$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa File: AS834.roa (raw, json) Hash identifier: +mEnnf+3Or+Rb1PXbmCfgvkf/UXsbRjqJ8Ry5vbqwQw= Subject key identifier: B9:DF:95:50:97:B3:A9:E4:51:CB:F6:AF:4E:79:C9:87:74:59:6E:9F Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 6D15041F09F90E4C51326AD8DD1A9CAD71E4EF00 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa Signing time: Sat 01 Nov 2025 00:08:06 +0000 ROA not before: Sat 01 Nov 2025 00:03:06 +0000 ROA not after: Sat 31 Oct 2026 00:08:06 +0000 asID: 834 IP address blocks: 104.234.40.0/23 maxlen: 24 104.234.136.0/24 maxlen: 24 104.234.177.0/24 maxlen: 24 104.234.192.0/24 maxlen: 24 104.234.194.0/24 maxlen: 24 104.234.201.0/24 maxlen: 24 104.234.202.0/23 maxlen: 24 104.234.206.0/23 maxlen: 24 104.234.209.0/24 maxlen: 24 104.234.215.0/24 maxlen: 24 206.53.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 08:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:15:04:1f:09:f9:0e:4c:51:32:6a:d8:dd:1a:9c:ad:71:e4:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Nov 1 00:03:06 2025 GMT Not After : Oct 31 00:08:06 2026 GMT Subject: CN=B9DF955097B3A9E451CBF6AF4E79C98774596E9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a0:75:d8:9b:0b:55:51:b4:5b:31:87:2a:44: 28:9b:7b:58:be:df:aa:05:f6:f7:23:d8:1d:49:a0: e9:de:f0:e0:fc:6e:73:16:2e:b0:7f:a6:83:fb:3f: 3f:2d:76:4c:26:49:49:67:b1:b3:22:41:e2:46:bd: fe:e5:38:ed:cd:b9:f1:fe:ae:6f:4a:97:6c:d6:fc: 8f:3a:1c:b8:33:72:30:7b:f3:60:f3:06:be:03:7d: ca:5e:5e:52:37:bc:4c:ea:8a:3c:30:66:80:66:49: 23:e9:1e:30:63:24:e7:fe:9d:fa:8d:0f:f6:30:3c: 55:24:25:15:36:85:f1:55:7c:4a:fe:03:45:4f:97: f7:97:cf:01:a3:72:56:ee:db:b6:fe:ed:c1:a0:56: 8e:9f:b3:f8:39:b8:f5:86:74:00:ec:f4:65:53:05: 85:39:42:a7:71:0f:b3:e6:47:46:b5:20:43:ef:4d: 9b:f4:29:b1:8a:0c:dc:8e:af:83:9b:fa:bc:31:a3: 55:29:82:26:9f:11:47:b5:55:5b:38:39:8e:56:79: 43:03:4b:e4:66:3f:2a:f2:07:a3:7c:3e:df:a6:71: 65:26:13:50:78:2d:0c:36:22:7a:30:bb:97:0e:a6: 24:03:e0:e9:54:a8:b8:35:c7:5b:a6:84:b0:3b:36: 89:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DF:95:50:97:B3:A9:E4:51:CB:F6:AF:4E:79:C9:87:74:59:6E:9F X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.40.0/23 104.234.136.0/24 104.234.177.0/24 104.234.192.0/24 104.234.194.0/24 104.234.201.0-104.234.203.255 104.234.206.0/23 104.234.209.0/24 104.234.215.0/24 206.53.63.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:ae:12:91:73:a3:62:48:05:fa:c5:6a:a3:e4:f7:47:93:5f: 98:7c:af:4c:a2:01:b6:be:57:5e:70:f2:6e:ea:40:b6:61:44: c8:bb:a0:d4:0f:40:82:dc:8c:08:a2:26:1f:65:9a:85:a1:ea: 31:c2:ba:8c:e3:2e:65:9b:e6:1b:5a:9b:71:bb:ab:f5:67:4c: eb:79:23:f8:00:5a:55:26:5c:bf:fd:18:60:b6:e9:c3:73:3d: 8e:30:17:19:8e:25:64:2e:f1:d6:c8:9c:c3:5c:a4:3f:24:9b: 77:d8:41:11:18:9f:96:91:34:17:39:0a:df:1b:84:45:bd:35: 9a:ff:8a:fe:e8:6e:5f:76:97:79:52:f2:69:e5:d0:ef:64:a0: de:fe:4b:1a:0d:87:05:e4:4f:9b:31:0c:5d:eb:5c:96:47:d7: f3:44:7a:ed:8f:31:6d:e2:70:cc:2e:d0:66:98:7f:be:e9:4c: 88:2b:2a:33:f5:14:aa:77:0b:df:a8:8b:dc:f5:ea:b3:e5:1e: af:bd:30:58:59:c0:17:1c:44:84:2a:a1:60:35:dd:a4:40:78: ff:36:65:40:19:6e:80:16:e2:71:25:a4:cb:e9:64:67:20:c2: cb:e5:0d:44:6c:34:88:c3:bb:26:56:00:b9:54:c8:b9:0a:d7: 69:36:f3:75 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIUbRUEHwn5DkxRMmrY3RqcrXHk7wAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMTAxMDAwMzA2WhcNMjYxMDMxMDAwODA2 WjAzMTEwLwYDVQQDEyhCOURGOTU1MDk3QjNBOUU0NTFDQkY2QUY0RTc5Qzk4Nzc0 NTk2RTlGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqB12JsLVVG0 WzGHKkQom3tYvt+qBfb3I9gdSaDp3vDg/G5zFi6wf6aD+z8/LXZMJklJZ7GzIkHi Rr3+5Tjtzbnx/q5vSpds1vyPOhy4M3Iwe/Ng8wa+A33KXl5SN7xM6oo8MGaAZkkj 6R4wYyTn/p36jQ/2MDxVJCUVNoXxVXxK/gNFT5f3l88Bo3JW7tu2/u3BoFaOn7P4 Obj1hnQA7PRlUwWFOUKncQ+z5kdGtSBD702b9Cmxigzcjq+Dm/q8MaNVKYImnxFH tVVbODmOVnlDA0vkZj8q8gejfD7fpnFlJhNQeC0MNiJ6MLuXDqYkA+DpVKi4Ncdb poSwOzaJnwIDAQABo4ICujCCArYwHQYDVR0OBBYEFLnflVCXs6nkUcv2r055yYd0 WW6fMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBggr BgEFBQcBBwEB/wROMEwwSgQCAAEwRAMEAWjqKAMEAGjqiAMEAGjqsQMEAGjqwAME AGjqwjAMAwQAaOrJAwQCaOrIAwQBaOrOAwQAaOrRAwQAaOrXAwQAzjU/MA0GCSqG SIb3DQEBCwUAA4IBAQB7rhKRc6NiSAX6xWqj5PdHk1+YfK9MogG2vldecPJu6kC2 YUTIu6DUD0CC3IwIoiYfZZqFoeoxwrqM4y5lm+YbWptxu6v1Z0zreSP4AFpVJly/ /RhgtunDcz2OMBcZjiVkLvHWyJzDXKQ/JJt32EERGJ+WkTQXOQrfG4RFvTWa/4r+ 6G5fdpd5UvJp5dDvZKDe/ksaDYcF5E+bMQxd61yWR9fzRHrtjzFt4nDMLtBmmH++ 6UyIKyoz9RSqdwvfqIvc9eqz5R6vvTBYWcAXHESEKqFgNd2kQHj/NmVAGW6AFuJx JaTL6WRnIMLL5Q1EbDSIw7smVgC5VMi5CtdpNvN1 -----END CERTIFICATE-----Generated at Tue Nov 4 19:21:51 2025 by rpki-client