$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa File: AS834.roa (raw, json) Hash identifier: K0GUnWhkpx0qDsKmVIonOZ8hy3yYEj1Ic7BkbINfk+g= Subject key identifier: 64:33:77:1B:2E:80:33:37:20:B4:FB:6D:C1:86:9D:3B:D5:41:F8:D4 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 0CF5A684741DCE8EC62A94F406D291602B6330A2 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa Signing time: Sun 01 Mar 2026 00:10:17 +0000 ROA not before: Sun 01 Mar 2026 00:05:17 +0000 ROA not after: Sun 28 Feb 2027 00:10:17 +0000 asID: 834 IP address blocks: 104.234.29.0/24 maxlen: 24 104.234.40.0/24 maxlen: 24 104.234.56.0/24 maxlen: 24 104.234.58.0/24 maxlen: 24 104.234.62.0/24 maxlen: 24 104.234.66.0/24 maxlen: 24 104.234.70.0/23 maxlen: 24 104.234.77.0/24 maxlen: 24 104.234.102.0/24 maxlen: 24 104.234.104.0/24 maxlen: 24 104.234.112.0/24 maxlen: 24 104.234.135.0/24 maxlen: 24 104.234.136.0/24 maxlen: 24 104.234.161.0/24 maxlen: 24 104.234.184.0/24 maxlen: 24 104.234.192.0/23 maxlen: 24 104.234.194.0/24 maxlen: 24 104.234.198.0/23 maxlen: 24 104.234.201.0/24 maxlen: 24 104.234.202.0/23 maxlen: 24 104.234.206.0/23 maxlen: 24 104.234.211.0/24 maxlen: 24 206.53.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 02:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f5:a6:84:74:1d:ce:8e:c6:2a:94:f4:06:d2:91:60:2b:63:30:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Mar 1 00:05:17 2026 GMT Not After : Feb 28 00:10:17 2027 GMT Subject: CN=6433771B2E80333720B4FB6DC1869D3BD541F8D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:77:a0:03:9d:bd:29:40:dc:bf:54:35:a8:0b: 79:46:12:48:9b:dc:87:e1:bd:71:15:ce:62:c4:d6: a4:e6:f3:af:f2:5f:83:91:7e:ec:f5:98:ab:10:5a: 9c:ab:64:ff:79:04:69:7c:b1:6c:05:3d:7d:1e:5c: 72:16:49:97:1f:e3:6f:7f:b4:a5:dd:87:66:49:5c: 07:2f:de:6d:32:9b:eb:ee:7c:65:2d:c7:59:f8:6e: 3a:b8:c8:5d:5b:89:97:4a:4e:58:52:d9:7a:41:9c: ae:9d:4d:8b:b2:9e:ba:7a:9d:cb:4b:84:b1:6d:9b: 68:91:4d:a6:10:d3:d1:f4:77:ad:48:06:b0:9f:7c: 3a:db:41:69:4d:18:74:73:2d:ca:5c:c1:df:65:cb: 13:fc:9c:4b:db:83:9b:9a:24:93:02:78:4b:42:93: 0d:73:13:9c:cc:8b:46:00:21:a9:04:15:53:63:55: 61:f4:55:5b:77:14:27:b8:2e:65:27:7a:ae:ff:e4: dc:c7:38:77:4b:0d:45:d1:67:b8:d1:1a:69:c1:3c: d6:a4:b1:40:28:e2:72:7a:43:b2:0a:73:60:35:15: dc:01:da:71:86:4b:94:13:d1:43:65:2e:5c:13:6c: 5c:be:f6:5d:90:31:69:d1:2a:85:8d:33:5a:c0:23: aa:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:33:77:1B:2E:80:33:37:20:B4:FB:6D:C1:86:9D:3B:D5:41:F8:D4 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.29.0/24 104.234.40.0/24 104.234.56.0/24 104.234.58.0/24 104.234.62.0/24 104.234.66.0/24 104.234.70.0/23 104.234.77.0/24 104.234.102.0/24 104.234.104.0/24 104.234.112.0/24 104.234.135.0-104.234.136.255 104.234.161.0/24 104.234.184.0/24 104.234.192.0-104.234.194.255 104.234.198.0/23 104.234.201.0-104.234.203.255 104.234.206.0/23 104.234.211.0/24 206.53.63.0/24 Signature Algorithm: sha256WithRSAEncryption 30:d8:74:1f:9c:87:4b:9e:99:23:3d:46:6e:a1:77:f7:80:26: 54:37:77:52:f7:b1:ab:52:cf:61:26:5e:ef:cf:1f:26:8b:f8: af:fc:08:9a:10:42:cf:6e:cc:16:79:35:d4:ac:f8:7e:87:27: 8c:72:67:b8:90:b7:e9:9d:fe:4e:cc:00:d5:29:77:84:49:77: 68:9e:c3:9f:0c:fc:e9:99:bb:f0:1d:02:ed:0b:59:29:3a:a0: 58:09:8a:38:5d:6a:1f:0b:22:68:ff:32:81:1f:5a:55:78:cd: 8a:e2:cf:03:74:dd:6d:63:5e:ee:a6:ae:ba:d5:c5:e4:3e:18: ea:2c:f6:c2:a2:55:5c:9d:9b:08:7b:cb:31:21:61:18:84:6e: 79:9c:18:33:04:60:64:92:cb:67:ab:a0:72:42:27:1d:58:95: 0e:25:64:a3:1c:85:fb:dc:05:20:c0:d3:f0:00:37:01:d4:03: 37:73:18:d7:c5:6c:bf:00:db:17:fd:23:a2:00:7c:6f:f5:49: 58:40:9d:9c:d0:09:47:30:71:c0:1e:5b:12:c0:60:69:5a:07: cc:d2:16:e9:02:42:d5:72:00:ed:73:7b:dc:42:1e:75:66:70: 66:93:08:70:97:c2:f6:d6:9f:cc:73:f3:66:c4:83:15:49:aa: 0a:7c:88:69 -----BEGIN CERTIFICATE----- MIIGCzCCBPOgAwIBAgIUDPWmhHQdzo7GKpT0BtKRYCtjMKIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwMzAxMDAwNTE3WhcNMjcwMjI4MDAxMDE3 WjAzMTEwLwYDVQQDEyg2NDMzNzcxQjJFODAzMzM3MjBCNEZCNkRDMTg2OUQzQkQ1 NDFGOEQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXegA529KUDc v1Q1qAt5RhJIm9yH4b1xFc5ixNak5vOv8l+DkX7s9ZirEFqcq2T/eQRpfLFsBT19 HlxyFkmXH+Nvf7Sl3YdmSVwHL95tMpvr7nxlLcdZ+G46uMhdW4mXSk5YUtl6QZyu nU2Lsp66ep3LS4SxbZtokU2mENPR9HetSAawn3w620FpTRh0cy3KXMHfZcsT/JxL 24ObmiSTAnhLQpMNcxOczItGACGpBBVTY1Vh9FVbdxQnuC5lJ3qu/+Tcxzh3Sw1F 0We40RppwTzWpLFAKOJyekOyCnNgNRXcAdpxhkuUE9FDZS5cE2xcvvZdkDFp0SqF jTNawCOq+wIDAQABo4IDCzCCAwcwHQYDVR0OBBYEFGQzdxsugDM3ILT7bcGGnTvV QfjUMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBrQYI KwYBBQUHAQcBAf8EgZ0wgZowgZcEAgABMIGQAwQAaOodAwQAaOooAwQAaOo4AwQA aOo6AwQAaOo+AwQAaOpCAwQBaOpGAwQAaOpNAwQAaOpmAwQAaOpoAwQAaOpwMAwD BABo6ocDBABo6ogDBABo6qEDBABo6rgwDAMEBmjqwAMEAGjqwgMEAWjqxjAMAwQA aOrJAwQCaOrIAwQBaOrOAwQAaOrTAwQAzjU/MA0GCSqGSIb3DQEBCwUAA4IBAQAw 2HQfnIdLnpkjPUZuoXf3gCZUN3dS97GrUs9hJl7vzx8mi/iv/AiaEELPbswWeTXU rPh+hyeMcme4kLfpnf5OzADVKXeESXdonsOfDPzpmbvwHQLtC1kpOqBYCYo4XWof CyJo/zKBH1pVeM2K4s8DdN1tY17upq661cXkPhjqLPbColVcnZsIe8sxIWEYhG55 nBgzBGBkkstnq6ByQicdWJUOJWSjHIX73AUgwNPwADcB1AM3cxjXxWy/ANsX/SOi AHxv9UlYQJ2c0AlHMHHAHlsSwGBpWgfM0hbpAkLVcgDtc3vcQh51ZnBmkwhwl8L2 1p/Mc/NmxIMVSaoKfIhp -----END CERTIFICATE-----Generated at Sun Mar 1 18:34:03 2026 by rpki-client