$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: hB0n+SRG/mGQwTXKasKMJB1SLkM0UCUq/aXTebjY908= Subject key identifier: 60:D4:A6:ED:63:86:77:2E:CC:A4:6C:72:A4:40:3F:B8:37:82:F6:BD Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 76ABA362EEFEC3D7A002F0764FC0A48704DE3B4A Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa Signing time: Mon 02 Nov 2026 09:56:59 +0000 ROA not before: Mon 02 Nov 2026 09:51:59 +0000 ROA not after: Mon 01 Nov 2027 09:56:59 +0000 asID: 14618 IP address blocks: 157.254.1.0/24 maxlen: 24 157.254.141.0/24 maxlen: 24 157.254.169.0/24 maxlen: 24 157.254.200.0/22 maxlen: 22 157.254.217.0/24 maxlen: 24 157.254.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 06:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ab:a3:62:ee:fe:c3:d7:a0:02:f0:76:4f:c0:a4:87:04:de:3b:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Nov 2 09:51:59 2026 GMT Not After : Nov 1 09:56:59 2027 GMT Subject: CN=60D4A6ED6386772ECCA46C72A4403FB83782F6BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:62:09:ed:18:1a:71:87:aa:37:6c:e0:19:17: 8a:40:c2:ba:ab:4a:25:d7:af:f2:9a:06:60:2e:2b: 96:d3:f5:b3:eb:d3:30:7f:0c:3a:0e:33:a0:c1:71: d5:53:d7:c6:97:ad:57:30:7f:67:74:85:da:36:aa: 96:98:aa:c0:ca:f2:db:3b:4d:74:aa:5d:4f:9d:98: 0b:e2:7c:c9:5c:5c:51:11:63:38:a9:20:48:d6:33: e9:25:fb:97:54:5f:a3:58:31:25:e3:a2:25:d7:b8: de:f1:5f:7f:60:9e:37:2e:99:c5:2e:5e:04:58:bc: 14:23:4a:df:6b:a3:83:54:ad:52:58:7d:8b:d7:26: 60:59:2b:f7:b3:91:d7:65:d2:43:ab:17:9d:dc:0f: bd:b5:b2:16:5c:f7:29:4d:6c:9f:9e:65:bf:b1:f3: c3:3c:d1:d9:be:e4:3c:d9:4e:cd:dd:fb:f8:32:f7: 63:6e:27:7e:42:48:26:ac:48:0a:da:f6:f5:cc:b1: be:3a:ab:c9:db:05:9c:8c:ab:25:5a:1c:ef:fa:64: b7:57:c5:2b:96:e5:da:12:a4:21:6a:9b:79:7b:f0: 24:d0:ee:9c:76:86:cf:de:74:d3:52:54:d4:ab:2b: af:a7:c6:f9:c6:a0:78:6b:85:1c:22:2a:c8:2a:c9: fa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D4:A6:ED:63:86:77:2E:CC:A4:6C:72:A4:40:3F:B8:37:82:F6:BD X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.1.0/24 157.254.141.0/24 157.254.169.0/24 157.254.200.0/22 157.254.217.0/24 157.254.239.0/24 Signature Algorithm: sha256WithRSAEncryption a9:2a:f7:a3:e3:bf:58:3d:d0:26:e1:1d:0a:5e:1c:1c:4c:4f: 74:0c:e0:bf:1f:93:40:41:5c:46:95:5a:7c:fa:3b:a2:76:ae: 53:c5:c4:49:9a:8f:9a:89:89:d0:3b:42:b8:17:08:28:85:b3: ab:f1:00:44:8e:49:47:5d:5c:b4:51:07:d5:f0:6a:8b:99:d2: b1:40:2c:9e:a1:0b:37:9f:4e:16:0d:4b:0e:76:06:58:72:fd: b2:2e:36:f7:94:95:c3:84:ff:fa:7d:73:a5:17:83:0e:51:4d: 1d:9f:fe:77:9f:99:53:d6:7f:0c:6e:a9:c9:23:b6:ad:62:fd: a1:3f:d1:6d:9f:71:54:cb:00:fd:61:07:d3:d4:a3:27:41:db: 77:13:99:4a:aa:bb:17:47:db:41:65:30:4a:5c:cc:a1:8c:cd: 79:95:45:71:67:c8:ac:dc:12:a3:d9:62:fd:de:79:6f:be:54: f7:e3:8a:1b:63:45:b4:c2:30:21:d6:f6:81:96:e9:e5:cd:ce: 68:c6:d0:d4:fe:c6:a2:33:a2:fe:b6:8e:8c:31:b0:97:9c:ec: 09:42:22:9d:24:58:af:6e:05:34:91:b6:89:76:11:d9:28:4c: 24:d9:fc:a9:7a:36:1f:b2:c7:b7:fa:ab:54:c1:87:20:6c:42: 3a:19:25:4a -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUdqujYu7+w9egAvB2T8CkhwTeO0owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYxMTAyMDk1MTU5WhcNMjcxMTAxMDk1NjU5 WjAzMTEwLwYDVQQDEyg2MEQ0QTZFRDYzODY3NzJFQ0NBNDZDNzJBNDQwM0ZCODM3 ODJGNkJEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGIJ7RgacYeq N2zgGReKQMK6q0ol16/ymgZgLiuW0/Wz69Mwfww6DjOgwXHVU9fGl61XMH9ndIXa NqqWmKrAyvLbO010ql1PnZgL4nzJXFxREWM4qSBI1jPpJfuXVF+jWDEl46Il17je 8V9/YJ43LpnFLl4EWLwUI0rfa6ODVK1SWH2L1yZgWSv3s5HXZdJDqxed3A+9tbIW XPcpTWyfnmW/sfPDPNHZvuQ82U7N3fv4Mvdjbid+QkgmrEgK2vb1zLG+OqvJ2wWc jKslWhzv+mS3V8UrluXaEqQhapt5e/Ak0O6cdobP3nTTUlTUqyuvp8b5xqB4a4Uc IirIKsn6kQIDAQABo4ICnDCCApgwHQYDVR0OBBYEFGDUpu1jhncuzKRscqRAP7g3 gva9MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE0NjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0G CCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAnf4BAwQAnf6NAwQAnf6pAwQCnf7I AwQAnf7ZAwQAnf7vMA0GCSqGSIb3DQEBCwUAA4IBAQCpKvej479YPdAm4R0KXhwc TE90DOC/H5NAQVxGlVp8+juidq5TxcRJmo+aiYnQO0K4FwgohbOr8QBEjklHXVy0 UQfV8GqLmdKxQCyeoQs3n04WDUsOdgZYcv2yLjb3lJXDhP/6fXOlF4MOUU0dn/53 n5lT1n8MbqnJI7atYv2hP9Ftn3FUywD9YQfT1KMnQdt3E5lKqrsXR9tBZTBKXMyh jM15lUVxZ8is3BKj2WL93nlvvlT344obY0W0wjAh1vaBlunlzc5oxtDU/saiM6L+ to6MMbCXnOwJQiKdJFivbgU0kbaJdhHZKEwk2fypejYfsse3+qtUwYcgbEI6GSVK -----END CERTIFICATE-----Generated at Wed Nov 11 09:29:56 2026 by rpki-client