$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS21859.roa File: AS21859.roa (raw, json) Hash identifier: xWjppBx+/954sQTAxzURoe+IxUCRT76zWOA5DuqPcgg= Subject key identifier: CE:68:9F:E8:E4:70:C6:E2:F0:FD:AB:CD:46:FB:BB:3D:2E:65:A0:FA Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 18DDF649B07475E88D456D1F31152B72A1DB4F5F Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS21859.roa Signing time: Fri 20 Mar 2026 03:00:24 +0000 ROA not before: Fri 20 Mar 2026 02:55:24 +0000 ROA not after: Fri 19 Mar 2027 03:00:24 +0000 asID: 21859 IP address blocks: 40.27.57.0/24 maxlen: 24 40.183.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:dd:f6:49:b0:74:75:e8:8d:45:6d:1f:31:15:2b:72:a1:db:4f:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Mar 20 02:55:24 2026 GMT Not After : Mar 19 03:00:24 2027 GMT Subject: CN=CE689FE8E470C6E2F0FDABCD46FBBB3D2E65A0FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b9:c2:7e:24:b0:94:e6:7b:45:6c:3b:02:b1: 13:ad:a1:7f:63:42:05:76:f8:46:b5:57:1e:27:5b: 2f:9d:c5:9e:97:99:9a:66:cf:83:09:5d:60:6a:33: f2:78:63:60:c7:af:a6:85:64:8d:6b:6f:f5:9f:3b: 13:a6:1f:e2:d1:cc:84:d7:f0:48:74:a0:f0:ee:42: 48:81:b2:23:f3:c2:d5:76:14:21:43:19:62:cb:ee: 2e:5e:ea:19:31:a0:67:4d:fe:23:6e:e8:7c:ff:4c: 4d:7f:ba:9c:19:18:c0:4a:70:07:7a:f4:c9:d8:95: ea:3e:96:75:a9:70:84:80:e2:10:19:e6:74:b3:37: 52:00:59:5f:93:0e:8d:bb:1d:65:b5:cc:7d:2c:58: 4d:86:59:fc:e9:86:84:4f:0d:fe:67:75:7d:9f:1f: 3b:ae:80:0b:d2:13:93:a4:95:70:33:3b:56:ad:f5: 59:e6:99:3e:bc:cf:6a:39:2a:c5:2d:11:a0:11:5a: 7d:d1:f5:3d:e3:64:9c:5b:27:35:4e:a1:6a:80:11: 3c:7b:dd:b2:26:7f:fc:95:34:93:62:3d:c9:25:53: 63:f0:da:b9:cc:13:71:5e:82:73:02:ca:6c:6e:4a: 64:a5:33:22:21:d1:4f:62:72:be:48:2e:d7:54:bd: 4f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:68:9F:E8:E4:70:C6:E2:F0:FD:AB:CD:46:FB:BB:3D:2E:65:A0:FA X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS21859.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.57.0/24 40.183.227.0/24 Signature Algorithm: sha256WithRSAEncryption b6:e8:ec:93:76:26:72:10:39:ff:c0:c3:f7:9e:13:ad:c3:42: ea:25:a3:9a:73:0e:95:bd:65:bd:d2:98:20:c2:8f:64:6d:a6: 21:46:e6:3c:9c:f3:43:dc:8f:39:e7:b0:e4:b1:bf:c3:16:b6: bc:d5:50:b3:2e:95:2b:12:57:d0:0b:a0:1f:84:17:6f:59:ad: 00:76:61:f0:45:65:65:85:1b:c4:6f:6f:14:a5:42:a5:9a:4b: 8c:63:e2:7f:28:0a:24:e7:19:2c:1f:68:81:47:28:88:0e:85: 83:e5:49:de:89:52:fc:74:e1:73:ae:0d:9f:b5:5f:7a:3f:b7: f3:94:84:30:10:9b:13:7b:77:d3:e8:ec:3a:f2:66:99:5e:dd: a1:5a:ef:26:9a:9a:0b:69:d4:e7:df:13:1d:5b:32:a3:aa:5b: 99:9b:4e:64:91:b5:83:69:b2:38:cd:68:c4:16:f9:73:3d:ff: bc:c2:47:63:5d:4a:eb:16:e3:db:20:7f:cb:8e:67:f4:58:73: 77:dc:06:f2:59:6a:16:b8:6e:53:fa:6b:4f:bc:3c:50:b0:a1: be:20:99:b0:31:17:5d:8f:7c:85:9f:e8:ea:d9:02:8c:9d:e7: d4:14:1f:3d:52:c4:7e:09:12:15:f0:54:fa:93:20:a6:8f:51: 2e:5e:9c:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUGN32SbB0deiNRW0fMRUrcqHbT18wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwMzIwMDI1NTI0WhcNMjcwMzE5MDMwMDI0 WjAzMTEwLwYDVQQDEyhDRTY4OUZFOEU0NzBDNkUyRjBGREFCQ0Q0NkZCQkIzRDJF NjVBMEZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rnCfiSwlOZ7 RWw7ArETraF/Y0IFdvhGtVceJ1svncWel5maZs+DCV1gajPyeGNgx6+mhWSNa2/1 nzsTph/i0cyE1/BIdKDw7kJIgbIj88LVdhQhQxliy+4uXuoZMaBnTf4jbuh8/0xN f7qcGRjASnAHevTJ2JXqPpZ1qXCEgOIQGeZ0szdSAFlfkw6Nux1ltcx9LFhNhln8 6YaETw3+Z3V9nx87roAL0hOTpJVwMztWrfVZ5pk+vM9qOSrFLRGgEVp90fU942Sc Wyc1TqFqgBE8e92yJn/8lTSTYj3JJVNj8Nq5zBNxXoJzAspsbkpkpTMiIdFPYnK+ SC7XVL1PPQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFM5on+jkcMbi8P2rzUb7uz0u ZaD6MB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIxODU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAKBs5AwQAKLfjMA0GCSqGSIb3DQEB CwUAA4IBAQC26OyTdiZyEDn/wMP3nhOtw0LqJaOacw6VvWW90pggwo9kbaYhRuY8 nPND3I8557Dksb/DFra81VCzLpUrElfQC6AfhBdvWa0AdmHwRWVlhRvEb28UpUKl mkuMY+J/KAok5xksH2iBRyiIDoWD5UneiVL8dOFzrg2ftV96P7fzlIQwEJsTe3fT 6Ow68maZXt2hWu8mmpoLadTn3xMdWzKjqluZm05kkbWDabI4zWjEFvlzPf+8wkdj XUrrFuPbIH/Ljmf0WHN33AbyWWoWuG5T+mtPvDxQsKG+IJmwMRddj3yFn+jq2QKM nefUFB89UsR+CRIV8FT6kyCmj1EuXpw4 -----END CERTIFICATE-----Generated at Thu Mar 26 17:33:30 2026 by rpki-client