$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa File: AS834.roa (raw, json) Hash identifier: C/ePNOBRM+sYo1A7ZghMcWG0qt2+f39zH1G08CK92IA= Subject key identifier: 8D:F8:88:0E:3D:E1:56:C1:B9:15:AA:2B:30:AC:0E:09:4F:12:59:7C Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 1BB2B622DE0C30D3D231CE9264566579A1097425 Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa Signing time: Mon 03 Nov 2025 00:05:42 +0000 ROA not before: Mon 03 Nov 2025 00:00:42 +0000 ROA not after: Mon 02 Nov 2026 00:05:42 +0000 asID: 834 IP address blocks: 140.99.48.0/24 maxlen: 24 140.99.114.0/24 maxlen: 24 140.99.116.0/22 maxlen: 24 140.99.144.0/22 maxlen: 24 140.99.172.0/22 maxlen: 24 140.99.176.0/22 maxlen: 24 140.99.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 14:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b2:b6:22:de:0c:30:d3:d2:31:ce:92:64:56:65:79:a1:09:74:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Nov 3 00:00:42 2025 GMT Not After : Nov 2 00:05:42 2026 GMT Subject: CN=8DF8880E3DE156C1B915AA2B30AC0E094F12597C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:10:62:1b:e1:c4:f1:72:ce:18:ff:f0:1f:1c: 2d:dc:e1:e6:3c:1d:ec:f5:42:3a:ec:6f:bd:3a:56: ec:39:45:45:c3:f6:e2:00:10:d9:14:65:28:fe:98: 9d:36:ab:0a:dd:e6:c6:9e:81:c3:ec:ec:d9:db:e4: 59:b5:8c:79:de:73:10:5e:ab:0e:0b:74:7d:44:d6: 27:e0:38:7c:75:f6:a8:ee:04:42:32:57:69:e7:91: ec:62:db:90:6c:bd:cc:e2:6a:8c:48:0b:4e:91:47: 96:ad:cf:44:60:0a:19:84:0d:d7:b2:8a:f5:fa:68: 5e:bb:ae:84:cb:54:7e:49:40:87:c7:03:6c:a2:6e: ef:26:28:32:4c:d6:63:b9:df:7e:ad:fd:d6:aa:16: 1b:08:a1:62:c1:d0:a6:bd:a0:8b:6c:fb:8d:60:58: 1d:e6:93:10:80:c2:80:c0:fa:5a:1a:7c:ea:3d:1e: b7:f4:f8:cf:2f:1d:e5:a5:85:c3:a3:62:c2:00:a2: 7d:01:6c:74:27:39:cf:e0:2e:cf:54:14:84:1b:d0: f4:db:e1:60:b5:a0:d0:5f:47:8f:a9:53:c9:59:56: 90:63:1c:da:eb:32:76:ab:d6:f4:a1:4c:40:25:d3: 62:16:2d:b9:43:16:fe:1e:d5:de:17:22:a5:c8:ac: e4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F8:88:0E:3D:E1:56:C1:B9:15:AA:2B:30:AC:0E:09:4F:12:59:7C X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.48.0/24 140.99.114.0/24 140.99.116.0/22 140.99.144.0/22 140.99.172.0-140.99.179.255 140.99.184.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:a2:24:e8:5f:5c:af:43:0d:d5:5d:7d:26:83:10:1f:19:6d: 53:f2:0e:8f:44:e1:2b:a3:90:c3:28:e4:d5:36:71:8f:11:68: 7e:fc:02:79:a0:ea:7d:10:51:08:17:e5:62:1e:9b:05:d4:84: 11:57:56:03:31:f7:7c:12:c8:59:07:b3:58:2c:cc:76:d0:c2: db:58:50:80:44:ec:a9:8a:32:a5:d9:19:da:21:eb:6e:54:ab: 77:4a:25:e2:79:76:47:12:b8:74:a6:7a:86:62:71:36:c3:e1: f4:09:7b:a3:c4:a1:b7:6a:51:51:13:87:14:83:e8:91:b0:7a: b4:bc:c2:bd:9b:9e:fe:a0:d4:c6:cb:d8:31:d9:89:c7:dc:90: df:fc:e0:d4:76:2d:a6:c5:09:26:82:bf:67:f9:63:f3:9c:d5: 86:9d:65:95:74:b6:cd:26:4f:19:e7:03:15:bc:0a:f0:4d:1f: 99:43:3a:b2:d9:f9:91:63:f4:44:8b:da:b5:7b:a0:da:4d:1f: 19:e5:32:a7:63:6e:37:9d:dc:f5:1b:ea:c6:a0:3a:e0:dd:60: 7b:e0:e9:cb:90:b4:b2:74:d6:97:dc:7d:3e:91:aa:98:32:11: 69:48:eb:ed:77:7f:fc:1e:2c:04:4c:86:7f:fa:73:5d:9d:04: 7e:01:f9:bc -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIUG7K2It4MMNPSMc6SZFZleaEJdCUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUxMTAzMDAwMDQyWhcNMjYxMTAyMDAwNTQy WjAzMTEwLwYDVQQDEyg4REY4ODgwRTNERTE1NkMxQjkxNUFBMkIzMEFDMEUwOTRG MTI1OTdDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhBiG+HE8XLO GP/wHxwt3OHmPB3s9UI67G+9OlbsOUVFw/biABDZFGUo/pidNqsK3ebGnoHD7OzZ 2+RZtYx53nMQXqsOC3R9RNYn4Dh8dfao7gRCMldp55HsYtuQbL3M4mqMSAtOkUeW rc9EYAoZhA3Xsor1+mheu66Ey1R+SUCHxwNsom7vJigyTNZjud9+rf3WqhYbCKFi wdCmvaCLbPuNYFgd5pMQgMKAwPpaGnzqPR639PjPLx3lpYXDo2LCAKJ9AWx0JznP 4C7PVBSEG9D02+FgtaDQX0ePqVPJWVaQYxza6zJ2q9b0oUxAJdNiFi25Qxb+HtXe FyKlyKzk2QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFI34iA494VbBuRWqKzCsDglP Ell8MB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBFBggr BgEFBQcBBwEB/wQ2MDQwMgQCAAEwLAMEAIxjMAMEAIxjcgMEAoxjdAMEAoxjkDAM AwQCjGOsAwQCjGOwAwQBjGO4MA0GCSqGSIb3DQEBCwUAA4IBAQBcoiToX1yvQw3V XX0mgxAfGW1T8g6PROEro5DDKOTVNnGPEWh+/AJ5oOp9EFEIF+ViHpsF1IQRV1YD Mfd8EshZB7NYLMx20MLbWFCAROypijKl2RnaIetuVKt3SiXieXZHErh0pnqGYnE2 w+H0CXujxKG3alFRE4cUg+iRsHq0vMK9m57+oNTGy9gx2YnH3JDf/ODUdi2mxQkm gr9n+WPznNWGnWWVdLbNJk8Z5wMVvArwTR+ZQzqy2fmRY/REi9q1e6DaTR8Z5TKn Y243ndz1G+rGoDrg3WB74OnLkLSydNaX3H0+kaqYMhFpSOvtd3/8HiwETIZ/+nNd nQR+Afm8 -----END CERTIFICATE-----Generated at Tue Nov 4 20:55:33 2025 by rpki-client