$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa File: AS834.roa (raw, json) Hash identifier: /PIRwDVqK0Gh0U2sWWBDmBRCDrTTXD1qzmLywdOhoDo= Subject key identifier: 2D:44:ED:8F:53:7C:2D:9D:42:27:44:53:F2:C1:C0:42:05:3C:CD:3E Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 5C4552BAB361524784F00849CB7A5F46F66B2E06 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa Signing time: Mon 02 Mar 2026 00:03:57 +0000 ROA not before: Sun 01 Mar 2026 23:58:57 +0000 ROA not after: Mon 01 Mar 2027 00:03:57 +0000 asID: 834 IP address blocks: 157.254.29.0/24 maxlen: 24 157.254.130.0/23 maxlen: 24 157.254.144.0/21 maxlen: 24 157.254.155.0/24 maxlen: 24 157.254.161.0/24 maxlen: 24 157.254.172.0/24 maxlen: 24 157.254.191.0/24 maxlen: 24 157.254.208.0/24 maxlen: 24 157.254.210.0/23 maxlen: 24 157.254.212.0/22 maxlen: 24 157.254.218.0/24 maxlen: 24 199.103.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 02:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:45:52:ba:b3:61:52:47:84:f0:08:49:cb:7a:5f:46:f6:6b:2e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Mar 1 23:58:57 2026 GMT Not After : Mar 1 00:03:57 2027 GMT Subject: CN=2D44ED8F537C2D9D42274453F2C1C042053CCD3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cc:5a:2d:4c:10:4d:f1:38:06:53:49:78:38: 6f:1e:84:b8:ed:27:06:7f:ac:e7:23:92:10:91:ff: 4b:83:4f:06:3b:19:fb:96:6a:dc:7d:22:10:e7:9c: 68:82:3a:ab:78:65:74:55:eb:d5:0d:74:93:b0:fa: c4:23:ac:b6:cb:56:7b:9d:7d:61:8a:06:65:0b:db: b3:57:b0:c8:af:4c:29:d3:b6:e5:40:f2:b8:34:3e: 91:3e:8d:98:14:88:75:ed:c3:c7:d6:78:2c:45:75: 12:f7:9a:1e:81:73:83:c3:1b:81:77:a1:6d:cc:07: 9d:37:ea:c9:b8:dd:3b:6b:8d:5b:52:e2:4f:0e:eb: 1e:01:62:8c:9a:71:5d:7a:6b:58:98:3c:1c:36:1d: e0:18:77:58:5b:8a:57:53:26:2c:0d:17:db:c1:1d: b3:32:79:d0:8a:77:98:bf:d2:c1:42:6e:a1:eb:22: ca:af:e2:65:a9:0d:a9:22:fb:59:8f:c3:95:28:10: 5c:2a:7f:11:d8:6e:b6:18:94:a8:85:b5:bf:a3:25: 52:48:0c:23:84:2a:5d:6b:79:95:c8:67:c3:3b:b0: 36:6e:b8:92:14:99:44:98:89:bc:56:ca:2f:44:18: e5:b4:57:30:77:c2:ab:25:77:8b:15:20:a4:97:2b: e5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:44:ED:8F:53:7C:2D:9D:42:27:44:53:F2:C1:C0:42:05:3C:CD:3E X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.29.0/24 157.254.130.0/23 157.254.144.0/21 157.254.155.0/24 157.254.161.0/24 157.254.172.0/24 157.254.191.0/24 157.254.208.0/24 157.254.210.0-157.254.215.255 157.254.218.0/24 199.103.95.0/24 Signature Algorithm: sha256WithRSAEncryption 58:3b:b2:e4:44:4c:27:6e:5f:32:72:ed:55:49:cb:d1:71:00: 9b:db:43:b5:60:34:ba:2e:23:c8:6b:29:94:cc:1e:8a:0c:b1: d1:a7:06:e8:8a:00:08:3d:4a:91:46:f5:2e:44:2f:51:09:69: 16:a3:95:ff:61:c7:57:47:cb:81:95:8a:24:3e:75:e7:54:ac: ab:13:5a:35:16:25:b3:f5:3d:b6:58:6f:f2:6c:9a:b6:cf:41: 72:32:ec:3f:c3:3d:8e:c5:21:71:33:d6:3c:d2:67:5a:c9:aa: 2f:ee:1c:9c:2b:09:8b:5e:3c:0e:73:1e:73:5b:c3:c6:a4:ad: fa:4c:3e:f9:4a:05:79:c3:cd:67:72:97:71:61:b3:9d:98:ee: 43:9d:73:01:ba:f4:b9:7c:f8:1f:ea:49:a1:6a:c4:06:3c:db: c2:ee:42:01:84:bd:d8:cc:a8:29:90:27:18:0a:37:00:77:66: 0a:93:04:3a:db:67:0e:41:d2:39:d4:c9:e2:a4:60:e0:b3:a1: 4a:7d:48:64:ae:8f:ab:0c:42:08:da:22:4f:4c:a9:70:cc:a9: cb:b8:ce:0d:b0:c0:9e:1f:3d:de:bb:e2:3d:14:be:29:d2:01: 41:88:b4:ce:ec:4e:fb:7f:69:9a:e6:82:72:5b:b0:50:86:70: c2:83:e8:86 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUXEVSurNhUkeE8AhJy3pfRvZrLgYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwMzAxMjM1ODU3WhcNMjcwMzAxMDAwMzU3 WjAzMTEwLwYDVQQDEygyRDQ0RUQ4RjUzN0MyRDlENDIyNzQ0NTNGMkMxQzA0MjA1 M0NDRDNFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sxaLUwQTfE4 BlNJeDhvHoS47ScGf6znI5IQkf9Lg08GOxn7lmrcfSIQ55xogjqreGV0VevVDXST sPrEI6y2y1Z7nX1higZlC9uzV7DIr0wp07blQPK4ND6RPo2YFIh17cPH1ngsRXUS 95oegXODwxuBd6FtzAedN+rJuN07a41bUuJPDuseAWKMmnFdemtYmDwcNh3gGHdY W4pXUyYsDRfbwR2zMnnQineYv9LBQm6h6yLKr+JlqQ2pIvtZj8OVKBBcKn8R2G62 GJSohbW/oyVSSAwjhCpda3mVyGfDO7A2briSFJlEmIm8VsovRBjltFcwd8KrJXeL FSCklyvl5wIDAQABo4ICwDCCArwwHQYDVR0OBBYEFC1E7Y9TfC2dQidEU/LBwEIF PM0+MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBjBggr BgEFBQcBBwEB/wRUMFIwUAQCAAEwSgMEAJ3+HQMEAZ3+ggMEA53+kAMEAJ3+mwME AJ3+oQMEAJ3+rAMEAJ3+vwMEAJ3+0DAMAwQBnf7SAwQDnf7QAwQAnf7aAwQAx2df MA0GCSqGSIb3DQEBCwUAA4IBAQBYO7LkREwnbl8ycu1VScvRcQCb20O1YDS6LiPI aymUzB6KDLHRpwboigAIPUqRRvUuRC9RCWkWo5X/YcdXR8uBlYokPnXnVKyrE1o1 FiWz9T22WG/ybJq2z0FyMuw/wz2OxSFxM9Y80mdayaov7hycKwmLXjwOcx5zW8PG pK36TD75SgV5w81ncpdxYbOdmO5DnXMBuvS5fPgf6kmhasQGPNvC7kIBhL3YzKgp kCcYCjcAd2YKkwQ622cOQdI51MnipGDgs6FKfUhkro+rDEII2iJPTKlwzKnLuM4N sMCeHz3eu+I9FL4p0gFBiLTO7E77f2ma5oJyW7BQhnDCg+iG -----END CERTIFICATE-----Generated at Mon Mar 2 04:26:48 2026 by rpki-client