$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: ezD0QraZeYu1aGRQnVK6ZVDKtA7AdiMxjVhXpWp8QPA= Subject key identifier: 48:22:06:DA:B2:FE:96:47:A8:52:ED:06:CE:CA:B3:7A:20:D0:D2:C5 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 707BCAF1C219FD597F129FB8D5EBFD282119AC50 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa Signing time: Mon 27 Oct 2025 14:17:42 +0000 ROA not before: Mon 27 Oct 2025 14:12:42 +0000 ROA not after: Mon 26 Oct 2026 14:17:42 +0000 asID: 14618 IP address blocks: 23.95.142.0/24 maxlen: 24 64.50.161.0/24 maxlen: 24 64.50.166.0/24 maxlen: 24 64.50.183.0/24 maxlen: 24 67.210.104.0/24 maxlen: 24 209.200.231.0/24 maxlen: 24 209.200.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:7b:ca:f1:c2:19:fd:59:7f:12:9f:b8:d5:eb:fd:28:21:19:ac:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Oct 27 14:12:42 2025 GMT Not After : Oct 26 14:17:42 2026 GMT Subject: CN=482206DAB2FE9647A852ED06CECAB37A20D0D2C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:20:3b:ea:25:db:d5:34:f3:ba:a8:44:3e:84: 2f:09:c8:b6:ee:69:17:90:aa:1a:93:a7:bc:a5:f5: 9c:cc:23:6e:96:77:bf:56:84:cc:97:b5:e1:dd:7a: 3b:c4:f7:a3:6e:c1:93:b6:21:bd:1f:fb:62:8f:55: 26:a4:7b:1b:c8:93:34:2a:c5:b4:7c:67:bf:c8:39: eb:b5:31:7e:74:c5:44:fc:d4:45:94:3b:35:01:48: ab:96:9e:50:c6:23:83:65:48:16:19:be:60:3b:d4: 8b:36:87:f3:a7:10:ca:eb:4c:c0:69:28:f5:f0:c2: 8b:91:c1:16:b0:14:d3:c0:5d:b6:a0:3d:90:ea:d1: 45:45:dd:0d:92:28:fb:ae:48:c6:53:d5:19:b6:c1: 30:e8:31:33:05:5b:a5:af:72:ae:c9:62:e6:fb:10: 3c:73:e1:de:df:31:5f:50:e3:90:4d:49:7f:30:2d: 4c:35:59:6a:2d:92:df:ca:45:49:b2:a1:76:5a:c2: f1:72:c9:5b:6f:50:ab:95:d6:bc:9a:f7:73:32:be: 1d:2d:59:15:35:9e:64:e4:59:58:6c:ce:bf:02:4b: 31:d7:a0:ed:c9:4c:5c:e0:a4:73:91:7b:1a:e0:79: 44:09:e1:36:5a:c6:19:df:d0:d0:f1:58:9a:93:4f: ea:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:22:06:DA:B2:FE:96:47:A8:52:ED:06:CE:CA:B3:7A:20:D0:D2:C5 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.142.0/24 64.50.161.0/24 64.50.166.0/24 64.50.183.0/24 67.210.104.0/24 209.200.231.0/24 209.200.241.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:7a:cf:4a:96:cc:3d:70:7d:03:f7:d1:89:76:24:9c:1a:ed: 88:ed:eb:44:b2:4e:a9:7e:dd:45:5c:2d:c5:0c:7d:c6:68:69: 28:72:9c:cc:d2:be:0d:3a:32:0b:bb:0b:33:7d:38:7d:fd:28: ec:2f:bf:1c:d9:5a:19:89:29:c4:36:89:06:86:3d:f8:fd:94: 89:3e:1e:4e:5f:83:9f:ca:9f:d9:e6:8e:85:f2:5c:d3:ae:5c: 04:10:a4:cd:c2:4e:9a:e9:3e:6e:55:d4:1b:98:77:36:d6:bf: 66:c5:2f:a6:8c:56:8f:27:51:f4:75:02:1c:60:4c:3d:4e:86: 23:c3:6c:90:a5:cd:97:76:81:cf:42:ca:83:09:0b:57:66:01: ce:4e:fe:29:95:2f:ad:eb:67:e1:84:82:68:67:d2:c0:72:a9: 0d:a2:9b:00:28:0c:52:2b:ee:91:6e:28:ff:ef:be:42:2f:ef: 45:9c:44:9a:34:bd:ee:b6:50:99:f6:8b:e7:68:66:0e:95:f0: 68:52:34:6f:d0:ab:90:c4:62:ce:a6:89:36:82:a7:ef:d1:5b: f5:82:1d:ae:29:c5:43:fe:9e:6d:49:de:91:09:2f:4f:65:17: 40:ef:1f:60:41:d0:2f:48:50:d9:ee:ac:6a:c6:5a:61:13:16: 7e:6b:57:e6 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIUcHvK8cIZ/Vl/Ep+41ev9KCEZrFAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUxMDI3MTQxMjQyWhcNMjYxMDI2MTQxNzQy WjAzMTEwLwYDVQQDEyg0ODIyMDZEQUIyRkU5NjQ3QTg1MkVEMDZDRUNBQjM3QTIw RDBEMkM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyA76iXb1TTz uqhEPoQvCci27mkXkKoak6e8pfWczCNulne/VoTMl7Xh3Xo7xPejbsGTtiG9H/ti j1UmpHsbyJM0KsW0fGe/yDnrtTF+dMVE/NRFlDs1AUirlp5QxiODZUgWGb5gO9SL NofzpxDK60zAaSj18MKLkcEWsBTTwF22oD2Q6tFFRd0Nkij7rkjGU9UZtsEw6DEz BVulr3KuyWLm+xA8c+He3zFfUOOQTUl/MC1MNVlqLZLfykVJsqF2WsLxcslbb1Cr lda8mvdzMr4dLVkVNZ5k5FlYbM6/Aksx16DtyUxc4KRzkXsa4HlECeE2WsYZ39DQ 8Viak0/qeQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEgiBtqy/pZHqFLtBs7Ks3og 0NLFMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzE0NjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMG CCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAF1+OAwQAQDKhAwQAQDKmAwQAQDK3 AwQAQ9JoAwQA0cjnAwQA0cjxMA0GCSqGSIb3DQEBCwUAA4IBAQAtes9Klsw9cH0D 99GJdiScGu2I7etEsk6pft1FXC3FDH3GaGkocpzM0r4NOjILuwszfTh9/SjsL78c 2VoZiSnENokGhj34/ZSJPh5OX4Ofyp/Z5o6F8lzTrlwEEKTNwk6a6T5uVdQbmHc2 1r9mxS+mjFaPJ1H0dQIcYEw9ToYjw2yQpc2XdoHPQsqDCQtXZgHOTv4plS+t62fh hIJoZ9LAcqkNopsAKAxSK+6Rbij/775CL+9FnESaNL3utlCZ9ovnaGYOlfBoUjRv 0KuQxGLOpok2gqfv0Vv1gh2uKcVD/p5tSd6RCS9PZRdA7x9gQdAvSFDZ7qxqxlph ExZ+a1fm -----END CERTIFICATE-----Generated at Wed Nov 5 21:51:12 2025 by rpki-client