$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: 9ez9GEIWQaBu2KIDQdIVcYKNfDLDKud3hKHrAYm6tRw= Subject key identifier: 5F:32:79:BF:2B:9B:EB:3E:A5:58:62:64:25:AC:73:CF:80:6D:7D:0F Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4 Certificate serial: 745DA9CD54A79E45E96834891906C78CC5F00EC3 Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS14618.roa Signing time: Thu 10 Apr 2025 20:55:11 +0000 ROA not before: Thu 10 Apr 2025 20:50:11 +0000 ROA not after: Thu 09 Apr 2026 20:55:11 +0000 asID: 14618 IP address blocks: 64.202.96.0/24 maxlen: 24 66.225.239.0/24 maxlen: 24 204.93.164.0/24 maxlen: 24 204.93.186.0/24 maxlen: 24 204.93.201.0/24 maxlen: 24 205.234.156.0/23 maxlen: 24 205.234.204.0/24 maxlen: 24 205.234.244.0/24 maxlen: 24 216.246.3.0/24 maxlen: 24 216.246.96.0/24 maxlen: 24 216.246.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Apr 2025 20:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:5d:a9:cd:54:a7:9e:45:e9:68:34:89:19:06:c7:8c:c5:f0:0e:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4 Validity Not Before: Apr 10 20:50:11 2025 GMT Not After : Apr 9 20:55:11 2026 GMT Subject: CN=5F3279BF2B9BEB3EA558626425AC73CF806D7D0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f8:9b:ad:d0:e1:b5:0a:55:e4:6c:e2:d5:16: f9:23:b8:26:77:f9:c6:4d:11:f5:b8:4d:f3:85:8f: ff:d8:e9:6a:e2:61:15:ae:8a:99:3d:60:2b:e8:2d: 05:01:9d:4f:e9:3c:c8:8b:89:82:85:4e:19:03:95: 1d:f4:ac:49:bd:56:f4:88:2d:e1:a0:39:b3:f6:15: 68:1c:56:70:6b:96:97:d4:1b:6c:35:fa:19:e0:cd: 5a:19:5d:b6:b3:b8:5c:cf:c4:ac:6a:37:91:16:b5: cb:5a:ae:8e:8f:93:75:a4:c5:4a:e0:a7:5b:70:58: 53:37:da:b2:4d:93:5d:5a:14:8a:ec:65:35:57:ef: e0:20:3b:16:3e:35:cd:d0:b8:ba:54:c2:20:c4:0a: 8b:35:d5:ed:7e:0a:60:de:22:1f:0f:1c:bb:fc:52: 88:37:b5:01:4d:6d:90:e1:39:22:0d:3e:fb:d8:76: 06:01:e3:94:92:4e:15:5a:3a:00:d0:ee:73:d6:7f: 0f:dc:94:c3:b3:44:69:84:e1:4d:b6:42:f0:4c:28: c5:1d:e8:57:98:b7:0f:f0:1d:f5:d4:e9:65:3c:7a: f2:64:a6:cf:33:8e:93:fa:d4:e5:b7:3a:39:0f:c7: d2:2a:b5:17:25:cb:53:c5:8f:63:b4:71:92:94:07: de:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:32:79:BF:2B:9B:EB:3E:A5:58:62:64:25:AC:73:CF:80:6D:7D:0F X509v3 Authority Key Identifier: keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.202.96.0/24 66.225.239.0/24 204.93.164.0/24 204.93.186.0/24 204.93.201.0/24 205.234.156.0/23 205.234.204.0/24 205.234.244.0/24 216.246.3.0/24 216.246.96.0/24 216.246.99.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:49:13:dd:8b:d4:e0:b2:2b:16:f4:e2:0c:76:58:68:40:8c: 92:20:4c:f6:b3:10:c3:e5:9b:d4:4d:f3:28:c8:a8:48:3c:e8: 86:ad:36:96:8d:2c:d5:0e:f0:a9:90:10:e5:99:3c:68:6d:03: a0:f4:4e:e3:9e:46:66:ff:ea:91:ab:3c:b0:c2:21:ff:d6:8a: f9:dd:1e:09:9f:d5:19:db:dc:52:e4:88:02:08:64:22:62:21: 56:1c:e7:7f:2c:a0:90:b2:a1:4d:5c:cc:2f:23:a9:5a:5f:07: 37:0b:93:9f:78:14:72:71:45:5a:a3:0c:26:de:54:f1:aa:01: b8:0f:12:90:e3:b5:1e:ed:fc:43:1b:ec:34:e8:ea:72:3c:2e: ed:b6:36:5c:bf:0b:cd:d2:de:7e:ed:e7:05:05:c9:c9:96:96: ba:cb:72:9a:81:ee:b2:55:e2:33:ec:69:72:e1:bb:de:68:12: 94:bf:5e:42:9d:9b:f4:73:73:cc:70:ae:8f:2d:fb:ac:73:07: 6c:a9:e1:5a:21:60:65:28:0a:0e:47:af:34:07:dc:5c:8e:82: e7:01:97:27:c0:1d:6e:c0:a7:fe:56:d7:ba:6e:a0:23:39:ba: 1c:1f:bb:ea:66:22:76:b2:52:ee:ec:bc:a4:3c:20:a5:ad:74: 4d:4a:83:9f -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIUdF2pzVSnnkXpaDSJGQbHjMXwDsMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjUwNDEwMjA1MDExWhcNMjYwNDA5MjA1NTEx WjAzMTEwLwYDVQQDEyg1RjMyNzlCRjJCOUJFQjNFQTU1ODYyNjQyNUFDNzNDRjgw NkQ3RDBGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvibrdDhtQpV 5Gzi1Rb5I7gmd/nGTRH1uE3zhY//2Olq4mEVroqZPWAr6C0FAZ1P6TzIi4mChU4Z A5Ud9KxJvVb0iC3hoDmz9hVoHFZwa5aX1BtsNfoZ4M1aGV22s7hcz8SsajeRFrXL Wq6Oj5N1pMVK4KdbcFhTN9qyTZNdWhSK7GU1V+/gIDsWPjXN0Li6VMIgxAqLNdXt fgpg3iIfDxy7/FKIN7UBTW2Q4TkiDT772HYGAeOUkk4VWjoA0O5z1n8P3JTDs0Rp hOFNtkLwTCjFHehXmLcP8B311OllPHryZKbPM46T+tTltzo5D8fSKrUXJctTxY9j tHGSlAfevQIDAQABo4ICujCCArYwHQYDVR0OBBYEFF8yeb8rm+s+pVhiZCWsc8+A bX0PMB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi MzQ2MmEvMC9BUzE0NjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsG CCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAQMpgAwQAQuHvAwQAzF2kAwQAzF26 AwQAzF3JAwQBzeqcAwQAzerMAwQAzer0AwQA2PYDAwQA2PZgAwQA2PZjMA0GCSqG SIb3DQEBCwUAA4IBAQA+SRPdi9TgsisW9OIMdlhoQIySIEz2sxDD5ZvUTfMoyKhI POiGrTaWjSzVDvCpkBDlmTxobQOg9E7jnkZm/+qRqzywwiH/1or53R4Jn9UZ29xS 5IgCCGQiYiFWHOd/LKCQsqFNXMwvI6laXwc3C5OfeBRycUVaowwm3lTxqgG4DxKQ 47Ue7fxDG+w06OpyPC7ttjZcvwvN0t5+7ecFBcnJlpa6y3Kage6yVeIz7Gly4bve aBKUv15CnZv0c3PMcK6PLfuscwdsqeFaIWBlKAoOR680B9xcjoLnAZcnwB1uwKf+ Vte6bqAjObocH7vqZiJ2slLu7LykPCClrXRNSoOf -----END CERTIFICATE-----Generated at Sat Apr 26 13:16:05 2025 by rpki-client