$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS21859.roa File: AS21859.roa (raw, json) Hash identifier: h4zaJxAh6Ovc/5imJByW/Q/6ytgVs1z2pnOjNltFAHA= Subject key identifier: E2:C4:87:50:AD:0D:CE:11:F4:C9:C4:71:88:39:AE:9B:73:05:C4:98 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 14E3576DA28C1D14C6B06754766D134D7156F7BE Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS21859.roa Signing time: Wed 06 May 2026 08:41:29 +0000 ROA not before: Wed 06 May 2026 08:36:29 +0000 ROA not after: Wed 05 May 2027 08:41:29 +0000 asID: 21859 IP address blocks: 40.27.35.0/24 maxlen: 24 40.183.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 15:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e3:57:6d:a2:8c:1d:14:c6:b0:67:54:76:6d:13:4d:71:56:f7:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: May 6 08:36:29 2026 GMT Not After : May 5 08:41:29 2027 GMT Subject: CN=E2C48750AD0DCE11F4C9C4718839AE9B7305C498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:75:60:a8:c5:4b:51:20:ca:bb:4d:38:b7:32: 5b:96:77:4a:3c:16:f5:20:78:1b:35:e9:15:8d:f1: 14:bf:90:5c:3e:5c:23:f6:cb:b1:ee:b3:4c:d0:34: bb:b9:cd:18:91:73:01:5e:32:50:9d:b3:e6:a5:c2: b3:53:42:4e:5c:c3:f1:d7:1a:18:6c:1f:0e:04:fc: 6d:77:9a:4e:8b:72:1d:ca:e9:20:36:19:dd:60:91: c7:9d:af:9b:0a:8c:60:f1:dd:e3:b8:40:7c:14:a4: dd:82:11:f3:d3:89:a1:9b:39:45:bf:a1:c9:b2:2c: 9b:fa:8f:d3:5f:00:c1:52:6e:33:77:ad:50:39:1c: da:a4:e0:77:9f:5d:06:f7:0a:fc:f5:df:4b:03:2c: 92:76:66:f7:b9:51:91:ec:15:f8:d7:d4:f7:40:f7: aa:31:5b:f1:86:11:ff:7f:eb:c2:31:97:41:10:f6: 7d:24:26:28:1c:0d:0e:b1:b9:f9:44:ac:20:c6:97: 21:00:06:48:2a:35:39:e5:54:40:2f:a0:b6:ab:a5: 51:b4:f8:0b:41:df:b3:85:c4:3e:f7:aa:fc:02:07: 52:b1:1f:9b:57:af:f3:cb:57:d0:5d:2f:32:15:7d: 19:43:51:55:d5:a0:34:9e:1e:2d:50:1f:3a:de:32: 6b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C4:87:50:AD:0D:CE:11:F4:C9:C4:71:88:39:AE:9B:73:05:C4:98 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS21859.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.35.0/24 40.183.227.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:d5:b9:09:6e:2b:70:9b:33:f0:9b:8c:3a:4f:f4:23:7a:2e: aa:f2:a9:74:fe:0e:71:6b:59:96:73:aa:13:30:ac:63:6d:8a: 85:aa:98:57:8e:ac:27:99:a8:dc:d9:f4:5a:7d:b5:08:89:f3: f9:72:35:43:fc:55:aa:c9:eb:6b:1b:33:c1:7c:81:87:ce:42: 38:b3:7b:86:d1:a7:92:ac:f3:33:b3:9a:48:f5:22:11:33:19: a5:ef:35:27:74:7e:42:24:c4:08:00:0c:ba:ae:73:9d:4c:a9: 13:5b:22:8d:af:02:60:92:0b:25:20:59:e0:33:77:fc:bd:e1: 21:c6:ff:13:d1:e0:06:da:35:2a:d4:bd:e0:7d:6e:8a:29:33: 35:90:33:53:d6:73:4f:c2:42:a8:70:e3:97:78:d3:3b:27:fb: cc:29:b0:dc:c0:19:e5:6f:de:c4:20:01:bb:62:c0:19:45:2a: 2a:07:94:2f:c0:42:79:6c:02:44:65:91:0e:9e:6d:63:62:97: 51:7a:82:94:9a:c9:9c:1c:61:52:e6:92:f4:32:1d:4f:15:7a: 51:45:fa:c5:30:3e:d2:01:7c:eb:cb:77:93:df:ae:a0:8b:08: 45:50:cf:7d:4a:c5:3b:95:0d:a4:22:4e:1d:e4:d7:27:49:fb: ac:32:67:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUFONXbaKMHRTGsGdUdm0TTXFW974wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwNTA2MDgzNjI5WhcNMjcwNTA1MDg0MTI5 WjAzMTEwLwYDVQQDEyhFMkM0ODc1MEFEMERDRTExRjRDOUM0NzE4ODM5QUU5Qjcz MDVDNDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHVgqMVLUSDK u004tzJblndKPBb1IHgbNekVjfEUv5BcPlwj9sux7rNM0DS7uc0YkXMBXjJQnbPm pcKzU0JOXMPx1xoYbB8OBPxtd5pOi3IdyukgNhndYJHHna+bCoxg8d3juEB8FKTd ghHz04mhmzlFv6HJsiyb+o/TXwDBUm4zd61QORzapOB3n10G9wr89d9LAyySdmb3 uVGR7BX419T3QPeqMVvxhhH/f+vCMZdBEPZ9JCYoHA0Osbn5RKwgxpchAAZIKjU5 5VRAL6C2q6VRtPgLQd+zhcQ+96r8AgdSsR+bV6/zy1fQXS8yFX0ZQ1FV1aA0nh4t UB863jJrrQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFOLEh1CtDc4R9MnEcYg5rptz BcSYMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIxODU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAKBsjAwQAKLfjMA0GCSqGSIb3DQEB CwUAA4IBAQCa1bkJbitwmzPwm4w6T/Qjei6q8ql0/g5xa1mWc6oTMKxjbYqFqphX jqwnmajc2fRafbUIifP5cjVD/FWqyetrGzPBfIGHzkI4s3uG0aeSrPMzs5pI9SIR Mxml7zUndH5CJMQIAAy6rnOdTKkTWyKNrwJgkgslIFngM3f8veEhxv8T0eAG2jUq 1L3gfW6KKTM1kDNT1nNPwkKocOOXeNM7J/vMKbDcwBnlb97EIAG7YsAZRSoqB5Qv wEJ5bAJEZZEOnm1jYpdReoKUmsmcHGFS5pL0Mh1PFXpRRfrFMD7SAXzry3eT366g iwhFUM99SsU7lQ2kIk4d5NcnSfusMmc8 -----END CERTIFICATE-----Generated at Wed May 13 01:06:18 2026 by rpki-client