$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa File: AS834.roa (raw, json) Hash identifier: HTKMdNRJ1xoAWjYm0wZ9RPEHCfr9qP1Pi2kY2+UT22k= Subject key identifier: 08:71:F1:E1:47:47:43:6D:9B:5D:AE:C3:96:54:50:AF:07:A6:92:5A Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 2586BF0EAC1BBEBF8563DD4F7E6086DF99575CCC Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa Signing time: Mon 20 Apr 2026 10:35:16 +0000 ROA not before: Mon 20 Apr 2026 10:30:16 +0000 ROA not after: Mon 19 Apr 2027 10:35:16 +0000 asID: 834 IP address blocks: 40.27.0.0/24 maxlen: 24 40.27.5.0/24 maxlen: 24 40.27.22.0/24 maxlen: 24 40.27.29.0/24 maxlen: 24 40.27.34.0/23 maxlen: 24 40.27.47.0/24 maxlen: 24 40.27.51.0/24 maxlen: 24 40.27.56.0/24 maxlen: 24 40.27.58.0/23 maxlen: 24 40.27.68.0/23 maxlen: 24 40.27.71.0/24 maxlen: 24 40.27.73.0/24 maxlen: 24 40.27.75.0/24 maxlen: 24 40.27.104.0/23 maxlen: 24 40.27.107.0/24 maxlen: 24 40.27.113.0/24 maxlen: 24 40.27.115.0/24 maxlen: 24 40.27.125.0/24 maxlen: 24 40.27.127.0/24 maxlen: 24 40.27.132.0/24 maxlen: 24 40.27.134.0/23 maxlen: 24 40.27.174.0/24 maxlen: 24 40.27.216.0/24 maxlen: 24 40.27.218.0/23 maxlen: 24 40.27.228.0/24 maxlen: 24 40.27.230.0/23 maxlen: 24 40.183.88.0/22 maxlen: 24 40.183.92.0/24 maxlen: 24 40.183.95.0/24 maxlen: 24 40.183.97.0/24 maxlen: 24 40.183.98.0/23 maxlen: 24 40.183.103.0/24 maxlen: 24 40.183.104.0/22 maxlen: 24 40.183.110.0/23 maxlen: 24 40.183.112.0/22 maxlen: 24 40.183.116.0/23 maxlen: 24 40.183.119.0/24 maxlen: 24 40.183.123.0/24 maxlen: 24 40.183.124.0/24 maxlen: 24 40.183.126.0/23 maxlen: 24 40.183.142.0/23 maxlen: 24 40.183.144.0/22 maxlen: 24 40.183.149.0/24 maxlen: 24 40.183.150.0/24 maxlen: 24 40.183.153.0/24 maxlen: 24 40.183.159.0/24 maxlen: 24 40.183.160.0/19 maxlen: 24 40.183.192.0/23 maxlen: 24 40.183.198.0/24 maxlen: 24 40.183.200.0/23 maxlen: 24 40.183.205.0/24 maxlen: 24 40.183.206.0/23 maxlen: 24 40.183.212.0/23 maxlen: 24 40.183.214.0/24 maxlen: 24 40.183.224.0/23 maxlen: 24 40.183.228.0/22 maxlen: 24 40.183.232.0/23 maxlen: 24 40.183.237.0/24 maxlen: 24 40.183.239.0/24 maxlen: 24 40.183.241.0/24 maxlen: 24 40.183.242.0/23 maxlen: 24 40.183.244.0/22 maxlen: 24 40.183.252.0/23 maxlen: 24 40.223.5.0/24 maxlen: 24 40.223.7.0/24 maxlen: 24 40.223.9.0/24 maxlen: 24 40.223.12.0/24 maxlen: 24 40.223.14.0/23 maxlen: 24 40.223.16.0/21 maxlen: 24 40.223.80.0/21 maxlen: 24 40.223.122.0/24 maxlen: 24 40.223.157.0/24 maxlen: 24 40.223.183.0/24 maxlen: 24 40.223.184.0/21 maxlen: 24 40.223.192.0/23 maxlen: 24 40.223.194.0/24 maxlen: 24 40.223.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 13:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:86:bf:0e:ac:1b:be:bf:85:63:dd:4f:7e:60:86:df:99:57:5c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Apr 20 10:30:16 2026 GMT Not After : Apr 19 10:35:16 2027 GMT Subject: CN=0871F1E14747436D9B5DAEC3965450AF07A6925A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:51:c1:a0:03:1b:5c:25:98:0c:8d:82:8e:f9: f5:26:53:e4:04:39:37:24:32:cf:b9:3c:e8:b0:5a: 93:25:ae:ac:ca:a6:80:02:1e:13:e2:5e:01:81:64: c7:c7:e2:6f:30:41:8f:e1:dd:05:ea:dd:5a:71:42: f6:a7:87:03:b6:be:ea:9e:73:b2:26:6e:80:cc:9c: 7c:56:38:86:61:8c:08:81:a0:ed:cf:cd:a5:51:40: 0f:84:c9:3e:1c:22:7b:df:9a:62:65:e9:af:c1:ea: 25:45:31:f0:9b:67:04:f8:8b:2d:1e:ee:4b:ea:4a: c7:7e:7e:88:0e:87:c0:76:c5:7c:2c:a1:e5:3c:e5: a6:e3:72:e2:66:0b:41:06:f2:a9:9d:9b:90:f7:55: fa:a0:2d:8d:33:1a:0f:42:ac:5a:d4:61:87:7a:e9: 04:8a:5d:ad:f5:0f:f6:59:6f:3c:37:07:da:0c:b5: 5c:cb:ed:69:46:14:03:56:21:1e:87:b7:80:a9:ea: 7c:f6:ac:3d:15:f8:0e:c1:f0:98:c5:62:c3:1b:70: 8e:36:ec:75:13:64:65:be:d7:92:78:37:26:de:21: ec:c7:5c:f2:5c:b5:ce:a6:2c:c6:e1:4c:05:0b:b7: b5:9e:86:f7:46:04:3a:5f:15:85:5e:1d:7a:31:83: 1f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:71:F1:E1:47:47:43:6D:9B:5D:AE:C3:96:54:50:AF:07:A6:92:5A X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.0.0/24 40.27.5.0/24 40.27.22.0/24 40.27.29.0/24 40.27.34.0/23 40.27.47.0/24 40.27.51.0/24 40.27.56.0/24 40.27.58.0/23 40.27.68.0/23 40.27.71.0/24 40.27.73.0/24 40.27.75.0/24 40.27.104.0/23 40.27.107.0/24 40.27.113.0/24 40.27.115.0/24 40.27.125.0/24 40.27.127.0/24 40.27.132.0/24 40.27.134.0/23 40.27.174.0/24 40.27.216.0/24 40.27.218.0/23 40.27.228.0/24 40.27.230.0/23 40.183.88.0-40.183.92.255 40.183.95.0/24 40.183.97.0-40.183.99.255 40.183.103.0-40.183.107.255 40.183.110.0-40.183.117.255 40.183.119.0/24 40.183.123.0-40.183.124.255 40.183.126.0/23 40.183.142.0-40.183.147.255 40.183.149.0-40.183.150.255 40.183.153.0/24 40.183.159.0-40.183.193.255 40.183.198.0/24 40.183.200.0/23 40.183.205.0-40.183.207.255 40.183.212.0-40.183.214.255 40.183.224.0/23 40.183.228.0-40.183.233.255 40.183.237.0/24 40.183.239.0/24 40.183.241.0-40.183.247.255 40.183.252.0/23 40.223.5.0/24 40.223.7.0/24 40.223.9.0/24 40.223.12.0/24 40.223.14.0-40.223.23.255 40.223.80.0/21 40.223.122.0/24 40.223.157.0/24 40.223.183.0-40.223.194.255 40.223.240.0/20 Signature Algorithm: sha256WithRSAEncryption 89:1e:5e:1d:3f:04:69:36:08:66:45:21:9b:31:c0:5e:e5:e9: 88:59:54:67:53:28:8e:50:db:95:6f:a8:c0:1b:fe:e6:22:fd: 54:8a:5d:08:51:65:96:a4:1a:8f:96:34:b7:69:77:b9:93:1d: 9a:1f:cd:cc:3d:37:66:6e:6a:68:5e:99:00:16:1e:57:83:ea: 42:d8:ab:5e:91:cd:c2:c8:3d:0f:06:45:7b:a8:ae:e4:a0:e5: a9:0d:e0:21:99:c9:c1:ad:52:7e:1f:05:12:0f:5d:7c:60:ba: a3:16:53:26:b3:14:5a:a7:fe:29:36:e6:4f:34:99:f6:c6:5a: 95:62:c9:6e:80:0e:9a:dc:80:89:1c:2d:52:55:27:4f:2f:2a: bb:08:a6:19:54:46:9b:79:ee:86:fe:68:35:36:2f:97:93:a0: ba:44:de:82:66:cb:58:57:f3:02:28:18:8d:f0:d1:05:50:69: 24:7e:28:f2:ba:18:71:3c:1a:92:9c:77:e7:12:e9:62:21:4a: 01:4f:eb:bb:f3:84:41:9f:c8:92:2a:8e:3c:82:9b:38:4a:76: 6a:89:08:e3:2a:a6:af:23:ad:e4:80:6f:e7:c8:dd:00:c7:a0: 4e:41:6f:b3:e0:57:5b:be:30:ca:6a:70:fd:7f:de:e1:0b:59: a4:1a:ca:6f -----BEGIN CERTIFICATE----- MIIHTDCCBjSgAwIBAgIUJYa/Dqwbvr+FY91PfmCG35lXXMwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwNDIwMTAzMDE2WhcNMjcwNDE5MTAzNTE2 WjAzMTEwLwYDVQQDEygwODcxRjFFMTQ3NDc0MzZEOUI1REFFQzM5NjU0NTBBRjA3 QTY5MjVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVHBoAMbXCWY DI2Cjvn1JlPkBDk3JDLPuTzosFqTJa6syqaAAh4T4l4BgWTHx+JvMEGP4d0F6t1a cUL2p4cDtr7qnnOyJm6AzJx8VjiGYYwIgaDtz82lUUAPhMk+HCJ735piZemvweol RTHwm2cE+IstHu5L6krHfn6IDofAdsV8LKHlPOWm43LiZgtBBvKpnZuQ91X6oC2N MxoPQqxa1GGHeukEil2t9Q/2WW88NwfaDLVcy+1pRhQDViEeh7eAqep89qw9FfgO wfCYxWLDG3CONux1E2RlvteSeDcm3iHsx1zyXLXOpizG4UwFC7e1nob3RgQ6XxWF Xh16MYMfrQIDAQABo4IETDCCBEgwHQYDVR0OBBYEFAhx8eFHR0Ntm12uw5ZUUK8H ppJaMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCCAe0G CCsGAQUFBwEHAQH/BIIB3DCCAdgwggHUBAIAATCCAcwDBAAoGwADBAAoGwUDBAAo GxYDBAAoGx0DBAEoGyIDBAAoGy8DBAAoGzMDBAAoGzgDBAEoGzoDBAEoG0QDBAAo G0cDBAAoG0kDBAAoG0sDBAEoG2gDBAAoG2sDBAAoG3EDBAAoG3MDBAAoG30DBAAo G38DBAAoG4QDBAEoG4YDBAAoG64DBAAoG9gDBAEoG9oDBAAoG+QDBAEoG+YwDAME Ayi3WAMEACi3XAMEACi3XzAMAwQAKLdhAwQCKLdgMAwDBAAot2cDBAIot2gwDAME ASi3bgMEASi3dAMEACi3dzAMAwQAKLd7AwQAKLd8AwQBKLd+MAwDBAEot44DBAIo t5AwDAMEACi3lQMEACi3lgMEACi3mTAMAwQAKLefAwQBKLfAAwQAKLfGAwQBKLfI MAwDBAAot80DBAQot8AwDAMEAii31AMEACi31gMEASi34DAMAwQCKLfkAwQBKLfo AwQAKLftAwQAKLfvMAwDBAAot/EDBAMot/ADBAEot/wDBAAo3wUDBAAo3wcDBAAo 3wkDBAAo3wwwDAMEASjfDgMEAyjfEAMEAyjfUAMEACjfegMEACjfnTAMAwQAKN+3 AwQAKN/CAwQEKN/wMA0GCSqGSIb3DQEBCwUAA4IBAQCJHl4dPwRpNghmRSGbMcBe 5emIWVRnUyiOUNuVb6jAG/7mIv1Uil0IUWWWpBqPljS3aXe5kx2aH83MPTdmbmpo XpkAFh5Xg+pC2Ktekc3CyD0PBkV7qK7koOWpDeAhmcnBrVJ+HwUSD118YLqjFlMm sxRap/4pNuZPNJn2xlqVYslugA6a3ICJHC1SVSdPLyq7CKYZVEabee6G/mg1Ni+X k6C6RN6CZstYV/MCKBiN8NEFUGkkfijyuhhxPBqSnHfnEuliIUoBT+u784RBn8iS Ko48gps4SnZqiQjjKqavI63kgG/nyN0Ax6BOQW+z4FdbvjDKanD9f97hC1mkGspv -----END CERTIFICATE-----Generated at Mon Apr 20 15:28:41 2026 by rpki-client