$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa File: AS834.roa (raw, json) Hash identifier: 6nFDcyiEvt/K0p6xf9yeQRfc/Qx/gNafq3KqKcyBf7o= Subject key identifier: 1C:4C:CA:A9:C7:B1:E5:32:C6:62:72:CF:98:0D:12:81:64:53:EB:57 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 0DC6D5332C390D483D39ED27A61E702AE6736629 Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa Signing time: Wed 12 Feb 2025 00:02:38 +0000 ROA not before: Tue 11 Feb 2025 23:57:38 +0000 ROA not after: Wed 11 Feb 2026 00:02:38 +0000 asID: 834 IP address blocks: 140.99.43.0/24 maxlen: 24 140.99.45.0/24 maxlen: 24 140.99.184.0/23 maxlen: 24 140.99.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 04:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:c6:d5:33:2c:39:0d:48:3d:39:ed:27:a6:1e:70:2a:e6:73:66:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Feb 11 23:57:38 2025 GMT Not After : Feb 11 00:02:38 2026 GMT Subject: CN=1C4CCAA9C7B1E532C66272CF980D12816453EB57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:7c:e4:62:df:ba:eb:03:cb:7a:62:5d:f5:ac: 36:8e:95:0c:86:d7:60:c7:6f:98:11:80:63:b2:06: 4e:f9:0a:77:0a:d7:27:4e:9a:b0:12:68:12:41:00: bd:9b:af:f6:ef:6d:c2:b7:5b:10:f8:01:5d:04:28: a4:7a:9a:1f:63:2d:b2:bb:74:c4:21:69:33:2a:c4: 0d:4e:5f:44:9f:1b:9f:97:dd:cf:d8:69:e3:be:ac: 56:d4:1c:93:e3:d3:d4:18:0d:3e:c5:b3:59:dc:79: 15:de:da:60:b5:1d:0d:1d:39:0f:ec:aa:2f:39:a3: 10:56:83:03:62:71:5f:ec:98:bf:94:07:fb:f8:2b: 64:59:6d:43:13:33:21:d6:b5:57:64:4e:fd:2e:d3: 2a:f1:db:69:08:e0:65:a4:e2:5c:40:9c:22:00:f8: 43:aa:24:f5:52:05:0f:af:96:78:86:7f:dd:9c:ab: 7a:59:e7:d7:e3:dd:8a:62:a0:55:e3:bb:db:23:2d: 7d:f4:60:99:d1:ee:27:fd:09:cf:3b:07:a6:90:3a: 03:c1:43:e8:a9:ba:07:ca:d0:e3:e1:ff:6d:9e:45: 86:85:56:df:b5:88:28:e7:fd:5b:4c:c4:85:ad:5c: a2:e0:c4:11:10:af:25:aa:9c:43:94:76:0c:1a:45: 8a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4C:CA:A9:C7:B1:E5:32:C6:62:72:CF:98:0D:12:81:64:53:EB:57 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.43.0/24 140.99.45.0/24 140.99.184.0/23 140.99.209.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:30:f8:6a:9d:b5:d4:cd:3d:af:9a:45:1f:37:01:c1:22:32: 18:73:d8:73:b4:e1:97:36:a1:5c:9b:ca:65:80:db:f4:2b:21: ef:c5:2a:5e:8e:49:5e:1f:8d:67:a9:68:b6:56:e4:9d:92:f5: ba:da:24:2f:9b:f8:97:3b:db:84:9d:23:a4:e6:a8:d0:7a:f3: 12:af:73:00:20:a1:31:4c:ec:45:d5:e2:c0:b4:ee:27:75:76: bc:a1:1c:d6:9e:8a:d5:93:cb:81:20:3b:3e:bb:dd:6b:f9:2e: fc:b9:12:ca:70:17:d6:d8:38:44:3f:8b:c6:fd:d1:ce:b5:b8: 9c:a0:be:1f:e6:a9:37:54:17:07:d1:04:39:3a:20:df:1a:36: 3f:7c:19:6a:2e:0f:b0:e4:4f:8e:21:7e:34:77:ef:48:09:69: 90:35:74:fd:ec:6e:44:bf:69:5e:50:9f:17:e1:45:26:d1:10: 6e:e4:96:8d:8f:d0:b3:68:29:28:d3:82:4b:04:57:dd:2b:a5: 3e:2e:6f:69:c7:83:53:1f:af:69:64:8a:a6:b0:b1:a6:dd:a9: 81:e7:c7:77:d3:17:e4:ca:29:85:d7:e5:84:f8:94:36:48:e0: 91:80:41:32:d9:d2:ab:0b:65:46:04:0a:00:9b:c2:a2:c6:0f: 13:9e:35:e6 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgIUDcbVMyw5DUg9Oe0nph5wKuZzZikwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUwMjExMjM1NzM4WhcNMjYwMjExMDAwMjM4 WjAzMTEwLwYDVQQDEygxQzRDQ0FBOUM3QjFFNTMyQzY2MjcyQ0Y5ODBEMTI4MTY0 NTNFQjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73zkYt+66wPL emJd9aw2jpUMhtdgx2+YEYBjsgZO+Qp3CtcnTpqwEmgSQQC9m6/2723Ct1sQ+AFd BCikepofYy2yu3TEIWkzKsQNTl9Enxufl93P2GnjvqxW1ByT49PUGA0+xbNZ3HkV 3tpgtR0NHTkP7KovOaMQVoMDYnFf7Ji/lAf7+CtkWW1DEzMh1rVXZE79LtMq8dtp COBlpOJcQJwiAPhDqiT1UgUPr5Z4hn/dnKt6WefX492KYqBV47vbIy199GCZ0e4n /QnPOwemkDoDwUPoqboHytDj4f9tnkWGhVbftYgo5/1bTMSFrVyi4MQREK8lqpxD lHYMGkWKWwIDAQABo4ICjjCCAoowHQYDVR0OBBYEFBxMyqnHseUyxmJyz5gNEoFk U+tXMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAxBggr BgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAIxjKwMEAIxjLQMEAYxjuAMEAIxj0TAN BgkqhkiG9w0BAQsFAAOCAQEAfzD4ap211M09r5pFHzcBwSIyGHPYc7ThlzahXJvK ZYDb9Csh78UqXo5JXh+NZ6lotlbknZL1utokL5v4lzvbhJ0jpOao0HrzEq9zACCh MUzsRdXiwLTuJ3V2vKEc1p6K1ZPLgSA7Prvda/ku/LkSynAX1tg4RD+Lxv3RzrW4 nKC+H+apN1QXB9EEOTog3xo2P3wZai4PsORPjiF+NHfvSAlpkDV0/exuRL9pXlCf F+FFJtEQbuSWjY/Qs2gpKNOCSwRX3SulPi5vaceDUx+vaWSKprCxpt2pgefHd9MX 5MophdflhPiUNkjgkYBBMtnSqwtlRgQKAJvCosYPE5415g== -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:55 2025 by rpki-client