$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa File: AS834.roa (raw, json) Hash identifier: Kn8ooYQ2qRrRn6hvXFyp2cTZ9dojw8oTFSAgIEYUiD8= Subject key identifier: 09:7B:2B:0C:43:3D:3B:FF:13:20:8D:53:1F:C7:7A:F6:23:1C:C3:41 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 67FAED6307F946D666351B7F39C5461B15E6F4A0 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa Signing time: Sun 19 Oct 2025 12:54:50 +0000 ROA not before: Sun 19 Oct 2025 12:49:50 +0000 ROA not after: Sun 18 Oct 2026 12:54:50 +0000 asID: 834 IP address blocks: 64.50.182.0/24 maxlen: 24 190.92.165.0/24 maxlen: 24 190.92.166.0/23 maxlen: 24 198.23.186.0/24 maxlen: 24 209.200.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 15:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:fa:ed:63:07:f9:46:d6:66:35:1b:7f:39:c5:46:1b:15:e6:f4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Oct 19 12:49:50 2025 GMT Not After : Oct 18 12:54:50 2026 GMT Subject: CN=097B2B0C433D3BFF13208D531FC77AF6231CC341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f2:59:ff:e7:45:2d:ed:b4:6b:c9:8c:c0:98: 32:1c:a0:1c:66:c4:de:f4:0e:7e:80:79:68:31:d4: 37:19:eb:34:ba:c0:50:dc:73:e2:82:70:d1:b6:dd: 3f:2e:6c:be:2e:6d:21:ab:7f:e1:aa:05:b8:96:f1: 1f:cc:4a:f4:3b:6d:51:af:5f:69:41:79:ad:af:53: f5:ff:15:52:27:3b:81:17:aa:b5:67:6a:44:d2:76: ff:20:d6:3a:d4:aa:01:ff:3d:f9:89:61:3f:22:33: a9:ce:69:ac:55:02:cf:f2:38:e9:f6:7f:d2:b9:21: 18:15:c3:b2:56:22:0d:4d:23:b8:0f:c8:59:9b:10: f7:3e:f6:7c:16:14:b0:ad:11:53:8e:af:f8:d3:12: 3e:6c:8c:9f:b2:72:df:a3:93:c1:e2:16:f7:73:e6: 53:f1:94:e7:7e:3a:96:bf:ea:39:e3:2a:0a:4b:9d: 8d:09:82:d5:ea:b4:25:3c:05:05:27:1a:82:16:a1: f5:5e:ba:3f:5f:35:71:4f:fa:cd:bd:b5:91:65:d0: b1:f5:06:8a:c6:d6:34:fb:1a:a4:31:63:f0:94:d3: c5:54:5d:96:2d:63:49:f6:32:ae:7e:39:f8:16:c3: 92:43:09:b1:58:3c:06:dd:9d:2d:92:b2:d6:70:e7: 36:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7B:2B:0C:43:3D:3B:FF:13:20:8D:53:1F:C7:7A:F6:23:1C:C3:41 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.50.182.0/24 190.92.165.0-190.92.167.255 198.23.186.0/24 209.200.240.0/24 Signature Algorithm: sha256WithRSAEncryption 86:f2:37:53:ec:b2:dc:9c:c3:8a:0f:a9:7f:2a:a3:45:bb:89: c2:fb:4a:b7:d1:01:b6:b7:63:9f:5f:08:3e:ef:46:fd:17:67: 61:ae:ce:dd:1d:95:b0:c2:54:d3:6b:bd:39:0a:a8:46:58:3f: b3:eb:4f:ed:e9:71:64:91:87:72:13:f0:75:cf:c8:dc:e2:bf: b4:07:1e:cb:8a:6d:14:56:09:9e:e6:67:36:f1:b7:97:1f:c6: 89:ba:4a:8b:07:d9:ec:6e:2d:7b:c0:8a:a5:eb:7d:b9:db:f9: a6:be:41:c8:69:da:6c:12:92:a3:da:28:55:8e:83:fb:6a:f6: b4:60:a6:f6:22:a3:cd:c5:21:d2:d8:b4:f0:d3:33:b7:86:ea: 3e:1e:c0:c8:aa:5a:00:9b:7c:d9:c0:52:99:73:d1:3e:fb:0e: 0c:8f:ce:a2:09:89:3e:ff:b8:05:ab:08:14:dd:23:61:cc:24: 80:6f:6f:1c:71:d2:35:9e:30:08:6d:6d:01:7f:53:55:ac:78: a7:05:9b:32:4e:ad:a6:20:45:34:82:2e:5f:16:de:5f:1b:79: db:3e:c5:7e:b4:12:14:44:ad:cb:ec:40:f3:30:7f:bb:bc:d3: c4:5b:fa:da:47:35:f7:da:8f:50:23:df:ee:c7:e7:2a:4e:31: 6d:ac:ac:b3 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUZ/rtYwf5RtZmNRt/OcVGGxXm9KAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUxMDE5MTI0OTUwWhcNMjYxMDE4MTI1NDUw WjAzMTEwLwYDVQQDEygwOTdCMkIwQzQzM0QzQkZGMTMyMDhENTMxRkM3N0FGNjIz MUNDMzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPJZ/+dFLe20 a8mMwJgyHKAcZsTe9A5+gHloMdQ3Ges0usBQ3HPignDRtt0/Lmy+Lm0hq3/hqgW4 lvEfzEr0O21Rr19pQXmtr1P1/xVSJzuBF6q1Z2pE0nb/INY61KoB/z35iWE/IjOp zmmsVQLP8jjp9n/SuSEYFcOyViINTSO4D8hZmxD3PvZ8FhSwrRFTjq/40xI+bIyf snLfo5PB4hb3c+ZT8ZTnfjqWv+o54yoKS52NCYLV6rQlPAUFJxqCFqH1Xro/XzVx T/rNvbWRZdCx9QaKxtY0+xqkMWPwlNPFVF2WLWNJ9jKufjn4FsOSQwmxWDwG3Z0t krLWcOc2wQIDAQABo4ICljCCApIwHQYDVR0OBBYEFAl7KwxDPTv/EyCNUx/HevYj HMNBMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5Bggr BgEFBQcBBwEB/wQqMCgwJgQCAAEwIAMEAEAytjAMAwQAvlylAwQDvlygAwQAxhe6 AwQA0cjwMA0GCSqGSIb3DQEBCwUAA4IBAQCG8jdT7LLcnMOKD6l/KqNFu4nC+0q3 0QG2t2OfXwg+70b9F2dhrs7dHZWwwlTTa705CqhGWD+z60/t6XFkkYdyE/B1z8jc 4r+0Bx7Lim0UVgme5mc28beXH8aJukqLB9nsbi17wIql63252/mmvkHIadpsEpKj 2ihVjoP7ava0YKb2IqPNxSHS2LTw0zO3huo+HsDIqloAm3zZwFKZc9E++w4Mj86i CYk+/7gFqwgU3SNhzCSAb28ccdI1njAIbW0Bf1NVrHinBZsyTq2mIEU0gi5fFt5f G3nbPsV+tBIURK3L7EDzMH+7vNPEW/raRzX32o9QI9/ux+cqTjFtrKyz -----END CERTIFICATE-----Generated at Sun Oct 19 14:43:33 2025 by rpki-client