$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: x5R8i4GSEA1BvAE1RXRcvYWrW/Kk0oR3YY9+lfOP8Fc= Subject key identifier: DC:5E:A7:7B:B2:86:28:57:79:DC:24:7E:62:8B:B4:03:39:93:10:83 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 69AEBD1264997E26C95DBFB44B1BC83EEB04CDD3 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa Signing time: Sun 08 Jun 2025 00:29:20 +0000 ROA not before: Sun 08 Jun 2025 00:24:20 +0000 ROA not after: Sun 07 Jun 2026 00:29:20 +0000 asID: 14618 IP address blocks: 157.254.2.0/23 maxlen: 24 157.254.200.0/22 maxlen: 22 157.254.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 12:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ae:bd:12:64:99:7e:26:c9:5d:bf:b4:4b:1b:c8:3e:eb:04:cd:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jun 8 00:24:20 2025 GMT Not After : Jun 7 00:29:20 2026 GMT Subject: CN=DC5EA77BB286285779DC247E628BB40339931083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2b:d1:bc:72:cc:9d:2f:b4:0c:96:0e:0e:be: 5d:08:e4:e9:a2:33:b3:4d:56:d5:cd:17:59:32:21: cd:4a:f3:71:cd:84:46:1a:54:5a:4b:5d:f9:36:1d: 97:13:90:b5:ea:d2:0c:62:ae:de:e5:aa:19:8c:a8: 85:4f:5f:cd:62:3b:93:e9:f0:2a:c2:66:95:0f:b0: 34:12:eb:4e:ef:96:13:20:3b:5f:36:29:6c:b1:ee: f3:7b:5b:ae:56:7c:67:4d:6d:81:fc:36:aa:5b:4f: 2d:7c:69:a3:c4:88:3d:5e:99:8c:d3:09:73:89:52: 43:5c:71:e3:ba:e6:cf:89:f5:1f:3f:34:b5:82:56: ff:ca:0c:de:28:72:0f:a8:c2:52:ef:d3:d8:47:34: 5e:6b:1f:6c:b3:9f:4d:6e:e9:c2:f4:42:b0:60:c0: 50:1d:96:d3:68:a1:34:48:43:d9:9b:e3:fe:72:a0: c8:67:fd:d1:d7:ac:6e:b6:67:12:37:5e:74:b9:c8: 88:50:a7:6b:ab:6a:ef:2c:62:e2:e4:c2:1f:67:4d: 80:23:79:8d:1d:cc:56:ab:d5:99:11:b7:69:40:8a: 89:03:c7:8b:18:7b:ea:65:f1:b6:3e:a9:38:7f:26: a8:b9:3f:e9:f0:29:93:67:50:92:fa:9c:9d:f5:39: 6f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5E:A7:7B:B2:86:28:57:79:DC:24:7E:62:8B:B4:03:39:93:10:83 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.2.0/23 157.254.200.0/22 157.254.217.0/24 Signature Algorithm: sha256WithRSAEncryption b5:05:63:cb:02:05:14:71:d0:55:de:5d:fc:53:27:0e:a1:60: 21:55:b3:1e:f9:e0:69:c8:d2:01:3a:0b:9d:ab:b6:cc:ea:83: 38:77:a8:68:83:b6:98:9a:22:9a:f3:18:32:b5:17:4e:4a:9d: 13:0f:42:4d:53:32:aa:71:80:69:d1:11:04:26:43:b5:8b:bc: d4:10:2b:71:c1:53:8b:e1:92:0c:67:f5:b6:4d:ad:e0:93:ec: 69:f3:1a:3c:e5:63:1d:1f:0d:0f:36:70:4e:82:a9:2e:24:02: 35:ec:8c:f5:0b:47:54:06:3f:6f:2e:6b:a7:3d:89:45:7b:91: 89:b4:9a:6c:ed:b6:b2:2d:3c:8d:df:8e:b6:1b:f7:57:5d:bd: 46:fe:8b:16:34:b6:38:b9:6b:3e:b0:fe:b7:3c:fe:a9:80:12: 15:ff:31:56:f6:d1:8b:3a:e0:c1:1c:74:77:cc:6f:2b:3c:66: 0c:a1:b0:a6:2c:20:08:5e:ec:6b:01:e8:d3:25:81:32:7d:9b: ac:01:f1:d5:24:92:72:91:64:21:a4:7d:d5:2b:95:7e:b4:bd: ac:07:aa:c3:bd:9b:66:31:b8:6a:ef:91:ab:a6:fc:62:77:77: d7:21:c7:1c:d7:07:99:bb:79:f7:9e:0c:0a:60:e6:95:2e:f8: 43:e0:68:e1 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUaa69EmSZfibJXb+0SxvIPusEzdMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwNjA4MDAyNDIwWhcNMjYwNjA3MDAyOTIw WjAzMTEwLwYDVQQDEyhEQzVFQTc3QkIyODYyODU3NzlEQzI0N0U2MjhCQjQwMzM5 OTMxMDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySvRvHLMnS+0 DJYODr5dCOTpojOzTVbVzRdZMiHNSvNxzYRGGlRaS135Nh2XE5C16tIMYq7e5aoZ jKiFT1/NYjuT6fAqwmaVD7A0EutO75YTIDtfNilsse7ze1uuVnxnTW2B/DaqW08t fGmjxIg9XpmM0wlziVJDXHHjuubPifUfPzS1glb/ygzeKHIPqMJS79PYRzReax9s s59NbunC9EKwYMBQHZbTaKE0SEPZm+P+cqDIZ/3R16xutmcSN150uciIUKdrq2rv LGLi5MIfZ02AI3mNHcxWq9WZEbdpQIqJA8eLGHvqZfG2Pqk4fyaouT/p8CmTZ1CS +pyd9TlvjwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFNxep3uyhihXedwkfmKLtAM5 kxCDMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE0NjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnf4CAwQCnf7IAwQAnf7ZMA0GCSqG SIb3DQEBCwUAA4IBAQC1BWPLAgUUcdBV3l38UycOoWAhVbMe+eBpyNIBOgudq7bM 6oM4d6hog7aYmiKa8xgytRdOSp0TD0JNUzKqcYBp0REEJkO1i7zUECtxwVOL4ZIM Z/W2Ta3gk+xp8xo85WMdHw0PNnBOgqkuJAI17Iz1C0dUBj9vLmunPYlFe5GJtJps 7bayLTyN3462G/dXXb1G/osWNLY4uWs+sP63PP6pgBIV/zFW9tGLOuDBHHR3zG8r PGYMobCmLCAIXuxrAejTJYEyfZusAfHVJJJykWQhpH3VK5V+tL2sB6rDvZtmMbhq 75Grpvxid3fXIccc1weZu3n3ngwKYOaVLvhD4Gjh -----END CERTIFICATE-----Generated at Sat Jun 14 23:52:25 2025 by rpki-client