$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: aCekEnivDQ/Pff4UmhjcWedRXg7Uqb2/aypbg4pY3sA= Subject key identifier: 27:01:FC:86:14:39:FE:EC:1D:00:51:E0:E1:CF:EB:97:70:03:D6:D3 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 489936D4CB66E589FA7EF9238A166CD4B1F03E5F Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14618.roa Signing time: Sun 09 Aug 2026 23:34:42 +0000 ROA not before: Sun 09 Aug 2026 23:29:42 +0000 ROA not after: Sun 08 Aug 2027 23:34:42 +0000 asID: 14618 IP address blocks: 104.234.13.0/24 maxlen: 24 104.234.40.0/24 maxlen: 24 104.234.137.0/24 maxlen: 24 104.234.141.0/24 maxlen: 24 104.234.143.0/24 maxlen: 24 104.234.160.0/24 maxlen: 24 104.234.175.0/24 maxlen: 24 104.234.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:99:36:d4:cb:66:e5:89:fa:7e:f9:23:8a:16:6c:d4:b1:f0:3e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Aug 9 23:29:42 2026 GMT Not After : Aug 8 23:34:42 2027 GMT Subject: CN=2701FC861439FEEC1D0051E0E1CFEB977003D6D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a1:7f:58:54:5c:9f:09:3f:d4:09:b0:6e:ef: 35:3a:25:3f:a5:72:4a:04:df:85:87:5e:38:86:9f: c3:cf:39:8e:af:58:0b:18:3f:8d:bb:a6:7e:95:b2: 21:5a:55:7d:71:dc:02:33:fb:a6:75:a5:64:da:39: be:25:f1:d9:fa:8a:40:31:70:01:e4:49:53:2a:4d: 35:89:e3:5b:80:82:59:b1:7b:c6:32:60:f0:5e:f2: 5c:5d:3c:8f:68:a7:45:56:fa:f1:e1:5c:5f:07:1c: ed:fd:24:a9:17:8b:6e:e5:be:b8:61:c8:9d:bb:a5: 49:49:0e:5d:73:34:ae:ea:95:c4:f7:f0:95:17:2e: 11:ed:54:d2:ac:c3:84:7a:ee:8f:ef:ab:75:ca:a6: 69:b9:25:cf:09:f1:2a:e4:c3:61:c0:f7:80:b8:df: c7:8e:84:fb:f5:b5:23:89:a5:d2:21:3a:fa:62:f6: 38:15:1b:cb:ac:d2:07:ec:37:2a:53:b6:66:be:00: 12:21:3d:60:28:d6:c2:a3:f8:08:ad:dd:e7:f6:f3: 2c:c1:c4:bb:90:49:ea:38:81:46:a4:82:b5:05:fe: a7:1b:87:e1:7a:cc:03:bf:46:40:66:e1:dc:bb:9a: 1d:37:11:6d:75:1b:90:2f:41:c3:a0:12:c0:df:63: c8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:01:FC:86:14:39:FE:EC:1D:00:51:E0:E1:CF:EB:97:70:03:D6:D3 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.13.0/24 104.234.40.0/24 104.234.137.0/24 104.234.141.0/24 104.234.143.0/24 104.234.160.0/24 104.234.175.0/24 104.234.187.0/24 Signature Algorithm: sha256WithRSAEncryption 52:91:58:4f:0e:3b:40:04:88:2e:49:b2:19:74:6b:46:e1:0e: af:e7:f7:9c:7b:49:8d:f1:ac:59:a4:bb:fd:84:71:18:6a:eb: a6:bd:d9:8c:22:d9:8b:74:3c:40:13:d2:f2:43:a3:6f:ba:df: a3:fe:eb:c0:3c:42:79:1a:7c:73:de:1f:df:ce:bb:c1:76:d9: 9b:b5:d7:73:08:80:e0:8a:b6:f0:34:45:bc:f5:20:ba:34:d9: b2:44:d2:55:a7:85:e8:f2:5c:f0:c2:be:1b:7b:be:ea:1b:c7: 45:48:8c:3b:7a:b3:5e:ae:1a:2b:da:87:83:74:21:a5:c1:fe: d1:74:a6:c7:cd:32:18:7b:12:3e:13:75:8c:fb:e1:12:7f:32: e8:56:35:ee:d1:ae:70:22:2f:a3:06:a6:e1:45:a6:7b:7c:c7: 45:87:37:6f:17:0c:8c:02:59:20:35:5f:fd:ea:27:53:2b:89: b8:d6:de:45:cf:61:64:1b:96:07:d4:85:91:f8:7b:1b:de:67: 9e:53:6d:60:a2:54:bf:2b:f9:cb:7a:d3:46:17:f0:e6:94:d6: 1c:75:44:bf:c6:b5:54:d7:c1:9e:7a:04:95:54:1a:eb:25:4f: f3:3c:7a:45:5b:60:ce:98:0b:6c:96:c0:75:c7:1e:c3:e5:6c: fa:46:f3:b5 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUSJk21Mtm5Yn6fvkjihZs1LHwPl8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwODA5MjMyOTQyWhcNMjcwODA4MjMzNDQy WjAzMTEwLwYDVQQDEygyNzAxRkM4NjE0MzlGRUVDMUQwMDUxRTBFMUNGRUI5Nzcw MDNENkQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaF/WFRcnwk/ 1Amwbu81OiU/pXJKBN+Fh144hp/DzzmOr1gLGD+Nu6Z+lbIhWlV9cdwCM/umdaVk 2jm+JfHZ+opAMXAB5ElTKk01ieNbgIJZsXvGMmDwXvJcXTyPaKdFVvrx4VxfBxzt /SSpF4tu5b64Ycidu6VJSQ5dczSu6pXE9/CVFy4R7VTSrMOEeu6P76t1yqZpuSXP CfEq5MNhwPeAuN/HjoT79bUjiaXSITr6YvY4FRvLrNIH7DcqU7ZmvgASIT1gKNbC o/gIrd3n9vMswcS7kEnqOIFGpIK1Bf6nG4fheswDv0ZAZuHcu5odNxFtdRuQL0HD oBLA32PI3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcB/IYUOf7sHQBR4OHP65dw A9bTMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzE0NjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkG CCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAaOoNAwQAaOooAwQAaOqJAwQAaOqN AwQAaOqPAwQAaOqgAwQAaOqvAwQAaOq7MA0GCSqGSIb3DQEBCwUAA4IBAQBSkVhP DjtABIguSbIZdGtG4Q6v5/ece0mN8axZpLv9hHEYauumvdmMItmLdDxAE9LyQ6Nv ut+j/uvAPEJ5Gnxz3h/fzrvBdtmbtddzCIDgirbwNEW89SC6NNmyRNJVp4Xo8lzw wr4be77qG8dFSIw7erNerhor2oeDdCGlwf7RdKbHzTIYexI+E3WM++ESfzLoVjXu 0a5wIi+jBqbhRaZ7fMdFhzdvFwyMAlkgNV/96idTK4m41t5Fz2FkG5YH1IWR+Hsb 3meeU21golS/K/nLetNGF/DmlNYcdUS/xrVU18GeegSVVBrrJU/zPHpFW2DOmAts lsB1xx7D5Wz6RvO1 -----END CERTIFICATE-----Generated at Fri Sep 4 21:58:00 2026 by rpki-client