$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7018.roa File: AS7018.roa (raw, json) Hash identifier: 0pNEsmp4jzUfqoCX2QGTAXgcWkrMb0GhLDlsh3kEUT8= Subject key identifier: 01:2E:60:82:AA:0D:C5:40:37:EF:18:20:1A:23:1F:3B:9F:17:9F:23 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 373AA2986E7D4D911B2BBC2ABA105D91A935A3C0 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7018.roa Signing time: Thu 05 Mar 2026 00:06:28 +0000 ROA not before: Thu 05 Mar 2026 00:01:28 +0000 ROA not after: Thu 04 Mar 2027 00:06:28 +0000 asID: 7018 IP address blocks: 104.234.2.0/24 maxlen: 24 104.234.9.0/24 maxlen: 24 104.234.28.0/24 maxlen: 24 104.234.73.0/24 maxlen: 24 104.234.83.0/24 maxlen: 24 104.234.122.0/24 maxlen: 24 104.234.208.0/23 maxlen: 23 104.234.232.0/24 maxlen: 24 104.234.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 01:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:3a:a2:98:6e:7d:4d:91:1b:2b:bc:2a:ba:10:5d:91:a9:35:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Mar 5 00:01:28 2026 GMT Not After : Mar 4 00:06:28 2027 GMT Subject: CN=012E6082AA0DC54037EF18201A231F3B9F179F23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:35:95:86:59:a1:63:7f:5c:b2:39:f5:12: 6e:13:b7:23:a3:c6:87:d3:6d:11:ad:e4:45:8c:2a: 94:c8:51:c7:ac:dc:07:ca:d6:19:a5:41:ad:d7:7a: e4:49:c7:e9:ee:df:31:44:a3:85:e1:c9:a9:53:fb: 10:f7:12:77:20:5e:d7:38:3a:6a:a7:c2:0e:e2:cd: 2f:8c:c0:95:d7:0e:34:1d:d1:19:3e:30:b0:a5:b4: bb:30:62:5e:ad:2d:d4:18:f4:d5:e1:68:2d:34:d0: 8d:20:9e:0a:7b:b8:aa:86:d2:cb:3a:5e:c7:fa:73: d8:0c:dd:46:eb:44:5b:f5:9e:14:75:1c:1e:15:91: 8c:92:79:39:a0:c3:f2:7b:92:1f:7e:d7:91:54:35: 43:4a:bc:1d:ef:18:2c:f7:fd:69:d6:09:29:61:09: 6f:f0:81:57:19:d1:b2:21:80:40:cb:f9:21:eb:b5: 4b:86:fb:14:ab:65:4c:67:9b:33:7e:be:b5:f7:e9: 68:68:c0:bf:5b:a4:9c:32:ad:8b:85:8b:6f:0a:2f: 33:87:ad:7a:16:f5:cb:7c:21:0f:18:5e:d1:ec:64: c9:84:b5:1e:8f:cc:70:d0:e7:52:50:90:f0:c2:57: 79:d4:58:ec:da:25:50:db:8c:fa:08:e8:c0:fc:4d: 7f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2E:60:82:AA:0D:C5:40:37:EF:18:20:1A:23:1F:3B:9F:17:9F:23 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7018.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.2.0/24 104.234.9.0/24 104.234.28.0/24 104.234.73.0/24 104.234.83.0/24 104.234.122.0/24 104.234.208.0/23 104.234.232.0/24 104.234.250.0/24 Signature Algorithm: sha256WithRSAEncryption 25:e6:ac:3a:e8:f5:92:31:67:ee:1b:2e:c7:4a:10:e7:b1:67: bd:7a:15:16:dc:37:7b:5f:a8:6e:73:74:de:6d:c3:64:2e:9d: 68:b7:aa:1a:33:b1:d5:c9:82:a7:80:b0:5a:54:da:2f:e7:75: c6:47:02:e7:d4:a3:f3:46:96:bb:5b:11:9a:6b:2d:17:16:a8: 81:fc:cb:86:ad:44:fb:e5:d1:5b:68:93:20:47:bc:76:dc:1e: 7d:6a:11:03:31:87:4e:d9:2a:ce:99:2d:97:0c:83:9a:bb:ad: e4:71:94:b9:cd:e8:f2:33:7e:eb:08:47:87:a3:fa:5a:c4:2d: 35:14:f0:56:d2:04:b6:6a:3c:db:58:92:ad:df:c3:fc:97:1f: 3a:e0:cd:fe:cc:5e:58:31:ac:63:9f:3c:26:af:62:44:15:2d: 9b:21:48:e9:31:f0:27:47:21:24:db:d1:3a:6a:30:45:f0:b1: 79:fd:7c:ba:80:1c:71:e6:69:33:6b:ad:67:4d:e5:b8:95:61: 99:37:8e:ff:19:bd:fa:c9:48:41:ef:6d:c9:b4:94:c8:57:fb: 23:1e:1f:94:73:f0:2d:ca:7d:1b:be:ba:6d:07:9b:d0:91:5d: 30:c0:be:24:23:dd:f5:72:28:8e:ab:80:2d:df:81:de:b5:48: ad:52:2c:47 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUNzqimG59TZEbK7wquhBdkak1o8AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwMzA1MDAwMTI4WhcNMjcwMzA0MDAwNjI4 WjAzMTEwLwYDVQQDEygwMTJFNjA4MkFBMERDNTQwMzdFRjE4MjAxQTIzMUYzQjlG MTc5RjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsts1lYZZoWN/ XLI59RJuE7cjo8aH020RreRFjCqUyFHHrNwHytYZpUGt13rkScfp7t8xRKOF4cmp U/sQ9xJ3IF7XODpqp8IO4s0vjMCV1w40HdEZPjCwpbS7MGJerS3UGPTV4WgtNNCN IJ4Ke7iqhtLLOl7H+nPYDN1G60Rb9Z4UdRweFZGMknk5oMPye5IffteRVDVDSrwd 7xgs9/1p1gkpYQlv8IFXGdGyIYBAy/kh67VLhvsUq2VMZ5szfr619+loaMC/W6Sc Mq2LhYtvCi8zh616FvXLfCEPGF7R7GTJhLUej8xw0OdSUJDwwld51Fjs2iVQ24z6 COjA/E1/pQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFAEuYIKqDcVAN+8YIBojHzuf F58jMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzcwMTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTwYI KwYBBQUHAQcBAf8EQDA+MDwEAgABMDYDBABo6gIDBABo6gkDBABo6hwDBABo6kkD BABo6lMDBABo6noDBAFo6tADBABo6ugDBABo6vowDQYJKoZIhvcNAQELBQADggEB ACXmrDro9ZIxZ+4bLsdKEOexZ716FRbcN3tfqG5zdN5tw2QunWi3qhozsdXJgqeA sFpU2i/ndcZHAufUo/NGlrtbEZprLRcWqIH8y4atRPvl0VtokyBHvHbcHn1qEQMx h07ZKs6ZLZcMg5q7reRxlLnN6PIzfusIR4ej+lrELTUU8FbSBLZqPNtYkq3fw/yX Hzrgzf7MXlgxrGOfPCavYkQVLZshSOkx8CdHISTb0TpqMEXwsXn9fLqAHHHmaTNr rWdN5biVYZk3jv8ZvfrJSEHvbcm0lMhX+yMeH5Rz8C3KfRu+um0Hm9CRXTDAviQj 3fVyKI6rgC3fgd61SK1SLEc= -----END CERTIFICATE-----Generated at Thu Mar 26 01:41:47 2026 by rpki-client