$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa File: AS834.roa (raw, json) Hash identifier: TgqpbvlNgVMRCg3dhDezqKQzyEw5eeq9lIkQ1sj29zk= Subject key identifier: 55:E3:0B:43:E8:B5:C3:6D:99:98:B0:EE:CA:3A:84:8C:79:E6:89:47 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 42985041A920E5DA3F93933FCC8DA7870AEADDAF Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa Signing time: Fri 17 Apr 2026 00:05:15 +0000 ROA not before: Fri 17 Apr 2026 00:00:15 +0000 ROA not after: Fri 16 Apr 2027 00:05:15 +0000 asID: 834 IP address blocks: 104.234.2.0/24 maxlen: 24 104.234.28.0/24 maxlen: 24 104.234.40.0/24 maxlen: 24 104.234.56.0/24 maxlen: 24 104.234.71.0/24 maxlen: 24 104.234.77.0/24 maxlen: 24 104.234.86.0/24 maxlen: 24 104.234.95.0/24 maxlen: 24 104.234.98.0/24 maxlen: 24 104.234.102.0/24 maxlen: 24 104.234.112.0/24 maxlen: 24 104.234.114.0/24 maxlen: 24 104.234.136.0/24 maxlen: 24 104.234.157.0/24 maxlen: 24 104.234.161.0/24 maxlen: 24 104.234.192.0/23 maxlen: 24 104.234.194.0/24 maxlen: 24 104.234.196.0/24 maxlen: 24 104.234.198.0/23 maxlen: 24 104.234.201.0/24 maxlen: 24 104.234.202.0/23 maxlen: 24 104.234.206.0/23 maxlen: 24 104.234.211.0/24 maxlen: 24 104.234.229.0/24 maxlen: 24 104.234.232.0/24 maxlen: 24 206.53.56.0/24 maxlen: 24 206.53.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 03:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:98:50:41:a9:20:e5:da:3f:93:93:3f:cc:8d:a7:87:0a:ea:dd:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Apr 17 00:00:15 2026 GMT Not After : Apr 16 00:05:15 2027 GMT Subject: CN=55E30B43E8B5C36D9998B0EECA3A848C79E68947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e7:74:71:ac:4d:4e:35:6d:e0:c0:00:0e:e7: 42:c2:a8:ab:97:f7:18:84:0a:39:42:df:ce:e0:9a: 61:75:f1:b6:07:ae:11:f6:47:a8:31:ab:ee:d4:e0: 5a:d4:4a:e2:37:9d:37:ac:fd:96:0a:ab:77:93:c3: 4e:5c:de:2e:cd:14:01:b9:c6:d0:5f:c5:91:72:d2: cd:9c:1d:3c:7f:30:75:52:69:f4:58:72:fd:94:ba: 88:fb:e8:af:f9:c5:4e:33:d6:50:f9:27:08:5e:64: 65:d6:3d:7e:4f:35:48:1d:b7:84:6c:37:01:f2:a2: a6:3c:46:7f:c5:48:2f:af:dd:a0:4f:20:51:c8:3f: 1e:bc:ce:44:a9:41:68:2a:83:ec:48:10:6a:5e:e6: 01:2a:61:21:8f:c3:59:39:4d:f8:d7:a2:bd:ea:4b: 19:c2:9c:20:34:c7:11:c1:8c:a8:40:73:91:93:e4: 85:80:ee:8d:2f:21:71:7f:85:2a:f5:9b:65:eb:37: 6b:a3:00:47:b8:7d:10:a7:b7:24:f9:23:d8:be:ef: 60:60:38:fb:47:28:12:7c:3b:ad:ef:58:b3:be:d0: 58:81:0a:88:58:58:a1:5b:76:8d:bc:14:da:97:b7: cb:3a:51:00:0c:58:50:02:af:2c:fb:12:ae:d6:95: 5d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E3:0B:43:E8:B5:C3:6D:99:98:B0:EE:CA:3A:84:8C:79:E6:89:47 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.2.0/24 104.234.28.0/24 104.234.40.0/24 104.234.56.0/24 104.234.71.0/24 104.234.77.0/24 104.234.86.0/24 104.234.95.0/24 104.234.98.0/24 104.234.102.0/24 104.234.112.0/24 104.234.114.0/24 104.234.136.0/24 104.234.157.0/24 104.234.161.0/24 104.234.192.0-104.234.194.255 104.234.196.0/24 104.234.198.0/23 104.234.201.0-104.234.203.255 104.234.206.0/23 104.234.211.0/24 104.234.229.0/24 104.234.232.0/24 206.53.56.0/24 206.53.63.0/24 Signature Algorithm: sha256WithRSAEncryption 56:4b:65:db:66:d9:67:5e:76:f8:eb:23:b1:1c:4f:ce:bf:ad: 64:51:bf:a8:d6:62:94:20:5f:05:57:90:f1:35:0c:ac:f7:d3: 2c:a9:5e:2a:41:e1:2e:54:3c:00:a9:b2:50:c2:c3:d7:92:ba: aa:83:e2:7d:f3:12:7c:a3:09:f3:43:5c:98:d6:1f:c0:93:88: 38:63:8d:15:cb:20:3e:4b:51:d5:13:c7:4b:0a:ad:e7:f9:ab: a0:c2:fc:92:98:a2:1d:e9:01:b3:62:76:a4:44:d9:19:ba:27: 4e:52:19:df:8e:1f:3a:a0:80:43:2e:1e:b9:cf:4d:1e:6f:3c: 60:a7:03:81:72:d8:2d:c7:d9:0b:d4:91:e4:98:ec:b2:84:e1: a0:e1:1a:63:60:52:33:58:8f:d3:59:ae:12:91:7e:7e:16:47: 32:20:4a:fe:b3:9b:f0:0a:2c:48:6f:3f:10:d3:03:f7:e0:a5: c5:15:fb:22:27:c3:2d:3a:70:5f:6e:03:91:86:d4:14:f9:5c: ea:81:34:03:92:35:a0:f4:25:54:a4:e3:41:9c:1b:6f:ce:1a: 93:17:1f:08:ee:36:69:04:f3:54:c6:c2:50:b6:1c:fa:89:16: b1:33:06:ef:9f:3e:11:11:a1:4b:5c:c3:3a:71:74:e5:f0:60: 85:f4:c6:6f -----BEGIN CERTIFICATE----- MIIGITCCBQmgAwIBAgIUQphQQakg5do/k5M/zI2nhwrq3a8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwNDE3MDAwMDE1WhcNMjcwNDE2MDAwNTE1 WjAzMTEwLwYDVQQDEyg1NUUzMEI0M0U4QjVDMzZEOTk5OEIwRUVDQTNBODQ4Qzc5 RTY4OTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsed0caxNTjVt 4MAADudCwqirl/cYhAo5Qt/O4JphdfG2B64R9keoMavu1OBa1EriN503rP2WCqt3 k8NOXN4uzRQBucbQX8WRctLNnB08fzB1Umn0WHL9lLqI++iv+cVOM9ZQ+ScIXmRl 1j1+TzVIHbeEbDcB8qKmPEZ/xUgvr92gTyBRyD8evM5EqUFoKoPsSBBqXuYBKmEh j8NZOU3416K96ksZwpwgNMcRwYyoQHORk+SFgO6NLyFxf4Uq9Ztl6zdrowBHuH0Q p7ck+SPYvu9gYDj7RygSfDut71izvtBYgQqIWFihW3aNvBTal7fLOlEADFhQAq8s +xKu1pVdtQIDAQABo4IDITCCAx0wHQYDVR0OBBYEFFXjC0PotcNtmZiw7so6hIx5 5olHMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBwwYI KwYBBQUHAQcBAf8EgbMwgbAwga0EAgABMIGmAwQAaOoCAwQAaOocAwQAaOooAwQA aOo4AwQAaOpHAwQAaOpNAwQAaOpWAwQAaOpfAwQAaOpiAwQAaOpmAwQAaOpwAwQA aOpyAwQAaOqIAwQAaOqdAwQAaOqhMAwDBAZo6sADBABo6sIDBABo6sQDBAFo6sYw DAMEAGjqyQMEAmjqyAMEAWjqzgMEAGjq0wMEAGjq5QMEAGjq6AMEAM41OAMEAM41 PzANBgkqhkiG9w0BAQsFAAOCAQEAVktl22bZZ152+OsjsRxPzr+tZFG/qNZilCBf BVeQ8TUMrPfTLKleKkHhLlQ8AKmyUMLD15K6qoPiffMSfKMJ80NcmNYfwJOIOGON FcsgPktR1RPHSwqt5/mroML8kpiiHekBs2J2pETZGbonTlIZ344fOqCAQy4euc9N Hm88YKcDgXLYLcfZC9SR5JjssoThoOEaY2BSM1iP01muEpF+fhZHMiBK/rOb8Aos SG8/ENMD9+ClxRX7IifDLTpwX24DkYbUFPlc6oE0A5I1oPQlVKTjQZwbb84akxcf CO42aQTzVMbCULYc+okWsTMG758+ERGhS1zDOnF05fBghfTGbw== -----END CERTIFICATE-----Generated at Fri Apr 17 05:38:08 2026 by rpki-client