$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7018.roa File: AS7018.roa (raw, json) Hash identifier: bTJ08i0zPUs0aNOjZR0JZxwMXhUDAIFYxpcOiSt7q80= Subject key identifier: 89:21:DC:2F:27:C3:3B:A8:59:D1:96:F4:3E:D5:28:F2:D9:B9:C9:AA Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 092B25AF611CE5AEDFB83CC7C9DD8E8FFF3E72E5 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7018.roa Signing time: Thu 28 Aug 2025 00:01:24 +0000 ROA not before: Wed 27 Aug 2025 23:56:24 +0000 ROA not after: Thu 27 Aug 2026 00:01:24 +0000 asID: 7018 IP address blocks: 23.94.90.0/24 maxlen: 24 23.94.106.0/24 maxlen: 24 23.94.109.0/24 maxlen: 24 23.94.135.0/24 maxlen: 24 192.228.117.0/24 maxlen: 24 198.23.222.0/24 maxlen: 24 209.200.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 02:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:2b:25:af:61:1c:e5:ae:df:b8:3c:c7:c9:dd:8e:8f:ff:3e:72:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Aug 27 23:56:24 2025 GMT Not After : Aug 27 00:01:24 2026 GMT Subject: CN=8921DC2F27C33BA859D196F43ED528F2D9B9C9AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8e:69:1f:e8:19:73:d3:14:95:15:bc:a6:82: 07:ad:4a:8e:9f:5e:a1:e8:f8:9f:a5:87:ee:aa:1b: 40:a4:d0:9f:87:6e:3c:61:93:14:dc:59:2b:a1:44: 64:91:8c:72:81:d8:67:29:52:44:ea:83:90:0e:29: 38:59:c5:90:eb:55:73:00:59:0f:49:37:d2:d6:3d: 49:30:48:44:37:f7:7d:34:15:65:be:7d:10:fa:9e: c5:81:5c:40:8d:52:ba:0a:94:25:07:c8:a9:27:68: 9f:39:d4:d3:25:00:20:22:1c:db:bb:76:c6:72:de: 7d:45:c8:1a:c9:00:4c:b0:b1:1a:eb:01:5a:3c:07: d0:ed:e1:e8:d8:28:ad:6c:eb:03:49:aa:0e:94:8c: e7:ed:a1:13:eb:bb:64:e9:9e:38:10:98:03:9e:02: 1c:0e:b9:fe:9c:c1:68:03:51:7c:8a:4f:90:e9:2b: ef:d7:16:ad:aa:bb:94:dc:c6:3e:e9:db:06:d1:86: cc:08:f6:7f:4c:60:e3:4b:c4:66:22:21:d2:91:76: 43:f7:be:92:e3:41:14:5e:7b:84:8c:df:b9:52:b6: d3:49:2b:93:1d:65:d2:e9:76:6a:88:6b:1c:53:1f: d9:f1:3c:92:88:c5:80:46:0a:92:e5:82:72:a0:85: b9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:21:DC:2F:27:C3:3B:A8:59:D1:96:F4:3E:D5:28:F2:D9:B9:C9:AA X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7018.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.94.90.0/24 23.94.106.0/24 23.94.109.0/24 23.94.135.0/24 192.228.117.0/24 198.23.222.0/24 209.200.250.0/24 Signature Algorithm: sha256WithRSAEncryption ae:4f:f5:2e:7a:8e:7d:fb:2b:5e:b8:0f:34:4d:ab:cb:7a:e9: d8:fc:b0:92:74:21:ff:62:d5:39:cf:2f:c6:13:a9:eb:70:2b: 1f:93:9c:1e:10:d1:a2:c4:2c:8c:6a:c1:99:5c:59:51:4a:8f: 18:49:8c:71:1d:7e:2b:a6:09:7a:44:4c:2c:75:3f:1e:bf:75: f4:6f:0d:f5:e3:04:8e:bb:5f:34:db:16:68:60:41:1f:f7:a4: c5:f8:da:76:94:ef:57:31:e0:77:c2:b6:6e:2c:9e:aa:ed:4c: 07:ed:bc:b7:6c:ab:a3:bf:cd:0a:9d:ea:a8:9e:a8:4d:cb:a3: 77:20:f7:1e:3d:0a:aa:74:d1:7a:b0:14:26:0f:c6:71:88:f4: c7:d9:61:db:0f:35:d4:b7:fd:c4:2c:01:c1:15:44:f4:ab:57: 68:27:c6:e2:ce:7d:44:ab:f0:ab:7b:06:b4:ec:9a:6f:41:50: b5:92:2a:7e:1c:71:ed:50:6e:bc:6d:91:9d:e4:19:91:6d:d5: c9:15:70:ae:cd:62:81:eb:3f:65:e8:dd:f7:43:dc:95:cf:ba: 8e:1b:21:34:e7:d5:28:fa:0b:77:1a:1c:4e:41:02:8c:b3:62: fc:f6:eb:fe:ce:7d:33:40:87:70:3f:19:ab:0d:4e:3c:43:67: 5e:42:23:11 -----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgIUCSslr2Ec5a7fuDzHyd2Oj/8+cuUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwODI3MjM1NjI0WhcNMjYwODI3MDAwMTI0 WjAzMTEwLwYDVQQDEyg4OTIxREMyRjI3QzMzQkE4NTlEMTk2RjQzRUQ1MjhGMkQ5 QjlDOUFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq45pH+gZc9MU lRW8poIHrUqOn16h6PifpYfuqhtApNCfh248YZMU3FkroURkkYxygdhnKVJE6oOQ Dik4WcWQ61VzAFkPSTfS1j1JMEhEN/d9NBVlvn0Q+p7FgVxAjVK6CpQlB8ipJ2if OdTTJQAgIhzbu3bGct59RcgayQBMsLEa6wFaPAfQ7eHo2CitbOsDSaoOlIzn7aET 67tk6Z44EJgDngIcDrn+nMFoA1F8ik+Q6Svv1xatqruU3MY+6dsG0YbMCPZ/TGDj S8RmIiHSkXZD976S40EUXnuEjN+5UrbTSSuTHWXS6XZqiGscUx/Z8TySiMWARgqS 5YJyoIW5jQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFIkh3C8nwzuoWdGW9D7VKPLZ ucmqMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzcwMTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQwYI KwYBBQUHAQcBAf8ENDAyMDAEAgABMCoDBAAXXloDBAAXXmoDBAAXXm0DBAAXXocD BADA5HUDBADGF94DBADRyPowDQYJKoZIhvcNAQELBQADggEBAK5P9S56jn37K164 DzRNq8t66dj8sJJ0If9i1TnPL8YTqetwKx+TnB4Q0aLELIxqwZlcWVFKjxhJjHEd fiumCXpETCx1Px6/dfRvDfXjBI67XzTbFmhgQR/3pMX42naU71cx4HfCtm4snqrt TAftvLdsq6O/zQqd6qieqE3Lo3cg9x49Cqp00XqwFCYPxnGI9MfZYdsPNdS3/cQs AcEVRPSrV2gnxuLOfUSr8Kt7BrTsmm9BULWSKn4cce1QbrxtkZ3kGZFt1ckVcK7N YoHrP2Xo3fdD3JXPuo4bITTn1Sj6C3caHE5BAoyzYvz26/7OfTNAh3A/GasNTjxD Z15CIxE= -----END CERTIFICATE-----Generated at Tue Sep 16 03:36:27 2025 by rpki-client