$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: 2lyTJZcInwYpUUsohjrAxOuxWf1vsng+czWaK3HeHoo= Subject key identifier: 31:EA:15:BC:3E:AE:32:2B:1C:45:A4:08:9E:68:50:D5:6F:64:C0:82 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 1457217BFF53B6C2BE845687262AC0AFDCC6C1AC Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa Signing time: Tue 24 Mar 2026 02:25:19 +0000 ROA not before: Tue 24 Mar 2026 02:20:19 +0000 ROA not after: Tue 23 Mar 2027 02:25:19 +0000 asID: 14618 IP address blocks: 157.254.2.0/23 maxlen: 24 157.254.141.0/24 maxlen: 24 157.254.169.0/24 maxlen: 24 157.254.200.0/22 maxlen: 22 157.254.215.0/24 maxlen: 24 157.254.217.0/24 maxlen: 24 157.254.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 07:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:57:21:7b:ff:53:b6:c2:be:84:56:87:26:2a:c0:af:dc:c6:c1:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Mar 24 02:20:19 2026 GMT Not After : Mar 23 02:25:19 2027 GMT Subject: CN=31EA15BC3EAE322B1C45A4089E6850D56F64C082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:05:29:b9:65:71:fa:46:b9:b3:92:ef:62:7d: a1:05:08:6e:90:f1:f6:7d:89:d0:41:b7:3b:e8:1d: f8:cb:a2:60:bf:3d:da:5a:17:85:cd:20:34:5a:bb: 60:a2:76:28:46:20:b2:cc:9a:14:90:fe:0d:a2:26: 8a:6d:9f:9b:fe:e6:8a:e4:88:e7:ba:fa:66:0b:7f: 84:7f:59:f8:51:e8:2a:e0:e1:21:1b:b0:ad:80:09: a9:e3:1c:07:fe:76:e3:1d:8c:18:92:cc:dc:b1:48: 50:37:35:9f:a6:c3:19:9f:17:55:27:71:2f:7c:f3: 1b:5d:d4:f1:8d:29:5b:15:17:88:28:37:7c:a1:8b: e4:20:52:c5:bc:dc:59:14:53:c8:f0:6a:75:a1:a3: ce:54:8d:69:f9:10:08:15:eb:05:43:81:14:8a:18: 16:37:7c:02:00:86:05:43:04:47:4f:0a:35:54:55: 5c:56:72:42:85:58:6a:61:f2:9a:d0:f5:97:ac:10: 08:1b:05:9b:bf:0e:bf:71:f4:95:19:9c:49:f9:00: ed:c8:7f:9a:e5:49:4b:8f:c7:a5:d8:ec:a2:c1:e1: dc:69:b5:fc:49:03:6e:cd:47:da:b8:ba:3b:e3:7e: d0:c5:f7:ff:05:cd:98:2f:fb:b0:bb:de:09:d1:a2: 3d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:EA:15:BC:3E:AE:32:2B:1C:45:A4:08:9E:68:50:D5:6F:64:C0:82 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.2.0/23 157.254.141.0/24 157.254.169.0/24 157.254.200.0/22 157.254.215.0/24 157.254.217.0/24 157.254.239.0/24 Signature Algorithm: sha256WithRSAEncryption 60:11:2f:4a:4b:c9:42:da:e1:86:d6:7c:ac:47:d3:2e:d2:fc: 3c:7f:81:f4:de:12:ad:d2:6d:79:59:a7:64:5e:9d:da:84:0a: 0d:ec:1b:6e:32:86:fc:1e:2c:21:88:27:25:02:93:54:4c:a5: 60:ad:37:bf:28:b4:33:6f:74:b0:63:72:67:d8:63:b5:e3:ce: ad:e4:0f:43:94:70:e5:bc:ec:55:bb:0f:26:09:8e:c0:e7:c6: b1:b1:ec:97:9f:b7:ce:49:04:75:a9:8a:88:93:e7:c2:46:45: ca:0c:81:18:c2:a5:ae:dd:c4:3f:e4:b8:1e:f5:bf:cd:12:27: f9:30:ce:7a:1e:5b:3d:80:91:f4:95:1d:23:74:24:6e:45:0a: 6b:0a:55:77:86:d4:9a:2f:f2:9f:9d:14:78:aa:f2:0a:cd:fc: ce:ba:7b:73:0b:0e:39:e5:a2:13:76:c1:ea:89:02:0a:8c:7b: 0e:8b:7c:8f:79:ce:58:d5:47:5b:e4:ae:c4:0d:a3:cf:37:5b: 8c:b3:d2:aa:3a:3a:95:70:31:94:a6:f1:de:39:47:f3:e7:3b: 9d:6f:fc:19:a2:e1:b8:2f:78:ce:f2:0f:8e:f9:c6:f6:d5:ff: c5:a7:a7:81:a1:0d:c7:44:e6:86:e9:3c:3a:73:19:da:3f:5f: bb:e3:f2:25 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIUFFche/9TtsK+hFaHJirAr9zGwawwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwMzI0MDIyMDE5WhcNMjcwMzIzMDIyNTE5 WjAzMTEwLwYDVQQDEygzMUVBMTVCQzNFQUUzMjJCMUM0NUE0MDg5RTY4NTBENTZG NjRDMDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAUpuWVx+ka5 s5LvYn2hBQhukPH2fYnQQbc76B34y6Jgvz3aWheFzSA0WrtgonYoRiCyzJoUkP4N oiaKbZ+b/uaK5IjnuvpmC3+Ef1n4Uegq4OEhG7CtgAmp4xwH/nbjHYwYkszcsUhQ NzWfpsMZnxdVJ3EvfPMbXdTxjSlbFReIKDd8oYvkIFLFvNxZFFPI8Gp1oaPOVI1p +RAIFesFQ4EUihgWN3wCAIYFQwRHTwo1VFVcVnJChVhqYfKa0PWXrBAIGwWbvw6/ cfSVGZxJ+QDtyH+a5UlLj8el2OyiweHcabX8SQNuzUfauLo7437Qxff/Bc2YL/uw u94J0aI9cQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDHqFbw+rjIrHEWkCJ5oUNVv ZMCCMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE0NjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMG CCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBnf4CAwQAnf6NAwQAnf6pAwQCnf7I AwQAnf7XAwQAnf7ZAwQAnf7vMA0GCSqGSIb3DQEBCwUAA4IBAQBgES9KS8lC2uGG 1nysR9Mu0vw8f4H03hKt0m15WadkXp3ahAoN7BtuMob8HiwhiCclApNUTKVgrTe/ KLQzb3SwY3Jn2GO1486t5A9DlHDlvOxVuw8mCY7A58axseyXn7fOSQR1qYqIk+fC RkXKDIEYwqWu3cQ/5Lge9b/NEif5MM56Hls9gJH0lR0jdCRuRQprClV3htSaL/Kf nRR4qvIKzfzOuntzCw455aITdsHqiQIKjHsOi3yPec5Y1Udb5K7EDaPPN1uMs9Kq OjqVcDGUpvHeOUfz5zudb/wZouG4L3jO8g+O+cb21f/Fp6eBoQ3HROaG6Tw6cxna P1+74/Il -----END CERTIFICATE-----Generated at Thu Mar 26 09:14:49 2026 by rpki-client