$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS21859.roa File: AS21859.roa (raw, json) Hash identifier: x1hkYDku8nX1/bCjwNDomkLaF80GhP8b/Fs7arHB3Gw= Subject key identifier: 11:5A:21:5D:99:E8:78:3B:14:C4:77:1C:97:C8:24:E2:70:51:C3:8D Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 48384F843A5F0B725781C5E26CD35551B1209788 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS21859.roa Signing time: Tue 12 Aug 2025 10:25:33 +0000 ROA not before: Tue 12 Aug 2025 10:20:33 +0000 ROA not after: Tue 11 Aug 2026 10:25:33 +0000 asID: 21859 IP address blocks: 104.234.62.0/24 maxlen: 24 104.234.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 00:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:38:4f:84:3a:5f:0b:72:57:81:c5:e2:6c:d3:55:51:b1:20:97:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Aug 12 10:20:33 2025 GMT Not After : Aug 11 10:25:33 2026 GMT Subject: CN=115A215D99E8783B14C4771C97C824E27051C38D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dc:74:6a:48:df:61:10:3d:0f:51:5d:7c:16: ad:e8:0c:3c:61:99:81:ad:24:fb:9c:52:4f:3b:f0: 25:da:55:3b:b0:38:3f:55:7c:da:e0:fb:4f:0e:41: 39:7d:0d:59:b5:51:39:1b:03:e4:44:32:cd:c5:91: 91:f7:d5:b3:c4:29:e1:1a:0b:64:08:6d:1a:da:fb: a1:af:2c:8a:9c:86:56:16:9e:02:b7:57:17:56:0e: 30:57:8b:7c:de:8a:0d:e4:1a:c2:d7:a0:98:c7:2f: 48:0a:6c:9c:f9:fe:87:71:65:f4:2a:e0:65:c7:1c: 09:c6:0d:9f:d9:6e:c3:33:da:8f:00:a7:79:7a:02: 4d:c9:94:b4:23:72:4e:47:41:f5:2b:db:eb:2a:0c: 82:9f:e9:c2:c9:eb:80:da:75:e9:c5:e5:8d:7d:d3: 68:1f:3a:ac:f6:b6:f6:94:8f:3e:bb:af:01:ea:6d: 31:87:f4:a5:f2:b7:4b:ff:a6:fb:86:de:dd:06:22: eb:4e:96:89:be:45:e1:a8:2f:8f:2b:96:1e:1b:08: 34:97:4d:f9:dd:6b:a8:50:14:26:6a:5e:47:8c:f3: 79:65:78:f1:68:b6:38:37:da:4e:bd:38:5d:96:1d: f7:f4:a3:df:01:31:2f:f2:63:ad:03:79:e5:62:8d: 3c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5A:21:5D:99:E8:78:3B:14:C4:77:1C:97:C8:24:E2:70:51:C3:8D X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS21859.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.62.0/24 104.234.98.0/24 Signature Algorithm: sha256WithRSAEncryption 99:8d:a6:00:49:58:6d:13:98:c0:84:9a:bc:e4:85:7d:ec:18: a0:54:53:b6:47:d3:aa:fc:a8:ec:a1:fd:e2:23:e2:6f:f5:76: 61:6d:d7:19:44:6b:dd:5a:d7:bf:48:a8:bb:98:c0:32:76:1c: ad:6c:0a:9e:22:a2:07:40:af:94:a4:32:b8:25:7c:ae:05:e0: 14:ed:c9:ca:de:dd:7c:72:e1:f7:d3:89:fe:38:31:24:db:85: d4:9f:3f:ef:82:d7:ed:08:a9:90:2e:3c:95:29:94:56:30:bc: af:f2:a5:da:e7:0d:d0:c1:ad:0f:a8:ce:dd:b3:db:e9:b9:c8: 40:87:cc:fe:29:1c:bf:61:95:eb:0e:d5:c7:fd:3d:c1:42:4b: 9d:83:23:a6:f3:29:20:77:b0:7e:b5:c3:c6:98:3c:2d:60:e7: e3:65:4d:ed:ce:d4:29:bb:28:5b:ee:6e:07:e8:07:36:e6:36: 79:b0:aa:4f:6f:6e:00:b0:20:ed:71:1a:2f:d2:2d:d7:dd:02: 15:f2:6e:e1:9f:c4:c8:cb:2e:ed:03:3b:f8:67:a6:bd:7a:96: 86:14:ba:6a:b5:22:3e:4e:fb:df:16:aa:1b:17:99:2e:85:83: 47:b6:fe:5c:2b:e5:7c:44:bc:9b:86:35:fc:f8:02:78:9c:7c: c8:74:6f:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUSDhPhDpfC3JXgcXibNNVUbEgl4gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwODEyMTAyMDMzWhcNMjYwODExMTAyNTMz WjAzMTEwLwYDVQQDEygxMTVBMjE1RDk5RTg3ODNCMTRDNDc3MUM5N0M4MjRFMjcw NTFDMzhEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdx0akjfYRA9 D1FdfBat6Aw8YZmBrST7nFJPO/Al2lU7sDg/VXza4PtPDkE5fQ1ZtVE5GwPkRDLN xZGR99WzxCnhGgtkCG0a2vuhryyKnIZWFp4Ct1cXVg4wV4t83ooN5BrC16CYxy9I Cmyc+f6HcWX0KuBlxxwJxg2f2W7DM9qPAKd5egJNyZS0I3JOR0H1K9vrKgyCn+nC yeuA2nXpxeWNfdNoHzqs9rb2lI8+u68B6m0xh/Sl8rdL/6b7ht7dBiLrTpaJvkXh qC+PK5YeGwg0l0353WuoUBQmal5HjPN5ZXjxaLY4N9pOvThdlh339KPfATEv8mOt A3nlYo08twIDAQABo4IChDCCAoAwHQYDVR0OBBYEFBFaIV2Z6Hg7FMR3HJfIJOJw UcONMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIxODU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaOo+AwQAaOpiMA0GCSqGSIb3DQEB CwUAA4IBAQCZjaYASVhtE5jAhJq85IV97BigVFO2R9Oq/Kjsof3iI+Jv9XZhbdcZ RGvdWte/SKi7mMAydhytbAqeIqIHQK+UpDK4JXyuBeAU7cnK3t18cuH304n+ODEk 24XUnz/vgtftCKmQLjyVKZRWMLyv8qXa5w3Qwa0PqM7ds9vpuchAh8z+KRy/YZXr DtXH/T3BQkudgyOm8ykgd7B+tcPGmDwtYOfjZU3tztQpuyhb7m4H6Ac25jZ5sKpP b24AsCDtcRov0i3X3QIV8m7hn8TIyy7tAzv4Z6a9epaGFLpqtSI+TvvfFqobF5ku hYNHtv5cK+V8RLybhjX8+AJ4nHzIdG93 -----END CERTIFICATE-----Generated at Sat Aug 23 17:03:28 2025 by rpki-client