$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa File: AS834.roa (raw, json) Hash identifier: qMM8Y7cRdXmfoLEh5d64hY4Lqw4cN0iyVdSMxBE0egQ= Subject key identifier: C9:54:57:1F:03:DE:A0:BE:3D:00:D7:6D:C4:39:27:96:16:35:35:2C Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 1EF04C3649EF5363A3530B4BADD63EE210F6AE5E Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa Signing time: Wed 12 Feb 2025 08:25:13 +0000 ROA not before: Wed 12 Feb 2025 08:20:13 +0000 ROA not after: Wed 11 Feb 2026 08:25:13 +0000 asID: 834 IP address blocks: 157.254.144.0/21 maxlen: 24 157.254.171.0/24 maxlen: 24 157.254.188.0/22 maxlen: 24 157.254.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 00:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f0:4c:36:49:ef:53:63:a3:53:0b:4b:ad:d6:3e:e2:10:f6:ae:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Feb 12 08:20:13 2025 GMT Not After : Feb 11 08:25:13 2026 GMT Subject: CN=C954571F03DEA0BE3D00D76DC43927961635352C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:46:ee:71:cf:0d:01:16:92:48:f6:eb:db:c9: b5:01:2e:bd:7b:ea:f7:6c:04:52:d1:2f:14:29:f0: 27:24:64:d5:18:cb:be:ee:f2:75:8b:4b:7a:60:9e: 87:0e:74:f6:76:3f:85:72:f1:1a:91:49:6e:68:2e: 98:fe:d6:f2:49:9f:99:bf:35:97:2f:0f:9c:99:07: 82:2b:c6:ce:b1:75:c0:4e:59:b2:8e:44:f6:6b:4a: e7:88:7f:64:98:b4:5b:a9:01:59:43:3c:4b:d2:56: 23:38:61:f1:da:75:4e:50:0c:8c:b2:71:22:ff:1d: 70:12:f2:22:59:a9:c7:a0:b7:98:58:76:65:c7:d1: 7e:e5:c7:2d:cd:c2:32:b5:a2:b9:05:a5:39:c5:fe: 02:14:d2:37:0a:34:50:fe:24:62:9f:94:a1:6d:75: ff:84:54:18:53:e0:5b:70:b2:88:4f:4e:58:2d:e9: f6:3d:04:4d:cb:eb:28:42:7d:82:ae:a1:6d:20:9e: 50:b8:ef:06:50:96:9d:e3:17:d0:d2:4c:0f:87:0a: 37:e2:e1:5f:79:8a:ad:d6:93:1e:c7:f9:e0:39:56: f4:f5:3c:24:9c:c5:45:25:2d:37:17:d4:9d:66:c4: 2b:78:65:4a:df:d3:d7:81:e4:dc:aa:9b:e5:3f:ec: 50:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:54:57:1F:03:DE:A0:BE:3D:00:D7:6D:C4:39:27:96:16:35:35:2C X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.144.0/21 157.254.171.0/24 157.254.188.0/22 157.254.219.0/24 Signature Algorithm: sha256WithRSAEncryption 56:76:d6:31:b5:2a:32:62:44:85:3e:c8:74:f1:c7:ef:8c:70: 80:e1:79:ac:f0:d1:8d:e6:1b:47:75:be:21:7f:d7:52:38:97: 5c:a2:c9:33:c4:88:b8:e1:4d:90:16:e8:ce:8c:6f:66:36:dc: 48:e5:06:9b:e7:c3:2d:77:43:74:96:0a:52:8e:10:83:86:49: ea:3a:b5:95:ab:da:fa:87:6b:02:f0:e6:3c:57:78:cd:50:b3: c7:e4:27:17:13:f9:fb:14:49:ac:09:90:40:54:aa:05:b8:c8: 70:51:0c:0d:55:1b:14:2a:25:fa:cf:fd:ed:9c:b9:1a:69:0b: 10:75:1c:45:53:ed:1b:9b:62:b6:2d:8d:71:55:0a:a0:21:a7: fc:72:c6:d3:77:12:d8:63:7e:ff:77:ad:01:87:c7:d3:39:c7: 36:46:21:7b:de:11:c9:57:81:04:a5:1a:0b:f8:f8:ca:23:fa: 76:88:b3:d1:9b:b6:01:54:78:27:86:8c:94:da:bc:63:8e:cb: ff:77:4c:0d:3f:bd:36:71:57:8a:e6:15:fd:5c:7e:bf:7f:87: bb:f5:40:71:fe:60:6a:b4:04:9f:15:83:49:b3:24:56:de:be: 4e:a2:70:a7:88:25:cc:47:7d:76:44:1d:c4:76:60:69:ce:ac: 82:ab:12:2b -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgIUHvBMNknvU2OjUwtLrdY+4hD2rl4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwMjEyMDgyMDEzWhcNMjYwMjExMDgyNTEz WjAzMTEwLwYDVQQDEyhDOTU0NTcxRjAzREVBMEJFM0QwMEQ3NkRDNDM5Mjc5NjE2 MzUzNTJDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUbucc8NARaS SPbr28m1AS69e+r3bARS0S8UKfAnJGTVGMu+7vJ1i0t6YJ6HDnT2dj+FcvEakUlu aC6Y/tbySZ+ZvzWXLw+cmQeCK8bOsXXATlmyjkT2a0rniH9kmLRbqQFZQzxL0lYj OGHx2nVOUAyMsnEi/x1wEvIiWanHoLeYWHZlx9F+5cctzcIytaK5BaU5xf4CFNI3 CjRQ/iRin5ShbXX/hFQYU+BbcLKIT05YLen2PQRNy+soQn2CrqFtIJ5QuO8GUJad 4xfQ0kwPhwo34uFfeYqt1pMex/ngOVb09TwknMVFJS03F9SdZsQreGVK39PXgeTc qpvlP+xQgwIDAQABo4ICjjCCAoowHQYDVR0OBBYEFMlUVx8D3qC+PQDXbcQ5J5YW NTUsMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAxBggr BgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEA53+kAMEAJ3+qwMEAp3+vAMEAJ3+2zAN BgkqhkiG9w0BAQsFAAOCAQEAVnbWMbUqMmJEhT7IdPHH74xwgOF5rPDRjeYbR3W+ IX/XUjiXXKLJM8SIuOFNkBbozoxvZjbcSOUGm+fDLXdDdJYKUo4Qg4ZJ6jq1lava +odrAvDmPFd4zVCzx+QnFxP5+xRJrAmQQFSqBbjIcFEMDVUbFCol+s/97Zy5GmkL EHUcRVPtG5titi2NcVUKoCGn/HLG03cS2GN+/3etAYfH0znHNkYhe94RyVeBBKUa C/j4yiP6doiz0Zu2AVR4J4aMlNq8Y47L/3dMDT+9NnFXiuYV/Vx+v3+Hu/VAcf5g arQEnxWDSbMkVt6+TqJwp4glzEd9dkQdxHZgac6sgqsSKw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:21:53 2025 by rpki-client