$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa File: AS834.roa (raw, json) Hash identifier: H9ttZjOfEK0tjCrBdSmuKjE5KTA7gU8/zm3iNXIuEUg= Subject key identifier: 05:72:91:AB:C5:03:0D:58:EF:6D:F5:E9:5F:BA:A4:0D:96:19:28:61 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 5D2921723817550BD4A3715C85CED2AF053EB49E Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa Signing time: Sat 28 Jun 2025 10:45:16 +0000 ROA not before: Sat 28 Jun 2025 10:40:16 +0000 ROA not after: Sat 27 Jun 2026 10:45:16 +0000 asID: 834 IP address blocks: 40.27.17.0/24 maxlen: 24 40.27.19.0/24 maxlen: 24 40.27.20.0/22 maxlen: 24 40.27.24.0/21 maxlen: 24 40.27.32.0/21 maxlen: 24 40.27.48.0/20 maxlen: 24 40.27.64.0/21 maxlen: 24 40.27.72.0/22 maxlen: 24 40.27.80.0/20 maxlen: 24 40.27.96.0/21 maxlen: 24 40.27.104.0/22 maxlen: 24 40.27.108.0/24 maxlen: 24 40.27.110.0/23 maxlen: 24 40.27.112.0/20 maxlen: 24 40.27.128.0/21 maxlen: 24 40.27.136.0/22 maxlen: 24 40.27.144.0/20 maxlen: 24 40.27.160.0/21 maxlen: 24 40.27.169.0/24 maxlen: 24 40.27.170.0/23 maxlen: 24 40.27.172.0/22 maxlen: 24 40.27.176.0/20 maxlen: 24 40.27.196.0/22 maxlen: 24 40.27.200.0/21 maxlen: 24 40.27.208.0/20 maxlen: 24 40.27.224.0/20 maxlen: 24 40.27.240.0/23 maxlen: 24 40.27.242.0/24 maxlen: 24 40.183.94.0/24 maxlen: 24 40.183.96.0/19 maxlen: 24 40.183.136.0/21 maxlen: 24 40.183.144.0/22 maxlen: 24 40.183.148.0/23 maxlen: 24 40.183.151.0/24 maxlen: 24 40.183.152.0/24 maxlen: 24 40.183.154.0/23 maxlen: 24 40.183.156.0/23 maxlen: 24 40.183.192.0/22 maxlen: 24 40.183.196.0/23 maxlen: 24 40.183.199.0/24 maxlen: 24 40.183.200.0/21 maxlen: 24 40.183.208.0/21 maxlen: 24 40.183.224.0/23 maxlen: 24 40.183.228.0/22 maxlen: 24 40.183.232.0/21 maxlen: 24 40.183.240.0/21 maxlen: 24 40.183.252.0/24 maxlen: 24 40.223.6.0/23 maxlen: 24 40.223.8.0/24 maxlen: 24 40.223.10.0/23 maxlen: 24 40.223.24.0/21 maxlen: 24 40.223.32.0/21 maxlen: 24 40.223.40.0/22 maxlen: 24 40.223.48.0/20 maxlen: 24 40.223.64.0/20 maxlen: 24 40.223.88.0/21 maxlen: 24 40.223.96.0/20 maxlen: 24 40.223.112.0/21 maxlen: 24 40.223.120.0/23 maxlen: 24 40.223.123.0/24 maxlen: 24 40.223.124.0/22 maxlen: 24 40.223.128.0/20 maxlen: 24 40.223.144.0/21 maxlen: 24 40.223.152.0/22 maxlen: 24 40.223.156.0/24 maxlen: 24 40.223.158.0/23 maxlen: 24 40.223.160.0/20 maxlen: 24 40.223.176.0/21 maxlen: 24 40.223.192.0/19 maxlen: 24 40.223.224.0/20 maxlen: 24 40.223.240.0/22 maxlen: 24 40.223.244.0/24 maxlen: 24 40.223.246.0/23 maxlen: 24 40.223.248.0/23 maxlen: 24 40.223.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 07:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:29:21:72:38:17:55:0b:d4:a3:71:5c:85:ce:d2:af:05:3e:b4:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Jun 28 10:40:16 2025 GMT Not After : Jun 27 10:45:16 2026 GMT Subject: CN=057291ABC5030D58EF6DF5E95FBAA40D96192861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:00:fa:10:f1:dd:ea:66:a4:c6:4f:bf:4d:3e: 5e:f4:d9:8d:6c:f2:0d:18:f1:9d:d6:0a:6f:41:ba: 28:f5:68:c8:08:16:04:bf:0b:d6:60:98:3a:ad:33: 24:fc:06:e5:a2:8a:3e:33:a9:34:ae:7e:dd:cf:4f: c5:f8:df:bc:2f:d9:3b:c4:e8:34:a7:0b:fc:6c:89: 05:bc:50:d2:77:e4:58:17:0d:a5:d0:10:2e:2a:b8: 22:98:ce:0f:91:64:3e:69:61:62:a8:9c:42:29:33: 0c:13:04:52:8a:f3:a4:28:97:7b:9a:4e:6d:7b:8c: 7a:0f:2a:c1:fe:7a:2b:21:2d:4c:59:f9:b5:e7:3d: 6b:c6:99:36:89:65:dc:4b:68:a5:bf:2a:ad:82:13: a7:1c:02:70:1d:db:af:2d:85:82:0b:81:42:b4:8a: 7b:80:39:8b:9a:46:81:31:21:cf:7d:5b:8d:05:1a: 48:35:72:9c:ec:f9:f9:f5:42:f7:c4:3c:a0:f4:ab: c7:97:5e:67:8d:09:22:a7:ff:4c:28:a3:0d:9e:d3: 65:32:9d:b3:62:d7:f5:e0:18:49:39:1b:fd:27:ff: 8f:f1:eb:19:d3:c1:ce:c2:47:db:fb:49:a9:76:5c: f1:61:3d:a3:41:eb:f7:39:4b:0b:fd:df:0e:79:94: 51:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:72:91:AB:C5:03:0D:58:EF:6D:F5:E9:5F:BA:A4:0D:96:19:28:61 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.17.0/24 40.27.19.0-40.27.39.255 40.27.48.0-40.27.75.255 40.27.80.0-40.27.108.255 40.27.110.0-40.27.139.255 40.27.144.0-40.27.167.255 40.27.169.0-40.27.191.255 40.27.196.0-40.27.242.255 40.183.94.0/24 40.183.96.0/19 40.183.136.0-40.183.149.255 40.183.151.0-40.183.152.255 40.183.154.0-40.183.157.255 40.183.192.0-40.183.197.255 40.183.199.0-40.183.215.255 40.183.224.0/23 40.183.228.0-40.183.247.255 40.183.252.0/24 40.223.6.0-40.223.8.255 40.223.10.0/23 40.223.24.0-40.223.43.255 40.223.48.0-40.223.79.255 40.223.88.0-40.223.121.255 40.223.123.0-40.223.156.255 40.223.158.0-40.223.183.255 40.223.192.0-40.223.244.255 40.223.246.0-40.223.250.255 Signature Algorithm: sha256WithRSAEncryption 27:d3:7c:a7:c6:0b:f3:31:aa:ff:e6:fb:68:29:5c:46:b9:7d: 97:89:f7:07:a4:c5:37:e9:d2:bf:33:be:1d:72:08:fe:d6:36: b0:32:6d:0c:06:c5:b8:2d:d5:d6:7c:40:20:f8:47:10:33:ae: 8b:97:30:91:44:ff:08:76:34:4f:c4:ea:03:ba:e3:e4:c9:98: bf:68:52:33:8e:ca:b8:f8:25:50:16:39:f3:77:c9:78:b6:38: 54:f6:f9:58:12:86:0a:e0:b1:50:c2:99:7f:93:b5:b0:f5:bf: cc:31:75:e0:95:16:bd:c4:eb:f5:43:7d:66:5a:a1:aa:77:98: 13:cc:5a:4d:34:cc:95:16:a5:ca:d9:01:84:93:36:85:87:04: 40:f0:3b:5c:25:8b:f1:24:1c:67:f7:bb:2b:91:05:d3:3c:f8: 0c:74:39:12:49:89:5d:b1:6e:de:7f:f3:bf:bf:dc:fb:11:81: 1d:f9:05:43:cc:f9:73:ea:b4:a5:2d:af:02:cc:27:45:45:bf: fa:f7:ef:c8:c5:97:32:18:99:3d:39:3c:5d:52:46:11:ed:d9: 9c:95:1a:4f:46:54:aa:06:55:cf:4a:0a:26:a9:fc:6a:db:0b: 6a:33:1c:3d:ba:d1:2e:dd:3b:dd:b2:59:57:08:98:3f:11:37: dd:0d:34:3b -----BEGIN CERTIFICATE----- MIIGyjCCBbKgAwIBAgIUXSkhcjgXVQvUo3Fchc7SrwU+tJ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwNjI4MTA0MDE2WhcNMjYwNjI3MTA0NTE2 WjAzMTEwLwYDVQQDEygwNTcyOTFBQkM1MDMwRDU4RUY2REY1RTk1RkJBQTQwRDk2 MTkyODYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QD6EPHd6mak xk+/TT5e9NmNbPINGPGd1gpvQboo9WjICBYEvwvWYJg6rTMk/Ablooo+M6k0rn7d z0/F+N+8L9k7xOg0pwv8bIkFvFDSd+RYFw2l0BAuKrgimM4PkWQ+aWFiqJxCKTMM EwRSivOkKJd7mk5te4x6DyrB/norIS1MWfm15z1rxpk2iWXcS2ilvyqtghOnHAJw HduvLYWCC4FCtIp7gDmLmkaBMSHPfVuNBRpINXKc7Pn59UL3xDyg9KvHl15njQki p/9MKKMNntNlMp2zYtf14BhJORv9J/+P8esZ08HOwkfb+0mpdlzxYT2jQev3OUsL /d8OeZRRYwIDAQABo4IDyjCCA8YwHQYDVR0OBBYEFAVykavFAw1Y72316V+6pA2W GShhMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCCAWsG CCsGAQUFBwEHAQH/BIIBWjCCAVYwggFSBAIAATCCAUoDBAAoGxEwDAMEACgbEwME AygbIDAMAwQEKBswAwQCKBtIMAwDBAQoG1ADBAAoG2wwDAMEASgbbgMEAigbiDAM AwQEKBuQAwQDKBugMAwDBAAoG6kDBAYoG4AwDAMEAigbxAMEACgb8gMEACi3XgME BSi3YDAMAwQDKLeIAwQBKLeUMAwDBAAot5cDBAAot5gwDAMEASi3mgMEASi3nDAM AwQGKLfAAwQBKLfEMAwDBAAot8cDBAMot9ADBAEot+AwDAMEAii35AMEAyi38AME ACi3/DAMAwQBKN8GAwQAKN8IAwQBKN8KMAwDBAMo3xgDBAIo3ygwDAMEBCjfMAME BCjfQDAMAwQDKN9YAwQBKN94MAwDBAAo33sDBAAo35wwDAMEASjfngMEAyjfsDAM AwQGKN/AAwQAKN/0MAwDBAEo3/YDBAAo3/owDQYJKoZIhvcNAQELBQADggEBACfT fKfGC/Mxqv/m+2gpXEa5fZeJ9wekxTfp0r8zvh1yCP7WNrAybQwGxbgt1dZ8QCD4 RxAzrouXMJFE/wh2NE/E6gO64+TJmL9oUjOOyrj4JVAWOfN3yXi2OFT2+VgShgrg sVDCmX+TtbD1v8wxdeCVFr3E6/VDfWZaoap3mBPMWk00zJUWpcrZAYSTNoWHBEDw O1wli/EkHGf3uyuRBdM8+Ax0ORJJiV2xbt5/87+/3PsRgR35BUPM+XPqtKUtrwLM J0VFv/r378jFlzIYmT05PF1SRhHt2ZyVGk9GVKoGVc9KCiap/GrbC2ozHD260S7d O92yWVcImD8RN90NNDs= -----END CERTIFICATE-----Generated at Sun Jun 29 07:48:31 2025 by rpki-client