$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7018.roa File: AS7018.roa (raw, json) Hash identifier: 7HB8NxB3a1VPcu0DlKj4FVsJf9AbUu//6W6xQaIGQQI= Subject key identifier: F9:E1:66:C8:F6:76:2A:43:75:77:32:3E:16:D1:93:FB:FB:B6:DB:1E Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 69AF4300E10526C915180202935C2D113C8610B2 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7018.roa Signing time: Wed 05 Feb 2025 00:00:23 +0000 ROA not before: Tue 04 Feb 2025 23:55:23 +0000 ROA not after: Wed 04 Feb 2026 00:00:23 +0000 asID: 7018 IP address blocks: 23.94.90.0/24 maxlen: 24 23.94.106.0/24 maxlen: 24 23.94.109.0/24 maxlen: 24 23.94.135.0/24 maxlen: 24 107.172.19.0/24 maxlen: 24 192.228.117.0/24 maxlen: 24 198.23.222.0/24 maxlen: 24 209.200.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 08:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:af:43:00:e1:05:26:c9:15:18:02:02:93:5c:2d:11:3c:86:10:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Feb 4 23:55:23 2025 GMT Not After : Feb 4 00:00:23 2026 GMT Subject: CN=F9E166C8F6762A437577323E16D193FBFBB6DB1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:92:a6:10:35:96:b8:af:1a:ab:fc:f6:2b:b6: 87:a7:93:4a:a5:02:dd:cc:5a:a0:00:22:10:06:a9: 3f:62:06:a8:4c:e7:5a:b8:6f:08:11:16:e3:fe:c7: 0d:a8:da:4a:3d:05:21:21:e4:28:e8:75:fa:38:57: fa:e9:66:79:d8:d2:a4:47:8f:b1:77:76:bf:3e:e3: e5:30:c5:c0:fb:37:ad:96:d5:d6:60:1e:77:63:03: 22:cf:21:9d:eb:66:39:a2:24:5b:ec:dd:3d:03:d5: 88:5a:81:8a:06:af:fd:38:1f:52:e6:f8:1f:45:48: 65:f5:95:35:9d:59:c1:3d:4a:98:43:5f:6f:51:ee: 21:86:5d:c9:67:d9:29:b5:2c:05:b6:9b:14:28:8d: a3:03:ea:31:10:e5:ae:59:3b:b9:3b:13:ab:78:da: 68:95:b2:86:0a:66:ec:0f:fb:01:32:a9:ea:06:22: 5e:23:a1:f0:9c:da:88:0d:32:a5:b1:7e:2d:17:c2: 3f:b2:72:4c:e0:00:9d:c3:83:cd:24:6e:34:75:7f: 4c:aa:54:a5:bb:50:46:02:08:2d:a1:e0:05:19:d1: 1c:da:4c:d6:e2:cc:bf:db:34:29:f5:a8:ee:94:b8: 9e:a6:13:37:70:3c:24:8e:d9:79:6f:2d:65:02:91: bc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E1:66:C8:F6:76:2A:43:75:77:32:3E:16:D1:93:FB:FB:B6:DB:1E X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7018.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.94.90.0/24 23.94.106.0/24 23.94.109.0/24 23.94.135.0/24 107.172.19.0/24 192.228.117.0/24 198.23.222.0/24 209.200.250.0/24 Signature Algorithm: sha256WithRSAEncryption c9:32:e5:1e:d3:3b:b4:76:1d:e9:a8:40:ca:61:92:cc:19:c9: 12:43:88:da:08:37:27:e5:c6:b5:11:f3:0a:68:b0:f9:b7:ae: 22:02:cb:a6:e6:8c:6b:fb:58:98:f3:12:b1:0c:c5:cd:9b:90: 47:bc:7b:1d:6d:e6:ed:c6:dc:96:3d:f7:82:04:6c:fa:3d:2d: 22:4c:1d:2c:a1:d3:6d:15:b9:86:83:c1:b3:a4:66:24:e5:b8: f8:da:0f:98:42:6d:33:99:50:98:b8:17:cb:ea:9b:0c:2d:57: 3a:30:da:f1:5f:a6:ca:ad:20:ea:dd:00:2b:0d:60:a3:49:12: 3d:02:be:46:be:7b:c7:db:9b:8d:d0:84:d1:f6:2d:36:ca:15: 22:d7:4e:12:fc:6a:d0:90:be:24:d8:0c:89:ff:0f:d5:7e:35: 26:d5:c6:55:11:69:2e:85:69:d5:35:fb:2a:17:6f:e6:e4:48: 36:b2:c4:4b:06:71:a5:5e:af:a5:db:94:25:7a:72:45:98:94: 6e:b2:df:47:b7:d3:2f:74:d2:a6:79:2c:b5:e3:d2:7e:16:47: a7:e0:8f:b5:1e:b7:a1:c5:8e:9e:94:11:a2:fd:cd:4b:c4:ea: 30:5b:0a:4f:aa:f2:26:26:11:4c:a4:00:00:10:4d:d0:4a:2d: 92:1a:9d:11 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUaa9DAOEFJskVGAICk1wtETyGELIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwMjA0MjM1NTIzWhcNMjYwMjA0MDAwMDIz WjAzMTEwLwYDVQQDEyhGOUUxNjZDOEY2NzYyQTQzNzU3NzMyM0UxNkQxOTNGQkZC QjZEQjFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZKmEDWWuK8a q/z2K7aHp5NKpQLdzFqgACIQBqk/YgaoTOdauG8IERbj/scNqNpKPQUhIeQo6HX6 OFf66WZ52NKkR4+xd3a/PuPlMMXA+zetltXWYB53YwMizyGd62Y5oiRb7N09A9WI WoGKBq/9OB9S5vgfRUhl9ZU1nVnBPUqYQ19vUe4hhl3JZ9kptSwFtpsUKI2jA+ox EOWuWTu5OxOreNpolbKGCmbsD/sBMqnqBiJeI6HwnNqIDTKlsX4tF8I/snJM4ACd w4PNJG40dX9MqlSlu1BGAggtoeAFGdEc2kzW4sy/2zQp9ajulLiephM3cDwkjtl5 by1lApG8PQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFPnhZsj2dipDdXcyPhbRk/v7 ttseMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzcwMTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSQYI KwYBBQUHAQcBAf8EOjA4MDYEAgABMDADBAAXXloDBAAXXmoDBAAXXm0DBAAXXocD BABrrBMDBADA5HUDBADGF94DBADRyPowDQYJKoZIhvcNAQELBQADggEBAMky5R7T O7R2HemoQMphkswZyRJDiNoINyflxrUR8wposPm3riICy6bmjGv7WJjzErEMxc2b kEe8ex1t5u3G3JY994IEbPo9LSJMHSyh020VuYaDwbOkZiTluPjaD5hCbTOZUJi4 F8vqmwwtVzow2vFfpsqtIOrdACsNYKNJEj0Cvka+e8fbm43QhNH2LTbKFSLXThL8 atCQviTYDIn/D9V+NSbVxlURaS6FadU1+yoXb+bkSDayxEsGcaVer6XblCV6ckWY lG6y30e30y900qZ5LLXj0n4WR6fgj7Uet6HFjp6UEaL9zUvE6jBbCk+q8iYmEUyk AAAQTdBKLZIanRE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:17 2025 by rpki-client