$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: fIYH2Hn9jz/r/6+PSaHnaaY4uGa/HJguddcSAeexMHA= Subject key identifier: 32:AB:05:B6:8D:D2:8C:99:DA:0E:28:48:AF:67:53:C2:DE:F0:1C:F3 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 6DB49F0504FD27F1FD2DF93D37A015E54BA36144 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa Signing time: Fri 02 Oct 2026 10:29:01 +0000 ROA not before: Fri 02 Oct 2026 10:24:01 +0000 ROA not after: Fri 01 Oct 2027 10:29:01 +0000 asID: 14618 IP address blocks: 157.254.1.0/24 maxlen: 24 157.254.141.0/24 maxlen: 24 157.254.169.0/24 maxlen: 24 157.254.200.0/22 maxlen: 22 157.254.217.0/24 maxlen: 24 157.254.232.0/24 maxlen: 24 157.254.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 21:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:b4:9f:05:04:fd:27:f1:fd:2d:f9:3d:37:a0:15:e5:4b:a3:61:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Oct 2 10:24:01 2026 GMT Not After : Oct 1 10:29:01 2027 GMT Subject: CN=32AB05B68DD28C99DA0E2848AF6753C2DEF01CF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a9:cc:14:30:f4:c4:9e:b8:e1:34:00:ba:70: d6:44:e5:b3:0c:25:76:7e:21:84:57:02:14:ba:aa: af:f3:fe:76:14:13:ee:c1:c4:39:00:96:b6:dc:ab: ba:40:5f:f7:2d:ea:f3:11:4e:22:dc:f5:2d:35:a7: c3:80:f7:32:cb:62:01:1c:b5:0e:e1:50:fc:e6:b9: 2b:20:eb:37:2f:b4:eb:20:8c:06:81:76:ab:93:b2: 27:3f:a1:93:14:39:11:73:6b:4c:48:55:e7:46:d6: 15:e7:57:34:96:55:d1:e9:14:15:2d:25:1e:97:4b: 26:59:3c:b9:bd:6c:40:e8:59:a8:b2:5e:bc:b6:09: 6b:67:4c:4b:59:ac:7e:68:5b:1c:d0:f5:16:f6:36: 97:d2:fd:f7:5c:61:f3:9f:cf:77:47:39:d9:22:cc: 43:29:37:38:ae:b6:d1:9c:f8:fe:b8:dc:ac:64:a1: b6:23:d9:54:b4:06:59:4e:2d:38:e9:51:2a:f0:55: d9:ae:9a:ee:5b:7c:7d:bf:96:c3:0e:fd:3c:ba:c9: 23:92:57:fc:28:21:16:71:c8:9c:1a:2d:9f:8c:98: 0e:6b:a5:3d:d0:58:6b:53:42:8e:0a:e6:84:3d:d9: e7:33:99:7a:07:2e:ee:c0:78:14:33:96:00:04:69: df:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AB:05:B6:8D:D2:8C:99:DA:0E:28:48:AF:67:53:C2:DE:F0:1C:F3 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.1.0/24 157.254.141.0/24 157.254.169.0/24 157.254.200.0/22 157.254.217.0/24 157.254.232.0/24 157.254.239.0/24 Signature Algorithm: sha256WithRSAEncryption 00:85:86:38:b5:62:32:a6:93:07:70:b7:88:60:1b:b2:51:32: 4b:eb:fc:44:8b:fb:66:e5:54:f2:23:71:44:34:df:59:04:3a: 58:ce:61:6c:f3:26:e6:1b:28:16:40:15:02:23:a7:18:60:ee: ca:32:c7:7e:07:bf:36:dc:35:64:94:6c:ff:66:48:23:b2:58: 50:50:99:47:2b:52:35:7a:55:c1:32:88:90:a6:43:3d:c6:ac: 86:71:e6:59:85:5c:83:99:26:a0:0c:f5:3f:fe:9f:64:e5:2d: e6:65:14:35:53:db:b4:9f:18:11:08:00:fe:f3:dc:8a:bc:9b: 7e:9f:92:84:a7:30:e3:1e:e0:d0:8f:53:78:7e:49:2b:39:c1: 92:21:f7:0d:a5:76:ee:e4:6c:bc:0d:dc:eb:ee:a5:6a:9e:3a: 55:68:31:ff:95:40:9f:7b:30:0e:5d:fd:eb:d9:9d:b0:c2:1d: 2f:88:fa:54:c5:2c:4b:59:4a:01:1e:89:d5:a8:f3:db:b1:67: cf:e5:24:7f:d1:58:5e:f5:7d:3a:54:00:bd:da:00:dd:b5:70: d9:6d:cf:5e:0d:79:88:c1:ff:bd:42:bf:19:43:9f:03:70:b4: 11:54:06:2e:30:51:27:09:1a:d0:ac:31:c1:a1:6f:a8:51:1a: d8:c5:f6:ea -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIUbbSfBQT9J/H9Lfk9N6AV5UujYUQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYxMDAyMTAyNDAxWhcNMjcxMDAxMTAyOTAx WjAzMTEwLwYDVQQDEygzMkFCMDVCNjhERDI4Qzk5REEwRTI4NDhBRjY3NTNDMkRF RjAxQ0YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkanMFDD0xJ64 4TQAunDWROWzDCV2fiGEVwIUuqqv8/52FBPuwcQ5AJa23Ku6QF/3LerzEU4i3PUt NafDgPcyy2IBHLUO4VD85rkrIOs3L7TrIIwGgXark7InP6GTFDkRc2tMSFXnRtYV 51c0llXR6RQVLSUel0smWTy5vWxA6Fmosl68tglrZ0xLWax+aFsc0PUW9jaX0v33 XGHzn893RznZIsxDKTc4rrbRnPj+uNysZKG2I9lUtAZZTi046VEq8FXZrpruW3x9 v5bDDv08uskjklf8KCEWccicGi2fjJgOa6U90FhrU0KOCuaEPdnnM5l6By7uwHgU M5YABGnf1QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDKrBbaN0oyZ2g4oSK9nU8Le 8BzzMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE0NjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMG CCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAnf4BAwQAnf6NAwQAnf6pAwQCnf7I AwQAnf7ZAwQAnf7oAwQAnf7vMA0GCSqGSIb3DQEBCwUAA4IBAQAAhYY4tWIyppMH cLeIYBuyUTJL6/xEi/tm5VTyI3FENN9ZBDpYzmFs8ybmGygWQBUCI6cYYO7KMsd+ B7823DVklGz/ZkgjslhQUJlHK1I1elXBMoiQpkM9xqyGceZZhVyDmSagDPU//p9k 5S3mZRQ1U9u0nxgRCAD+89yKvJt+n5KEpzDjHuDQj1N4fkkrOcGSIfcNpXbu5Gy8 Ddzr7qVqnjpVaDH/lUCfezAOXf3r2Z2wwh0viPpUxSxLWUoBHonVqPPbsWfP5SR/ 0Vhe9X06VAC92gDdtXDZbc9eDXmIwf+9Qr8ZQ58DcLQRVAYuMFEnCRrQrDHBoW+o URrYxfbq -----END CERTIFICATE-----Generated at Tue Oct 6 01:10:41 2026 by rpki-client