$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: B37mu2CgbAlIhDl4gyDxlfUVXtqck4Bk0z05WwG1EDc= Subject key identifier: CE:E2:02:D6:33:B3:26:AB:F2:88:17:61:32:6B:43:AE:9A:A6:A5:EB Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 3C90F7517D3479FC2D87DD6F192DD4157DFB523D Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa Signing time: Sat 15 Aug 2026 17:37:15 +0000 ROA not before: Sat 15 Aug 2026 17:32:15 +0000 ROA not after: Sat 14 Aug 2027 17:37:15 +0000 asID: 14618 IP address blocks: 157.254.1.0/24 maxlen: 24 157.254.141.0/24 maxlen: 24 157.254.169.0/24 maxlen: 24 157.254.200.0/22 maxlen: 22 157.254.217.0/24 maxlen: 24 157.254.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 19:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:90:f7:51:7d:34:79:fc:2d:87:dd:6f:19:2d:d4:15:7d:fb:52:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Aug 15 17:32:15 2026 GMT Not After : Aug 14 17:37:15 2027 GMT Subject: CN=CEE202D633B326ABF2881761326B43AE9AA6A5EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9a:6d:98:c1:63:bc:a6:51:6b:25:ed:c3:4d: 69:42:95:1d:68:54:ae:70:62:93:e4:23:26:54:99: 4c:23:41:b1:ca:18:d0:1d:b3:38:35:43:a9:30:74: 63:33:fd:a9:bf:28:b8:b0:22:ff:28:e2:38:e4:d7: fc:d0:e1:7b:b2:4f:38:0f:f7:04:f3:d3:4e:a5:db: e8:f9:16:d3:8b:68:30:07:fb:c0:2e:98:5c:35:9b: f7:24:62:6c:dd:d2:8e:42:17:98:66:bf:1d:11:be: 0d:8e:f0:2f:c2:87:99:0e:f7:8d:f5:68:8c:c1:8a: 7b:b7:75:89:18:12:14:25:f5:e1:f5:8c:4c:d5:af: 70:21:c1:d3:70:9e:2a:b5:e9:a6:95:48:6f:41:b5: 4a:17:f3:8f:74:0d:ae:ca:9b:6f:94:d6:14:93:52: 50:e4:a0:73:70:da:a6:04:eb:c0:f4:07:90:2f:b0: d2:b8:cc:7d:30:7f:75:5b:89:d5:2c:7f:27:dd:7a: 7e:1b:b0:2d:43:d1:f7:aa:e9:c7:ef:12:18:65:0e: c1:12:78:19:fb:e9:95:18:9e:d3:72:6d:72:96:0b: e2:e6:fb:a8:e0:c7:ac:c4:b8:af:53:9c:81:6d:5e: 0a:d9:0a:94:6b:ca:ac:c4:42:19:9d:06:4a:86:95: da:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E2:02:D6:33:B3:26:AB:F2:88:17:61:32:6B:43:AE:9A:A6:A5:EB X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.1.0/24 157.254.141.0/24 157.254.169.0/24 157.254.200.0/22 157.254.217.0/24 157.254.239.0/24 Signature Algorithm: sha256WithRSAEncryption b1:f0:bb:ab:76:16:45:d1:53:a5:53:3b:df:04:1d:70:c0:a1: 17:e6:7e:10:3a:02:4e:a6:c5:67:3b:95:7d:66:12:4b:f3:57: 67:f5:85:f6:fe:d9:da:82:ed:be:39:00:f2:fb:e1:81:f5:ff: 8f:8a:20:7a:ee:b6:f9:0d:e5:6f:9a:c2:72:16:b9:24:7b:3a: 2e:05:fa:1b:72:20:5d:21:f5:15:e4:28:89:55:e1:46:27:1c: 8b:c7:95:e0:80:c2:27:74:7c:f7:2f:7c:c1:7a:b7:59:c0:fc: af:58:b7:31:25:58:46:10:9b:3c:99:2e:5a:ee:e3:da:38:77: 36:58:5a:02:fd:14:d8:ac:5d:57:5e:b9:51:e3:99:26:f4:ff: ea:66:fc:fa:c4:25:0c:72:3c:38:ec:0b:31:f8:01:c4:83:a7: 2b:b7:92:5e:80:db:cc:c9:91:4b:5e:06:7e:a0:2a:81:77:27: 1f:24:57:63:82:50:5a:a7:10:74:06:6b:63:2b:bb:7b:a0:f3: 1c:d7:c2:a5:75:ad:64:bb:18:41:41:51:f2:22:c7:49:cc:2d: f7:4e:ce:45:e0:fd:05:b6:99:d5:08:5c:b5:5d:95:83:13:f9: ca:17:14:36:34:e4:a3:c1:2b:45:e7:32:8c:99:ec:aa:4c:41: 36:b3:0b:38 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUPJD3UX00efwth91vGS3UFX37Uj0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwODE1MTczMjE1WhcNMjcwODE0MTczNzE1 WjAzMTEwLwYDVQQDEyhDRUUyMDJENjMzQjMyNkFCRjI4ODE3NjEzMjZCNDNBRTlB QTZBNUVCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35ptmMFjvKZR ayXtw01pQpUdaFSucGKT5CMmVJlMI0GxyhjQHbM4NUOpMHRjM/2pvyi4sCL/KOI4 5Nf80OF7sk84D/cE89NOpdvo+RbTi2gwB/vALphcNZv3JGJs3dKOQheYZr8dEb4N jvAvwoeZDveN9WiMwYp7t3WJGBIUJfXh9YxM1a9wIcHTcJ4qtemmlUhvQbVKF/OP dA2uyptvlNYUk1JQ5KBzcNqmBOvA9AeQL7DSuMx9MH91W4nVLH8n3Xp+G7AtQ9H3 qunH7xIYZQ7BEngZ++mVGJ7Tcm1ylgvi5vuo4MesxLivU5yBbV4K2QqUa8qsxEIZ nQZKhpXaeQIDAQABo4ICnDCCApgwHQYDVR0OBBYEFM7iAtYzsyar8ogXYTJrQ66a pqXrMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE0NjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0G CCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAnf4BAwQAnf6NAwQAnf6pAwQCnf7I AwQAnf7ZAwQAnf7vMA0GCSqGSIb3DQEBCwUAA4IBAQCx8LurdhZF0VOlUzvfBB1w wKEX5n4QOgJOpsVnO5V9ZhJL81dn9YX2/tnagu2+OQDy++GB9f+PiiB67rb5DeVv msJyFrkkezouBfobciBdIfUV5CiJVeFGJxyLx5XggMIndHz3L3zBerdZwPyvWLcx JVhGEJs8mS5a7uPaOHc2WFoC/RTYrF1XXrlR45km9P/qZvz6xCUMcjw47Asx+AHE g6crt5JegNvMyZFLXgZ+oCqBdycfJFdjglBapxB0BmtjK7t7oPMc18Klda1kuxhB QVHyIsdJzC33Ts5F4P0FtpnVCFy1XZWDE/nKFxQ2NOSjwStF5zKMmeyqTEE2sws4 -----END CERTIFICATE-----Generated at Thu Aug 20 23:31:56 2026 by rpki-client