$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa File: AS834.roa (raw, json) Hash identifier: wH094fSRkgG313WNuVmrwRkQy7rnHR6iGDqARhoehGM= Subject key identifier: 10:9B:4C:D6:BF:B7:F2:40:A8:07:07:6A:07:C9:36:A4:A7:A3:9C:C8 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 1CE3F00A1002DA3B74288A285A76346690AF4F8A Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa Signing time: Wed 23 Apr 2025 00:00:24 +0000 ROA not before: Tue 22 Apr 2025 23:55:24 +0000 ROA not after: Wed 22 Apr 2026 00:00:24 +0000 asID: 834 IP address blocks: 157.254.34.0/23 maxlen: 24 157.254.128.0/22 maxlen: 24 157.254.144.0/21 maxlen: 24 157.254.166.0/24 maxlen: 24 157.254.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Apr 2025 23:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e3:f0:0a:10:02:da:3b:74:28:8a:28:5a:76:34:66:90:af:4f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Apr 22 23:55:24 2025 GMT Not After : Apr 22 00:00:24 2026 GMT Subject: CN=109B4CD6BFB7F240A807076A07C936A4A7A39CC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:68:fa:12:c6:5c:de:24:16:2d:e5:1d:f5:57: 56:39:00:42:39:72:7d:06:ed:e5:72:71:7f:e4:c0: b4:60:30:d7:0e:34:80:02:9e:78:d0:90:ce:44:47: 83:5e:1c:12:c0:2e:ef:44:25:95:42:f4:2d:b3:e5: 62:0e:96:8d:ef:53:61:fa:48:25:12:83:56:0e:c8: fb:37:15:39:b2:cc:45:5c:93:a4:7f:88:5b:b8:5c: 31:98:0f:31:4b:05:f9:15:bd:1a:80:e1:02:e5:7c: 37:12:40:c4:b2:90:5f:61:0d:b2:be:ab:56:87:b8: ae:0a:72:a0:6d:00:8e:de:01:a5:e7:e5:9b:e2:a9: 51:4e:14:b6:95:fa:39:3a:c1:41:56:6c:08:28:15: 3c:a0:a2:f3:e9:43:cd:d6:9d:26:33:af:17:97:bc: a1:0f:02:96:cc:08:d9:80:e6:dd:b7:0a:50:e1:0b: 42:75:d1:9f:fc:c0:fd:b4:1c:f9:3e:65:5d:98:df: 6d:f7:ab:b3:cd:91:73:de:19:2b:22:3b:b1:c1:8c: 31:3a:07:52:99:ee:97:1d:a8:fc:89:3a:24:8e:d4: 6c:cb:4f:23:93:a9:33:6c:36:f6:da:12:60:13:29: f0:b7:f9:e7:66:ef:6e:bb:3d:9d:fe:2e:1c:02:7c: a9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9B:4C:D6:BF:B7:F2:40:A8:07:07:6A:07:C9:36:A4:A7:A3:9C:C8 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.34.0/23 157.254.128.0/22 157.254.144.0/21 157.254.166.0/24 157.254.230.0/24 Signature Algorithm: sha256WithRSAEncryption 77:9e:fe:5b:3f:ca:5d:0f:65:0c:aa:7f:60:7d:4f:68:f5:e5: f8:a7:33:f4:83:38:85:f4:f6:71:c9:d6:d8:f8:ef:9b:1d:aa: 7b:b5:24:40:7a:7e:d0:72:66:45:46:bd:36:11:eb:6e:72:e2: 06:2e:38:26:a0:d1:2d:b4:85:7e:c0:cc:6a:c9:29:ef:ba:1a: 2b:73:67:f8:cf:d4:67:a7:25:f2:b8:83:e2:2f:53:c1:6d:2f: 1a:52:3e:42:5b:1d:5e:9a:46:7f:72:b6:ae:b0:3f:c8:b5:9b: 5d:b4:07:92:e3:ab:98:b7:c0:66:fb:41:1e:85:6d:f2:3b:cb: 79:1b:7a:80:16:8d:83:50:cf:68:2a:79:6b:1e:7f:64:ce:43: 68:33:03:49:ab:bb:36:1b:f3:c7:98:4f:18:60:7b:4f:d1:48: c6:d7:24:b3:e1:bf:b5:83:0a:51:81:f9:8b:1b:1b:22:65:f4: aa:6d:69:38:99:cb:9e:55:24:f9:19:bd:a6:b0:0c:10:e8:31: 75:01:d7:ae:93:8f:7f:f2:4f:34:2a:57:a6:84:04:6d:6d:4c: ea:f1:32:f8:f4:15:1c:d5:62:50:df:16:bf:41:c6:19:d6:04: 46:20:31:0c:6c:c1:c8:05:d4:1f:1c:77:9c:40:89:81:2c:2f: 14:33:05:e6 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgIUHOPwChAC2jt0KIooWnY0ZpCvT4owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwNDIyMjM1NTI0WhcNMjYwNDIyMDAwMDI0 WjAzMTEwLwYDVQQDEygxMDlCNENENkJGQjdGMjQwQTgwNzA3NkEwN0M5MzZBNEE3 QTM5Q0M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmj6EsZc3iQW LeUd9VdWOQBCOXJ9Bu3lcnF/5MC0YDDXDjSAAp540JDOREeDXhwSwC7vRCWVQvQt s+ViDpaN71Nh+kglEoNWDsj7NxU5ssxFXJOkf4hbuFwxmA8xSwX5Fb0agOEC5Xw3 EkDEspBfYQ2yvqtWh7iuCnKgbQCO3gGl5+Wb4qlRThS2lfo5OsFBVmwIKBU8oKLz 6UPN1p0mM68Xl7yhDwKWzAjZgObdtwpQ4QtCddGf/MD9tBz5PmVdmN9t96uzzZFz 3hkrIjuxwYwxOgdSme6XHaj8iTokjtRsy08jk6kzbDb22hJgEynwt/nnZu9uuz2d /i4cAnypYwIDAQABo4IClDCCApAwHQYDVR0OBBYEFBCbTNa/t/JAqAcHagfJNqSn o5zIMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3Bggr BgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAZ3+IgMEAp3+gAMEA53+kAMEAJ3+pgME AJ3+5jANBgkqhkiG9w0BAQsFAAOCAQEAd57+Wz/KXQ9lDKp/YH1PaPXl+Kcz9IM4 hfT2ccnW2Pjvmx2qe7UkQHp+0HJmRUa9NhHrbnLiBi44JqDRLbSFfsDMaskp77oa K3Nn+M/UZ6cl8riD4i9TwW0vGlI+QlsdXppGf3K2rrA/yLWbXbQHkuOrmLfAZvtB HoVt8jvLeRt6gBaNg1DPaCp5ax5/ZM5DaDMDSau7Nhvzx5hPGGB7T9FIxtcks+G/ tYMKUYH5ixsbImX0qm1pOJnLnlUk+Rm9prAMEOgxdQHXrpOPf/JPNCpXpoQEbW1M 6vEy+PQVHNViUN8Wv0HGGdYERiAxDGzByAXUHxx3nECJgSwvFDMF5g== -----END CERTIFICATE-----Generated at Sat Apr 26 15:51:22 2025 by rpki-client