$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7018.roa File: AS7018.roa (raw, json) Hash identifier: 6iuYGwKEzK1+dkVD7KS7FIOnNaYS7xVPFVM9GEdgTlw= Subject key identifier: B7:79:97:F9:BE:44:5F:5C:DB:02:BE:44:D1:7C:7B:2C:65:42:57:0C Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 7880A7011F9FE072DA56CC7B281F87ED60CCBCF0 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7018.roa Signing time: Mon 10 Feb 2025 03:27:20 +0000 ROA not before: Mon 10 Feb 2025 03:22:20 +0000 ROA not after: Mon 09 Feb 2026 03:27:20 +0000 asID: 7018 IP address blocks: 157.254.176.0/23 maxlen: 24 157.254.180.0/23 maxlen: 24 157.254.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 00:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:80:a7:01:1f:9f:e0:72:da:56:cc:7b:28:1f:87:ed:60:cc:bc:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Feb 10 03:22:20 2025 GMT Not After : Feb 9 03:27:20 2026 GMT Subject: CN=B77997F9BE445F5CDB02BE44D17C7B2C6542570C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:31:c0:7f:32:fd:33:f2:cb:dc:28:59:ac:b1: 8d:cd:c6:f5:57:37:0c:ff:3c:c0:64:76:a9:3b:d2: 47:c0:54:23:7f:be:c9:e9:56:95:52:5e:ef:25:96: 4f:f0:0d:0e:cf:67:b7:18:4c:40:65:f5:e6:0c:2d: 48:57:f0:51:86:c8:c5:c5:50:c3:75:08:40:69:b1: 80:b7:d5:68:8b:b9:83:f5:12:90:46:88:c9:11:33: 61:bb:49:fe:27:23:6d:5f:8d:36:72:65:7a:1f:9e: d5:8e:16:38:3a:65:45:7f:3e:67:7f:e1:00:09:c3: 57:df:02:d3:88:4c:aa:0d:48:5d:b3:b5:bc:b6:0f: 66:70:10:8f:22:ca:de:b8:90:46:da:9c:e7:3a:11: 4b:62:89:7d:b9:2f:59:4a:28:e0:a8:87:70:6d:3c: 13:0e:db:f8:f3:de:f6:87:8b:cd:71:c7:2a:8c:24: 65:a0:5b:b3:b9:75:98:6b:7e:d6:00:e8:3a:fd:fb: d7:4f:7b:5f:62:0a:77:75:d4:db:eb:20:d9:6f:48: 1c:e7:9f:9d:fc:49:fe:69:f5:63:85:0c:70:82:8e: d9:df:77:d0:d6:38:94:f8:c4:47:81:d3:23:56:b2: 4a:d6:32:aa:00:98:d4:c8:c8:97:fe:aa:20:60:a8: f7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:79:97:F9:BE:44:5F:5C:DB:02:BE:44:D1:7C:7B:2C:65:42:57:0C X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7018.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.176.0/23 157.254.180.0/23 157.254.254.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:79:fe:43:93:88:3f:c1:e0:43:8d:5d:31:5f:ee:07:70:4d: f3:62:06:63:08:89:c8:06:de:3a:a9:08:0a:64:73:64:19:56: d0:81:61:b6:91:b2:86:8b:59:f8:fa:77:85:fb:2a:c3:c6:e6: ef:ac:2b:72:08:a6:fa:96:c2:ef:90:e9:3b:da:8f:3c:0d:9e: 8f:c4:d2:4d:cc:de:18:17:c9:5e:c9:1c:e8:fd:cc:af:bf:9b: d9:c0:34:49:55:e7:8a:4e:7f:fe:83:e4:bc:70:d2:0b:93:01: a1:f6:26:bf:ec:5f:01:0d:ec:27:15:2a:44:ed:9b:c6:28:91: 75:ab:68:ac:08:2d:b1:14:26:05:6c:0a:3d:6e:f7:22:70:61: 43:4f:fd:a1:3a:c4:8f:ad:46:12:d1:da:4f:2f:4f:90:4e:10: ba:dc:bf:32:b8:2a:09:91:d8:39:dc:9b:fd:05:ef:fa:b0:c3: 01:c8:c7:3f:4d:75:2b:e4:d5:75:ff:4b:e7:1e:4b:d5:ba:5f: ab:ed:b2:5b:7a:b0:4c:ad:87:e8:22:46:3f:b8:9a:d1:e6:8f: ff:ac:08:ed:b1:09:74:6a:8e:ce:6c:7c:f6:c3:b3:c1:a5:77: 29:34:67:cb:6d:d3:bf:aa:67:3e:c0:91:b4:7a:e8:ee:a8:b8: 54:fa:2b:7b -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIUeICnAR+f4HLaVsx7KB+H7WDMvPAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwMjEwMDMyMjIwWhcNMjYwMjA5MDMyNzIw WjAzMTEwLwYDVQQDEyhCNzc5OTdGOUJFNDQ1RjVDREIwMkJFNDREMTdDN0IyQzY1 NDI1NzBDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDHAfzL9M/LL 3ChZrLGNzcb1VzcM/zzAZHapO9JHwFQjf77J6VaVUl7vJZZP8A0Oz2e3GExAZfXm DC1IV/BRhsjFxVDDdQhAabGAt9Voi7mD9RKQRojJETNhu0n+JyNtX402cmV6H57V jhY4OmVFfz5nf+EACcNX3wLTiEyqDUhds7W8tg9mcBCPIsreuJBG2pznOhFLYol9 uS9ZSijgqIdwbTwTDtv48972h4vNcccqjCRloFuzuXWYa37WAOg6/fvXT3tfYgp3 ddTb6yDZb0gc55+d/En+afVjhQxwgo7Z33fQ1jiU+MRHgdMjVrJK1jKqAJjUyMiX /qogYKj3FwIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFLd5l/m+RF9c2wK+RNF8eyxl QlcMMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzcwMTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYI KwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAGd/rADBAGd/rQDBAGd/v4wDQYJKoZI hvcNAQELBQADggEBAG15/kOTiD/B4EONXTFf7gdwTfNiBmMIicgG3jqpCApkc2QZ VtCBYbaRsoaLWfj6d4X7KsPG5u+sK3IIpvqWwu+Q6TvajzwNno/E0k3M3hgXyV7J HOj9zK+/m9nANElV54pOf/6D5Lxw0guTAaH2Jr/sXwEN7CcVKkTtm8YokXWraKwI LbEUJgVsCj1u9yJwYUNP/aE6xI+tRhLR2k8vT5BOELrcvzK4KgmR2Dncm/0F7/qw wwHIxz9NdSvk1XX/S+ceS9W6X6vtslt6sEyth+giRj+4mtHmj/+sCO2xCXRqjs5s fPbDs8Gldyk0Z8tt07+qZz7AkbR66O6ouFT6K3s= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:23 2025 by rpki-client