExcCcJDAmouMdPsx1jUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjUwMjEyMTc1NDQ5WhcNMjYwMjExMTc1OTQ5 WjAzMTEwLwYDVQQDEyg4NzEzRjkyNTk1OTk2RDIxOTJGRDMzMjE0QkY5OTM2MzVC MjlCMDRDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/JxPFcq9BF6 1jesgHDxl9qiF9I3EBTN9yCIHfTPcX0WdjEvIJtsmerryzz5LS5BHQBDzNYXPetv VAFcNkdpSeFZsclIPbWDellLZuiXyKj04QjHVDfi03Y5fDc5LpCWgRPPOclDFPp/ FR/ZhB/dQAg61w1LgpNUFYSeP8FtU7TznRhIBQlKE5EWkFKIxb00ujlGQasbGb0y apaU+U7nCpjyB3Ubrah7iFvBTeGfK8foG1dY0vx/r3L/hD/Wj/4aBAm2NnntHjSw 1NJMyh0k2oXkpHHYa3YtHTRMge+p7o1+lPxasqC5tg0WFdjsZPbB1cRz3w/9YolT GDdoDQCJ7QIDAQABo4ICnDCCApgwHQYDVR0OBBYEFIcT+SWVmW0hkv0zIUv5k2Nb KbBMMB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi MzQ2MmEvMC9BUzE0NjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0G CCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAQMpgAwQAQuHvAwQAzerMAwQA2PYD AwQA2PZgAwQA2PZjMA0GCSqGSIb3DQEBCwUAA4IBAQAQfTKLR//Gvb8ffrSnKMwq wAJTVx/PBUPvvTESJNopcZLxMPfN9FJaHPmr7TcyEYEr5nCHNzFwfhZH3NfXtZVO FPYagV534pc8KAVO0ROnCfjw4P3uXFYmsbbUXFHhYtBWRJfAt9eKD8us9q/5QHnS vcdmUo8gEfhfGi8FysD3PDeswN6zjdyiqmVcJTOuceOM432yBpH0/tMMooYysHqj pLtMssWdYrUuV/bSaRvNm2Fud3W3vLTG5XZFqpyxlb79jbeADvr7ITkNwpilAMkC ze+zfsGTgxGvQlnax6+onJQ+f3xsxpQo0DEsUrgtgJfqXtscDpCTDclaYG+Oq/NN -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:44 2025 by rpki-client