$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa File: AS834.roa (raw, json) Hash identifier: 2oEQHd6b6vRNTcQ+3PlEajMhkb/fuTQsFtvePasBJAM= Subject key identifier: DE:D2:8D:3F:D8:2C:EF:96:22:65:EA:AC:5C:29:2C:E4:FA:5B:15:30 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 3BB6FC792718977B6C77D210BC70E9A6471D46F9 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa Signing time: Mon 04 Aug 2025 06:06:46 +0000 ROA not before: Mon 04 Aug 2025 06:01:46 +0000 ROA not after: Mon 03 Aug 2026 06:06:46 +0000 asID: 834 IP address blocks: 64.50.163.0/24 maxlen: 24 64.50.166.0/24 maxlen: 24 64.50.176.0/22 maxlen: 24 64.50.182.0/23 maxlen: 24 64.50.188.0/24 maxlen: 24 67.210.107.0/24 maxlen: 24 74.50.0.0/24 maxlen: 24 74.50.3.0/24 maxlen: 24 74.50.6.0/24 maxlen: 24 74.50.8.0/24 maxlen: 24 190.92.165.0/24 maxlen: 24 190.92.166.0/23 maxlen: 24 192.228.115.0/24 maxlen: 24 192.228.120.0/24 maxlen: 24 198.23.186.0/24 maxlen: 24 209.200.233.0/24 maxlen: 24 209.200.237.0/24 maxlen: 24 209.200.240.0/24 maxlen: 24 216.97.228.0/23 maxlen: 24 216.97.235.0/24 maxlen: 24 216.227.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b6:fc:79:27:18:97:7b:6c:77:d2:10:bc:70:e9:a6:47:1d:46:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Aug 4 06:01:46 2025 GMT Not After : Aug 3 06:06:46 2026 GMT Subject: CN=DED28D3FD82CEF962265EAAC5C292CE4FA5B1530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5e:b9:30:1d:13:a9:a9:8c:11:53:b1:44:5f: fa:fa:17:47:f0:b1:32:4f:dd:cd:cc:64:a9:17:c3: 98:44:58:81:5f:f4:54:56:e4:6c:2e:f0:78:29:44: 1e:15:15:4a:ab:a3:2c:44:70:49:1e:fc:fe:56:12: 90:23:07:98:9f:16:e4:88:db:ef:b1:dd:5e:82:01: a3:d6:e6:1d:29:bd:66:e6:8b:e6:e5:81:20:76:93: df:78:21:1f:a4:a2:c6:02:ba:4c:1f:e0:40:50:37: 48:49:3b:16:bc:b1:ac:40:4d:f9:d1:75:0b:be:26: f0:a5:62:eb:6c:3f:c7:14:9b:68:ae:93:49:98:37: bc:52:53:ff:51:75:47:36:87:8d:52:24:e1:ac:fd: 1d:20:a2:2e:29:e9:03:e7:fd:e3:b1:82:9b:9b:a5: 2d:76:a5:50:65:48:5f:23:00:74:66:98:96:dd:8e: 1d:48:61:95:ee:c2:ee:be:26:4c:31:3a:9c:5a:39: 7b:53:85:e6:93:bc:97:d6:d3:93:99:78:6d:36:4f: c2:b9:1a:61:0d:9b:64:84:0f:77:2f:f0:46:16:31: b5:e0:0f:01:bc:4d:db:0a:92:38:dc:d5:77:78:f9: a1:25:59:cb:61:d0:f4:d4:a7:13:01:2d:d1:ff:da: e8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D2:8D:3F:D8:2C:EF:96:22:65:EA:AC:5C:29:2C:E4:FA:5B:15:30 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.50.163.0/24 64.50.166.0/24 64.50.176.0/22 64.50.182.0/23 64.50.188.0/24 67.210.107.0/24 74.50.0.0/24 74.50.3.0/24 74.50.6.0/24 74.50.8.0/24 190.92.165.0-190.92.167.255 192.228.115.0/24 192.228.120.0/24 198.23.186.0/24 209.200.233.0/24 209.200.237.0/24 209.200.240.0/24 216.97.228.0/23 216.97.235.0/24 216.227.216.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:26:4f:d4:e7:41:a7:f4:83:86:77:e5:13:20:29:91:6c:a0: 96:ba:63:ba:10:c2:80:55:ce:e5:a2:9f:32:2a:87:89:6d:cb: 6e:da:6c:05:d2:80:35:39:81:2c:d6:f3:7c:d2:85:cf:d3:2a: 3c:c6:f8:f6:59:1c:02:7f:fa:ff:27:c4:15:bb:2b:8c:4f:06: 3c:53:44:41:36:0e:96:6c:4c:43:33:4b:4e:59:f4:53:9d:c4: 5e:74:c8:ea:0d:36:b8:8c:c3:12:61:25:0c:47:2b:d6:c8:5b: 3f:4d:69:bd:39:ce:d5:9e:93:63:3c:00:4e:61:ee:fc:f4:8e: 53:f6:d4:4a:bb:17:02:63:a6:65:c4:6f:0f:a9:20:4c:a0:34: 37:ce:0a:69:47:4c:1e:a9:91:7f:50:f5:36:dd:60:a5:34:a7: 4d:c7:07:a5:5d:86:11:18:4f:81:c5:53:ca:ad:9d:07:9c:62: d5:c2:d8:e7:02:68:f3:41:27:27:0d:ce:1a:4d:78:a2:7f:20: 3c:75:f4:c8:50:10:d7:6b:92:0f:1f:64:12:aa:6f:a0:99:c0: cc:40:96:b6:e4:2f:3c:ba:a3:33:5c:ee:d9:96:d7:2a:9e:c4: ab:0b:8a:f0:42:76:a9:be:84:ae:e3:c0:c0:c7:83:5d:e6:88: eb:11:d4:20 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUO7b8eScYl3tsd9IQvHDppkcdRvkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwODA0MDYwMTQ2WhcNMjYwODAzMDYwNjQ2 WjAzMTEwLwYDVQQDEyhERUQyOEQzRkQ4MkNFRjk2MjI2NUVBQUM1QzI5MkNFNEZB NUIxNTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5165MB0TqamM EVOxRF/6+hdH8LEyT93NzGSpF8OYRFiBX/RUVuRsLvB4KUQeFRVKq6MsRHBJHvz+ VhKQIweYnxbkiNvvsd1eggGj1uYdKb1m5ovm5YEgdpPfeCEfpKLGArpMH+BAUDdI STsWvLGsQE350XULvibwpWLrbD/HFJtorpNJmDe8UlP/UXVHNoeNUiThrP0dIKIu KekD5/3jsYKbm6UtdqVQZUhfIwB0ZpiW3Y4dSGGV7sLuviZMMTqcWjl7U4Xmk7yX 1tOTmXhtNk/CuRphDZtkhA93L/BGFjG14A8BvE3bCpI43NV3ePmhJVnLYdD01KcT AS3R/9ro1wIDAQABo4IC+zCCAvcwHQYDVR0OBBYEFN7SjT/YLO+WImXqrFwpLOT6 WxUwMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBnQYI KwYBBQUHAQcBAf8EgY0wgYowgYcEAgABMIGAAwQAQDKjAwQAQDKmAwQCQDKwAwQB QDK2AwQAQDK8AwQAQ9JrAwQASjIAAwQASjIDAwQASjIGAwQASjIIMAwDBAC+XKUD BAO+XKADBADA5HMDBADA5HgDBADGF7oDBADRyOkDBADRyO0DBADRyPADBAHYYeQD BADYYesDBAHY49gwDQYJKoZIhvcNAQELBQADggEBABsmT9TnQaf0g4Z35RMgKZFs oJa6Y7oQwoBVzuWinzIqh4lty27abAXSgDU5gSzW83zShc/TKjzG+PZZHAJ/+v8n xBW7K4xPBjxTREE2DpZsTEMzS05Z9FOdxF50yOoNNriMwxJhJQxHK9bIWz9Nab05 ztWek2M8AE5h7vz0jlP21Eq7FwJjpmXEbw+pIEygNDfOCmlHTB6pkX9Q9TbdYKU0 p03HB6VdhhEYT4HFU8qtnQecYtXC2OcCaPNBJycNzhpNeKJ/IDx19MhQENdrkg8f ZBKqb6CZwMxAlrbkLzy6ozNc7tmW1yqexKsLivBCdqm+hK7jwMDHg13miOsR1CA= -----END CERTIFICATE-----Generated at Mon Aug 4 18:20:54 2025 by rpki-client