$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa File: AS834.roa (raw, json) Hash identifier: QMdxTX/QGf52f0EPpbq+BXRVLjC3b223MBiZPog4LTU= Subject key identifier: CA:29:8A:E1:70:64:F5:82:04:0E:6B:87:D1:50:63:A8:17:DB:FE:AE Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 65670EDBB92591B10AB0C9B6D03632D8E1CDBEC8 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa Signing time: Wed 04 Jun 2025 07:10:09 +0000 ROA not before: Wed 04 Jun 2025 07:05:09 +0000 ROA not after: Wed 03 Jun 2026 07:10:09 +0000 asID: 834 IP address blocks: 157.254.25.0/24 maxlen: 24 157.254.49.0/24 maxlen: 24 157.254.144.0/21 maxlen: 24 157.254.166.0/24 maxlen: 24 157.254.222.0/24 maxlen: 24 199.103.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 04:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:67:0e:db:b9:25:91:b1:0a:b0:c9:b6:d0:36:32:d8:e1:cd:be:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jun 4 07:05:09 2025 GMT Not After : Jun 3 07:10:09 2026 GMT Subject: CN=CA298AE17064F582040E6B87D15063A817DBFEAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:95:01:d6:f1:1f:1e:b7:79:00:4b:a0:84:5c: 8a:4e:62:75:61:da:29:41:6d:0f:5e:a2:a9:b2:bf: f1:24:56:2a:58:13:26:d1:4b:bc:2f:09:27:fd:a4: 2c:78:fb:5f:ef:b1:9c:bc:1e:6f:49:e6:e6:1a:2b: 70:f4:fb:01:d5:f3:d2:50:1f:3c:8b:71:3d:88:17: 85:4f:90:79:bc:d5:1c:af:12:bc:70:f3:f6:99:78: d7:d8:80:29:2b:9d:a9:a9:d4:b0:67:3d:9b:a6:7f: 74:de:6c:5e:bd:71:fb:27:ef:e3:41:17:fc:2d:e2: 0d:c1:fc:aa:06:04:87:23:5a:d1:f5:59:03:55:ed: 2e:50:f9:12:65:96:d3:36:cb:a3:47:cc:0d:c6:a1: 54:51:9a:71:fd:96:e4:c2:2a:b4:4c:94:c5:bc:3c: 7d:56:ea:1a:35:26:eb:c9:28:34:7f:d7:65:d9:44: 1a:0b:df:fb:81:2e:08:67:40:d9:3d:30:c5:d5:c6: 59:79:06:be:b3:27:54:dd:4d:82:18:d7:ca:41:4a: f6:06:af:ff:97:53:48:fd:4c:45:d3:7c:92:28:ab: e8:be:c3:30:5a:03:0e:3d:39:b5:7f:00:e0:b5:60: 6f:35:dc:4a:0c:fd:b4:19:bc:6e:a9:ba:ad:66:bf: f0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:29:8A:E1:70:64:F5:82:04:0E:6B:87:D1:50:63:A8:17:DB:FE:AE X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.25.0/24 157.254.49.0/24 157.254.144.0/21 157.254.166.0/24 157.254.222.0/24 199.103.95.0/24 Signature Algorithm: sha256WithRSAEncryption 98:79:f0:9e:7a:de:62:eb:8b:62:3d:9c:30:34:3e:aa:10:24: 42:4c:87:75:75:6f:f9:ca:ee:9e:12:97:8e:e8:b7:3c:68:cf: 41:d9:37:b8:d2:0a:fc:97:b1:19:b4:c0:e6:6d:18:89:1b:5d: f8:4c:19:52:26:91:ac:8f:06:04:e7:0d:1b:08:3a:3a:0f:ee: 72:b6:29:88:37:5f:34:c3:14:5e:ea:62:29:c8:b0:a9:b5:3f: a6:d2:7d:b5:81:57:c3:39:66:2c:9e:7e:ab:7d:82:20:38:74: 9e:5d:5c:bf:e6:a9:be:e6:e1:84:33:6f:bb:02:0e:fe:9d:4c: 06:1f:0a:95:28:ca:dc:ec:7a:74:f5:2b:1b:59:20:48:be:25: 2e:01:f6:63:67:78:cc:e5:03:13:b8:b4:02:2d:b7:49:49:fd: bb:bc:8b:08:48:03:3d:a4:89:71:67:44:a9:c2:1b:bd:19:4e: 43:5a:b6:ce:ef:d8:04:4d:2b:ad:4d:a0:0a:f2:90:00:cb:21: a2:6b:3d:b0:06:f7:60:9d:0a:a6:90:91:e5:ee:b0:c1:7a:4b: 32:cd:28:51:0e:22:41:9d:66:d4:30:23:4e:f6:eb:b7:18:4b: b8:2e:6b:fb:14:c9:e4:62:c3:b2:f4:72:f4:1f:60:8c:75:cd: 1f:f8:1e:df -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgIUZWcO27klkbEKsMm20DYy2OHNvsgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwNjA0MDcwNTA5WhcNMjYwNjAzMDcxMDA5 WjAzMTEwLwYDVQQDEyhDQTI5OEFFMTcwNjRGNTgyMDQwRTZCODdEMTUwNjNBODE3 REJGRUFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJUB1vEfHrd5 AEughFyKTmJ1YdopQW0PXqKpsr/xJFYqWBMm0Uu8Lwkn/aQsePtf77GcvB5vSebm Gitw9PsB1fPSUB88i3E9iBeFT5B5vNUcrxK8cPP2mXjX2IApK52pqdSwZz2bpn90 3mxevXH7J+/jQRf8LeINwfyqBgSHI1rR9VkDVe0uUPkSZZbTNsujR8wNxqFUUZpx /Zbkwiq0TJTFvDx9VuoaNSbrySg0f9dl2UQaC9/7gS4IZ0DZPTDF1cZZeQa+sydU 3U2CGNfKQUr2Bq//l1NI/UxF03ySKKvovsMwWgMOPTm1fwDgtWBvNdxKDP20Gbxu qbqtZr/wqwIDAQABo4ICmjCCApYwHQYDVR0OBBYEFMopiuFwZPWCBA5rh9FQY6gX 2/6uMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9Bggr BgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAJ3+GQMEAJ3+MQMEA53+kAMEAJ3+pgME AJ3+3gMEAMdnXzANBgkqhkiG9w0BAQsFAAOCAQEAmHnwnnreYuuLYj2cMDQ+qhAk QkyHdXVv+crunhKXjui3PGjPQdk3uNIK/JexGbTA5m0YiRtd+EwZUiaRrI8GBOcN Gwg6Og/ucrYpiDdfNMMUXupiKciwqbU/ptJ9tYFXwzlmLJ5+q32CIDh0nl1cv+ap vubhhDNvuwIO/p1MBh8KlSjK3Ox6dPUrG1kgSL4lLgH2Y2d4zOUDE7i0Ai23SUn9 u7yLCEgDPaSJcWdEqcIbvRlOQ1q2zu/YBE0rrU2gCvKQAMshoms9sAb3YJ0KppCR 5e6wwXpLMs0oUQ4iQZ1m1DAjTvbrtxhLuC5r+xTJ5GLDsvRy9B9gjHXNH/ge3w== -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:06 2025 by rpki-client