$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa File: AS834.roa (raw, json) Hash identifier: bPdP7GZ5HKu0rmJSamixKMpFkrQSKwnaAFB4rPjzTZA= Subject key identifier: FC:37:E8:D0:F6:4A:36:E1:4C:33:7E:CB:E3:0C:39:61:AD:8D:5D:5D Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 6DBBC068E362E9AE3EC673AF369C317CA4C79A1E Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa Signing time: Sun 01 Mar 2026 00:16:35 +0000 ROA not before: Sun 01 Mar 2026 00:11:35 +0000 ROA not after: Sun 28 Feb 2027 00:16:35 +0000 asID: 834 IP address blocks: 140.99.39.0/24 maxlen: 24 140.99.44.0/24 maxlen: 24 140.99.47.0/24 maxlen: 24 140.99.48.0/24 maxlen: 24 140.99.114.0/24 maxlen: 24 140.99.116.0/22 maxlen: 24 140.99.144.0/22 maxlen: 24 140.99.172.0/22 maxlen: 24 140.99.176.0/22 maxlen: 24 140.99.184.0/23 maxlen: 24 140.99.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 21:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:bb:c0:68:e3:62:e9:ae:3e:c6:73:af:36:9c:31:7c:a4:c7:9a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Mar 1 00:11:35 2026 GMT Not After : Feb 28 00:16:35 2027 GMT Subject: CN=FC37E8D0F64A36E14C337ECBE30C3961AD8D5D5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d3:ad:69:16:a5:f6:67:b6:13:6b:54:20:05: d9:3d:46:be:48:c7:c1:bc:89:83:64:11:12:bb:3b: 67:46:b2:8c:1f:fd:87:cf:4d:66:ab:7e:b7:c4:34: ab:8b:dc:12:ec:54:47:e8:71:a6:b9:0c:21:83:be: fe:3d:c9:2d:02:e8:3e:6f:c7:d3:f8:bd:e8:4e:06: 3c:da:e6:7a:ff:99:e6:ff:1d:1f:0e:c1:bc:59:4e: a1:a1:fb:cb:d5:98:a8:0b:79:13:12:91:df:2f:5b: 37:b0:5b:8e:b6:03:c6:3e:04:eb:00:ad:98:0e:71: a8:6a:06:9d:f0:75:b9:3f:ae:5b:f3:cc:56:fb:75: d7:f3:9a:fd:54:90:40:62:30:6e:51:56:6e:c1:da: 20:42:dd:4a:f4:5e:47:22:ea:ec:76:c4:4f:02:3a: 2c:c6:58:c1:06:4c:34:bd:66:68:a8:b0:36:c4:d2: 80:f2:fb:4c:c5:f1:f6:e5:ca:9d:a2:c6:b9:8f:ca: e4:e8:61:9d:37:2a:00:b5:85:4c:1e:29:29:51:c3: 65:a5:2e:bb:bc:0a:ba:6d:67:17:21:7e:05:4a:0b: 3b:19:02:cb:3d:54:9d:c2:53:a2:ab:15:13:09:05: b2:b7:af:95:70:eb:55:76:d6:cc:78:50:71:ed:26: 17:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:37:E8:D0:F6:4A:36:E1:4C:33:7E:CB:E3:0C:39:61:AD:8D:5D:5D X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.39.0/24 140.99.44.0/24 140.99.47.0-140.99.48.255 140.99.114.0/24 140.99.116.0/22 140.99.144.0/22 140.99.172.0-140.99.179.255 140.99.184.0/23 140.99.205.0/24 Signature Algorithm: sha256WithRSAEncryption 26:df:ea:fd:77:75:c0:fb:18:e4:c4:22:64:9f:f1:58:df:ba: 0c:42:66:2b:a7:25:32:2c:4a:fc:b3:78:70:74:9e:ba:72:9d: 80:4a:1d:25:07:b9:5a:e0:03:de:c6:4e:87:26:80:0b:92:34: c4:23:38:3c:87:cb:6c:71:70:9c:93:fc:66:5e:de:d0:b5:47: 2f:59:06:c1:a8:8d:d5:f9:5f:7c:86:9a:e9:0f:51:45:df:37: 35:51:a0:97:6d:d7:9b:5b:f5:99:5d:ac:5d:4b:b9:b3:52:7d: 69:8d:23:40:fc:b8:e8:d2:13:3a:57:3f:92:65:a7:bd:9f:75: c1:92:90:b7:76:42:c3:2f:74:29:21:80:30:fe:5b:dc:3b:25: 5e:8b:dc:19:8e:96:82:c4:29:1a:b3:00:07:79:6e:e6:a8:09: 2b:75:1f:05:ad:c9:1a:99:d5:61:61:5b:4d:86:d6:4a:50:92: 98:6d:52:0b:2b:59:6e:95:eb:b8:f5:e5:14:d9:5b:fe:96:99: 35:45:be:d4:c0:71:13:9a:1e:3f:ed:97:07:32:57:64:1b:cf: 59:ba:7f:4c:e5:8a:f0:a2:61:3f:b2:31:9e:d1:9b:ae:dc:74: fb:f3:26:f8:67:c4:f9:d3:ed:00:9d:2c:5d:ec:f9:c1:69:a2: e8:20:cd:62 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUbbvAaONi6a4+xnOvNpwxfKTHmh4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjYwMzAxMDAxMTM1WhcNMjcwMjI4MDAxNjM1 WjAzMTEwLwYDVQQDEyhGQzM3RThEMEY2NEEzNkUxNEMzMzdFQ0JFMzBDMzk2MUFE OEQ1RDVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNOtaRal9me2 E2tUIAXZPUa+SMfBvImDZBESuztnRrKMH/2Hz01mq363xDSri9wS7FRH6HGmuQwh g77+PcktAug+b8fT+L3oTgY82uZ6/5nm/x0fDsG8WU6hofvL1ZioC3kTEpHfL1s3 sFuOtgPGPgTrAK2YDnGoagad8HW5P65b88xW+3XX85r9VJBAYjBuUVZuwdogQt1K 9F5HIursdsRPAjosxljBBkw0vWZoqLA2xNKA8vtMxfH25cqdosa5j8rk6GGdNyoA tYVMHikpUcNlpS67vAq6bWcXIX4FSgs7GQLLPVSdwlOiqxUTCQWyt6+VcOtVdtbM eFBx7SYXuwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFPw36ND2SjbhTDN+y+MMOWGt jV1dMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBggr BgEFBQcBBwEB/wRQME4wTAQCAAEwRgMEAIxjJwMEAIxjLDAMAwQAjGMvAwQAjGMw AwQAjGNyAwQCjGN0AwQCjGOQMAwDBAKMY6wDBAKMY7ADBAGMY7gDBACMY80wDQYJ KoZIhvcNAQELBQADggEBACbf6v13dcD7GOTEImSf8VjfugxCZiunJTIsSvyzeHB0 nrpynYBKHSUHuVrgA97GTocmgAuSNMQjODyHy2xxcJyT/GZe3tC1Ry9ZBsGojdX5 X3yGmukPUUXfNzVRoJdt15tb9ZldrF1LubNSfWmNI0D8uOjSEzpXP5Jlp72fdcGS kLd2QsMvdCkhgDD+W9w7JV6L3BmOloLEKRqzAAd5buaoCSt1HwWtyRqZ1WFhW02G 1kpQkphtUgsrWW6V67j15RTZW/6WmTVFvtTAcROaHj/tlwcyV2Qbz1m6f0zlivCi YT+yMZ7Rm67cdPvzJvhnxPnT7QCdLF3s+cFpouggzWI= -----END CERTIFICATE-----Generated at Mon Mar 2 08:59:44 2026 by rpki-client