$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa File: AS834.roa (raw, json) Hash identifier: 3EBnNOI/ElK7C3yEKjEjvkj6Bw2tn5EbE3/aAT49vjY= Subject key identifier: 59:80:6B:4F:33:12:91:50:F1:5A:2C:36:88:12:0E:9D:D6:0A:86:40 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 2AF06C99D229093BF7E7F72BEED6981AB3C086A8 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa Signing time: Wed 04 Jun 2025 11:47:05 +0000 ROA not before: Wed 04 Jun 2025 11:42:05 +0000 ROA not after: Wed 03 Jun 2026 11:47:05 +0000 asID: 834 IP address blocks: 64.50.160.0/24 maxlen: 24 64.50.166.0/24 maxlen: 24 64.50.184.0/23 maxlen: 24 67.210.97.0/24 maxlen: 24 67.210.101.0/24 maxlen: 24 67.210.103.0/24 maxlen: 24 74.50.7.0/24 maxlen: 24 190.92.165.0/24 maxlen: 24 190.92.166.0/23 maxlen: 24 192.228.112.0/24 maxlen: 24 192.228.123.0/24 maxlen: 24 198.23.186.0/24 maxlen: 24 209.200.232.0/24 maxlen: 24 209.200.236.0/24 maxlen: 24 209.200.238.0/24 maxlen: 24 216.97.226.0/24 maxlen: 24 216.97.235.0/24 maxlen: 24 216.227.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 07:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f0:6c:99:d2:29:09:3b:f7:e7:f7:2b:ee:d6:98:1a:b3:c0:86:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jun 4 11:42:05 2025 GMT Not After : Jun 3 11:47:05 2026 GMT Subject: CN=59806B4F33129150F15A2C3688120E9DD60A8640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2f:2a:02:19:7c:74:99:2a:71:4a:17:87:26: a3:84:06:08:ea:d4:af:b2:2d:d8:3e:23:c0:5e:3e: b1:04:25:37:e3:8e:b8:cf:2e:af:ba:f9:04:27:7e: 91:0c:b1:6e:46:d9:6b:ef:de:b4:d7:88:7f:d1:fa: 7d:02:b5:8c:9f:b2:c7:18:7c:27:98:7c:68:5e:72: f8:04:13:d6:3d:e4:88:26:c3:fa:59:c9:a2:16:60: 06:70:98:6f:ba:0e:75:04:1f:9d:8a:99:cb:bc:8d: e7:8f:2d:8d:35:b0:d2:5a:39:ce:b7:48:ab:0d:9c: 5c:12:46:ee:c3:57:7f:aa:94:ac:34:18:a6:7c:d9: 40:e3:0e:7a:e5:62:bc:1b:84:b2:62:b5:f0:f4:ff: 0e:dd:8c:f3:59:53:f6:88:b6:5e:58:28:4f:25:15: 5d:af:df:ba:d0:9a:e2:e7:e6:83:c1:fc:87:30:f6: 5d:7b:bf:3a:ff:c6:6d:75:d3:53:cb:36:da:ab:de: 2e:71:1b:23:8d:52:16:31:e7:30:fe:ab:2e:16:eb: f2:d1:e8:bd:e5:85:f3:75:b4:9f:54:65:c3:34:b6: a4:79:d7:76:b3:a7:4e:d3:42:4f:b5:6b:f2:2f:2a: 27:63:8e:1b:e1:0d:a5:19:3c:4f:a2:89:60:32:5d: 1c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:80:6B:4F:33:12:91:50:F1:5A:2C:36:88:12:0E:9D:D6:0A:86:40 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.50.160.0/24 64.50.166.0/24 64.50.184.0/23 67.210.97.0/24 67.210.101.0/24 67.210.103.0/24 74.50.7.0/24 190.92.165.0-190.92.167.255 192.228.112.0/24 192.228.123.0/24 198.23.186.0/24 209.200.232.0/24 209.200.236.0/24 209.200.238.0/24 216.97.226.0/24 216.97.235.0/24 216.227.216.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:40:13:e0:26:d5:21:a5:1b:f1:0b:fb:41:69:92:f1:a2:c6: f8:c9:1c:54:59:7c:2b:6e:fa:53:ed:c7:39:55:6d:51:de:f4: b2:61:9c:56:94:47:d6:b9:d0:6a:36:c1:fc:c0:87:11:49:a2: 6f:76:91:a2:ef:7b:3f:c2:80:18:74:cb:fe:ce:9c:77:87:95: 96:f2:d9:15:a1:aa:20:1c:fe:6e:11:80:38:13:70:dd:50:75: 82:31:30:0a:08:28:ae:a1:28:fa:39:3b:38:c7:e9:29:02:38: a9:d1:90:8a:37:be:67:47:e0:30:76:85:e7:37:a0:33:47:26: 43:db:8d:99:25:06:c1:c7:67:59:ad:1b:d8:35:34:94:8c:3b: 11:e6:00:6a:df:80:f1:ae:43:bf:ab:cd:18:51:91:b8:e4:bc: b6:c1:d7:62:ab:47:e3:8a:ae:d8:98:82:bc:5a:19:aa:82:9c: be:ed:bf:0e:b7:01:82:49:c2:3d:e2:d9:50:95:35:d8:d9:a3: 7e:31:c6:91:9b:13:29:ee:f4:03:e2:cd:1d:85:d2:2b:bd:11: fc:12:90:fb:b7:4d:3a:1d:58:ab:96:fa:18:b0:6f:0c:13:eb: 58:a2:73:f1:3f:64:a1:f0:92:85:74:f1:97:bd:9c:4c:4a:b7: 2e:bf:9f:06 -----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgIUKvBsmdIpCTv35/cr7taYGrPAhqgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNjA0MTE0MjA1WhcNMjYwNjAzMTE0NzA1 WjAzMTEwLwYDVQQDEyg1OTgwNkI0RjMzMTI5MTUwRjE1QTJDMzY4ODEyMEU5REQ2 MEE4NjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC8qAhl8dJkq cUoXhyajhAYI6tSvsi3YPiPAXj6xBCU34464zy6vuvkEJ36RDLFuRtlr796014h/ 0fp9ArWMn7LHGHwnmHxoXnL4BBPWPeSIJsP6WcmiFmAGcJhvug51BB+dipnLvI3n jy2NNbDSWjnOt0irDZxcEkbuw1d/qpSsNBimfNlA4w565WK8G4SyYrXw9P8O3Yzz WVP2iLZeWChPJRVdr9+60Jri5+aDwfyHMPZde786/8ZtddNTyzbaq94ucRsjjVIW Mecw/qsuFuvy0ei95YXzdbSfVGXDNLakedd2s6dO00JPtWvyLyonY44b4Q2lGTxP oolgMl0cOwIDAQABo4IC5TCCAuEwHQYDVR0OBBYEFFmAa08zEpFQ8VosNogSDp3W CoZAMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBhwYI KwYBBQUHAQcBAf8EeDB2MHQEAgABMG4DBABAMqADBABAMqYDBAFAMrgDBABD0mED BABD0mUDBABD0mcDBABKMgcwDAMEAL5cpQMEA75coAMEAMDkcAMEAMDkewMEAMYX ugMEANHI6AMEANHI7AMEANHI7gMEANhh4gMEANhh6wMEANjj2DANBgkqhkiG9w0B AQsFAAOCAQEAmkAT4CbVIaUb8Qv7QWmS8aLG+MkcVFl8K276U+3HOVVtUd70smGc VpRH1rnQajbB/MCHEUmib3aRou97P8KAGHTL/s6cd4eVlvLZFaGqIBz+bhGAOBNw 3VB1gjEwCggorqEo+jk7OMfpKQI4qdGQije+Z0fgMHaF5zegM0cmQ9uNmSUGwcdn Wa0b2DU0lIw7EeYAat+A8a5Dv6vNGFGRuOS8tsHXYqtH44qu2JiCvFoZqoKcvu2/ DrcBgknCPeLZUJU12NmjfjHGkZsTKe70A+LNHYXSK70R/BKQ+7dNOh1Yq5b6GLBv DBPrWKJz8T9kofCShXTxl72cTEq3Lr+fBg== -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:46 2025 by rpki-client