$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa File: AS834.roa (raw, json) Hash identifier: H8fSXTTiVRoGgiyr6k5sMB9EF4imXHRk4/KMmZ/lFVg= Subject key identifier: C6:67:C2:87:FD:69:8C:22:FC:B5:D1:6E:35:F1:27:88:3D:8A:F9:C3 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 3355C0A80FAB3258966BF69FCE7F1A47B57528CA Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa Signing time: Sat 03 May 2025 00:02:07 +0000 ROA not before: Fri 02 May 2025 23:57:07 +0000 ROA not after: Sat 02 May 2026 00:02:07 +0000 asID: 834 IP address blocks: 157.254.34.0/23 maxlen: 24 157.254.128.0/23 maxlen: 24 157.254.144.0/21 maxlen: 24 157.254.166.0/24 maxlen: 24 157.254.188.0/24 maxlen: 24 157.254.191.0/24 maxlen: 24 157.254.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 18:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:55:c0:a8:0f:ab:32:58:96:6b:f6:9f:ce:7f:1a:47:b5:75:28:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: May 2 23:57:07 2025 GMT Not After : May 2 00:02:07 2026 GMT Subject: CN=C667C287FD698C22FCB5D16E35F127883D8AF9C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4b:e1:02:38:09:fc:43:9d:3c:42:93:20:6e: 68:6c:bf:42:b7:82:67:48:b1:dd:f4:7b:1e:af:8f: 4f:5e:01:29:e1:40:06:7c:a7:9d:ba:e9:4a:8d:d7: 13:46:51:5c:ec:4e:0e:36:65:42:cf:f3:92:bd:1a: a5:69:e2:af:c9:46:74:bc:23:e3:b4:ed:3b:6f:7b: af:2e:2d:54:f1:c1:3f:90:cf:a4:ac:91:ff:a9:e4: 8a:2e:42:fd:3f:47:ef:10:e9:a0:5b:46:e5:4e:6c: b8:26:05:88:7d:1a:3b:6f:bd:5b:42:de:95:36:4f: 20:11:d8:2e:33:af:c8:3c:09:7b:cd:9c:c5:29:3a: fd:e2:7c:fe:30:56:68:ce:3c:21:2a:af:7c:cd:c6: 5d:19:9e:0c:f9:33:76:b3:90:ec:25:47:30:9f:88: a2:ba:dd:be:3c:a6:38:cb:d7:b1:3b:52:33:50:a7: 79:fc:7d:a6:26:f1:f4:c2:ed:0d:e4:7f:af:87:a6: 41:7c:65:32:4e:84:f6:39:42:a3:93:f4:0f:cf:79: a3:29:d0:25:74:1b:c0:2a:f0:5c:e6:ab:65:b8:14: 16:d8:31:34:8d:d7:f8:3f:7f:08:0a:69:cc:58:a0: 5d:c2:6d:5d:21:cc:af:88:50:94:b5:67:34:b2:fe: 66:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:67:C2:87:FD:69:8C:22:FC:B5:D1:6E:35:F1:27:88:3D:8A:F9:C3 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.34.0/23 157.254.128.0/23 157.254.144.0/21 157.254.166.0/24 157.254.188.0/24 157.254.191.0/24 157.254.230.0/24 Signature Algorithm: sha256WithRSAEncryption b8:d8:d3:c5:ee:0d:6f:a0:bc:7b:75:12:9c:17:a5:4a:88:df: 96:c5:0d:79:10:53:eb:7a:29:29:0b:3d:94:d6:b8:a0:6c:75: f9:32:51:7c:1a:dd:54:bb:2f:ab:2f:f9:66:08:f5:1e:9b:5f: 16:7b:d8:5d:68:fc:21:8c:15:71:99:5c:fc:8b:fb:05:42:81: 1f:42:4b:46:9e:8c:de:37:dc:ae:4c:95:3d:1d:c4:e0:08:7d: 84:25:5f:b4:a9:58:43:d4:27:66:6b:14:52:0e:bd:dd:5e:db: eb:4c:dd:19:49:e7:67:dc:08:b0:20:6d:89:4b:0d:18:65:7b: 2d:36:80:99:11:f5:13:ec:ff:c0:3f:0d:6a:1e:f5:13:b9:63: 11:38:d0:cf:20:83:82:79:b8:b2:2a:9b:c7:44:46:cf:e4:e3: 56:38:5d:1c:db:bd:aa:4e:e5:4b:f7:7c:18:7c:9a:5d:0b:5e: 8f:90:61:9d:18:36:03:e0:a4:1a:ba:cd:f7:96:e5:e3:43:4c: 60:cc:fc:af:60:e7:06:05:d5:86:d8:d2:f9:5d:a7:3d:21:82: 13:da:8b:7d:07:77:37:ff:83:96:17:4a:49:9c:de:78:fc:85: 60:b2:61:43:02:41:7a:a3:17:30:1e:fb:68:82:9a:c8:2a:84: b9:c7:1b:25 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgIUM1XAqA+rMliWa/afzn8aR7V1KMowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwNTAyMjM1NzA3WhcNMjYwNTAyMDAwMjA3 WjAzMTEwLwYDVQQDEyhDNjY3QzI4N0ZENjk4QzIyRkNCNUQxNkUzNUYxMjc4ODNE OEFGOUMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEvhAjgJ/EOd PEKTIG5obL9Ct4JnSLHd9Hser49PXgEp4UAGfKeduulKjdcTRlFc7E4ONmVCz/OS vRqlaeKvyUZ0vCPjtO07b3uvLi1U8cE/kM+krJH/qeSKLkL9P0fvEOmgW0blTmy4 JgWIfRo7b71bQt6VNk8gEdguM6/IPAl7zZzFKTr94nz+MFZozjwhKq98zcZdGZ4M +TN2s5DsJUcwn4iiut2+PKY4y9exO1IzUKd5/H2mJvH0wu0N5H+vh6ZBfGUyToT2 OUKjk/QPz3mjKdAldBvAKvBc5qtluBQW2DE0jdf4P38ICmnMWKBdwm1dIcyviFCU tWc0sv5mbwIDAQABo4ICoDCCApwwHQYDVR0OBBYEFMZnwof9aYwi/LXRbjXxJ4g9 ivnDMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBDBggr BgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAZ3+IgMEAZ3+gAMEA53+kAMEAJ3+pgME AJ3+vAMEAJ3+vwMEAJ3+5jANBgkqhkiG9w0BAQsFAAOCAQEAuNjTxe4Nb6C8e3US nBelSojflsUNeRBT63opKQs9lNa4oGx1+TJRfBrdVLsvqy/5Zgj1HptfFnvYXWj8 IYwVcZlc/Iv7BUKBH0JLRp6M3jfcrkyVPR3E4Ah9hCVftKlYQ9QnZmsUUg693V7b 60zdGUnnZ9wIsCBtiUsNGGV7LTaAmRH1E+z/wD8Nah71E7ljETjQzyCDgnm4siqb x0RGz+TjVjhdHNu9qk7lS/d8GHyaXQtej5BhnRg2A+CkGrrN95bl40NMYMz8r2Dn BgXVhtjS+V2nPSGCE9qLfQd3N/+DlhdKSZzeePyFYLJhQwJBeqMXMB77aIKayCqE uccbJQ== -----END CERTIFICATE-----Generated at Tue May 6 04:43:19 2025 by rpki-client