$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa File: AS834.roa (raw, json) Hash identifier: 4J93+S+5Ef/DLKuxeXbVuEdndNVKN+D7gvPxFJskQTM= Subject key identifier: 61:EA:29:EE:F7:0C:71:7E:BE:50:4F:6D:B1:06:0E:66:4B:FD:00:C3 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 5D415A3723136F7C4B9D03E1BEC103215BD3848C Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa Signing time: Wed 25 Mar 2026 18:00:06 +0000 ROA not before: Wed 25 Mar 2026 17:55:06 +0000 ROA not after: Wed 24 Mar 2027 18:00:06 +0000 asID: 834 IP address blocks: 157.254.15.0/24 maxlen: 24 157.254.49.0/24 maxlen: 24 157.254.144.0/21 maxlen: 24 157.254.155.0/24 maxlen: 24 157.254.184.0/24 maxlen: 24 157.254.187.0/24 maxlen: 24 157.254.210.0/24 maxlen: 24 157.254.214.0/24 maxlen: 24 157.254.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 07:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:41:5a:37:23:13:6f:7c:4b:9d:03:e1:be:c1:03:21:5b:d3:84:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Mar 25 17:55:06 2026 GMT Not After : Mar 24 18:00:06 2027 GMT Subject: CN=61EA29EEF70C717EBE504F6DB1060E664BFD00C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a1:fb:19:45:34:fd:38:79:73:5a:39:6a:3f: 60:c6:44:e0:a7:4f:e3:7c:5e:5f:ef:a2:02:bd:1c: 52:de:80:3d:f6:d7:d6:11:76:c1:54:50:1a:0e:b8: 43:f4:80:da:94:81:50:e6:cf:29:c6:37:4c:40:93: ab:d8:0e:c9:d0:4c:c0:2b:1a:d6:80:99:e0:d7:b0: c6:ff:7e:39:0c:e5:bd:d4:6d:f2:1f:39:71:6b:64: 81:55:15:d2:b1:a6:16:cc:3f:3d:9c:05:8f:59:93: ab:85:98:8b:95:55:dd:57:f9:d1:83:91:d0:e1:d9: c0:d2:2e:ce:02:55:ad:d5:cf:27:ae:9b:63:d3:14: d0:ab:c0:f6:d3:3a:76:97:be:fe:9b:13:d5:65:72: b9:87:3d:4d:d3:4d:96:59:ed:52:6c:ea:59:98:dd: 33:5b:65:cb:45:f4:69:66:64:70:60:bf:37:0a:17: a3:38:dd:0d:8e:49:64:7f:6b:eb:35:5f:d6:9e:43: 01:a2:5c:09:9e:aa:e1:62:fc:31:74:55:8f:6c:c3: 18:2e:ff:0e:ec:e0:9f:e4:ca:cd:d3:fa:77:69:c4: c6:98:0e:2e:de:aa:f6:e0:a6:1a:c7:e5:10:84:79: de:6e:6d:4f:51:5d:f0:a2:ff:69:a4:45:fa:45:f7: 3c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:EA:29:EE:F7:0C:71:7E:BE:50:4F:6D:B1:06:0E:66:4B:FD:00:C3 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.15.0/24 157.254.49.0/24 157.254.144.0/21 157.254.155.0/24 157.254.184.0/24 157.254.187.0/24 157.254.210.0/24 157.254.214.0/24 157.254.218.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:67:46:d5:82:7b:37:dd:aa:89:5e:26:ab:6a:4e:dc:15:c8: fb:ac:eb:6c:ee:6a:d4:21:31:aa:d5:98:e1:ee:2f:1c:24:fb: ab:82:b7:db:de:7b:17:79:2b:4a:1c:ae:a0:ab:f2:08:b7:b9: af:e9:b4:c6:d8:ab:cc:12:76:46:72:07:38:0c:b6:6b:61:e9: df:43:ef:aa:22:2a:46:8c:c0:04:e7:95:16:c8:11:a3:e2:c2: 02:cf:35:7c:40:99:38:a8:57:dd:3d:56:c4:99:27:ab:5e:53: 56:4b:24:47:9a:38:04:59:7c:b7:a7:50:cf:66:99:91:f2:0a: 3f:bd:9a:93:51:91:f8:d8:da:d7:c2:6a:b6:23:dd:20:74:cd: 46:29:1a:b5:c4:93:ae:e7:86:47:b1:ea:c3:63:af:7e:53:e2: ce:f5:e2:46:b3:5b:12:d8:75:4f:33:5e:cd:8c:6e:e8:9c:0b: e4:e2:36:6d:2b:6c:a9:a8:6e:9a:cc:b9:92:a6:65:df:71:76: 21:e6:56:a3:15:95:cc:8f:f1:0c:33:64:db:ea:e0:5a:28:e6: c9:ab:91:8b:a6:b5:3d:0e:94:cf:61:ac:7f:20:b3:98:cd:f9: da:7a:14:32:b9:88:83:ba:c8:24:ac:39:3b:b6:6d:d2:ec:fc: 64:84:3b:d2 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgIUXUFaNyMTb3xLnQPhvsEDIVvThIwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwMzI1MTc1NTA2WhcNMjcwMzI0MTgwMDA2 WjAzMTEwLwYDVQQDEyg2MUVBMjlFRUY3MEM3MTdFQkU1MDRGNkRCMTA2MEU2NjRC RkQwMEMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKH7GUU0/Th5 c1o5aj9gxkTgp0/jfF5f76ICvRxS3oA99tfWEXbBVFAaDrhD9IDalIFQ5s8pxjdM QJOr2A7J0EzAKxrWgJng17DG/345DOW91G3yHzlxa2SBVRXSsaYWzD89nAWPWZOr hZiLlVXdV/nRg5HQ4dnA0i7OAlWt1c8nrptj0xTQq8D20zp2l77+mxPVZXK5hz1N 002WWe1SbOpZmN0zW2XLRfRpZmRwYL83ChejON0Njklkf2vrNV/WnkMBolwJnqrh YvwxdFWPbMMYLv8O7OCf5MrN0/p3acTGmA4u3qr24KYax+UQhHnebm1PUV3wov9p pEX6Rfc8hQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFGHqKe73DHF+vlBPbbEGDmZL /QDDMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBPBggr BgEFBQcBBwEB/wRAMD4wPAQCAAEwNgMEAJ3+DwMEAJ3+MQMEA53+kAMEAJ3+mwME AJ3+uAMEAJ3+uwMEAJ3+0gMEAJ3+1gMEAJ3+2jANBgkqhkiG9w0BAQsFAAOCAQEA mmdG1YJ7N92qiV4mq2pO3BXI+6zrbO5q1CExqtWY4e4vHCT7q4K32957F3krShyu oKvyCLe5r+m0xtirzBJ2RnIHOAy2a2Hp30PvqiIqRozABOeVFsgRo+LCAs81fECZ OKhX3T1WxJknq15TVkskR5o4BFl8t6dQz2aZkfIKP72ak1GR+Nja18JqtiPdIHTN RikatcSTrueGR7Hqw2OvflPizvXiRrNbEth1TzNezYxu6JwL5OI2bStsqahumsy5 kqZl33F2IeZWoxWVzI/xDDNk2+rgWijmyauRi6a1PQ6Uz2GsfyCzmM352noUMrmI g7rIJKw5O7Zt0uz8ZIQ70g== -----END CERTIFICATE-----Generated at Thu Mar 26 08:01:45 2026 by rpki-client