$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS21859.roa File: AS21859.roa (raw, json) Hash identifier: sHS5Tm5inp0GvsD077IEXvgRkPBOe5SELS3JSHCJ1rY= Subject key identifier: E6:47:17:43:2E:F3:76:42:B9:D5:1D:8A:D4:C2:96:FA:FD:F6:7A:95 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 2A99D848C1A8634E1C92151C42105A52AD28506A Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS21859.roa Signing time: Tue 23 Sep 2025 08:13:26 +0000 ROA not before: Tue 23 Sep 2025 08:08:26 +0000 ROA not after: Tue 22 Sep 2026 08:13:26 +0000 asID: 21859 IP address blocks: 157.254.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 16:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:99:d8:48:c1:a8:63:4e:1c:92:15:1c:42:10:5a:52:ad:28:50:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Sep 23 08:08:26 2025 GMT Not After : Sep 22 08:13:26 2026 GMT Subject: CN=E64717432EF37642B9D51D8AD4C296FAFDF67A95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:cc:65:d2:47:ab:6d:35:8b:7f:6e:b8:aa:b4: 61:a4:1d:bf:c8:73:f4:0a:4a:39:b5:c4:6f:1a:b4: 2f:ae:8d:6f:4a:f2:51:8a:2e:9d:5f:7a:e1:8b:e6: db:35:48:3f:ac:15:72:fc:6b:75:b5:a8:16:ff:52: 1d:36:93:f2:b0:b1:ba:23:c8:2e:df:a4:6c:52:7d: bc:7d:4f:4d:7d:3b:1d:0d:0d:ad:db:2e:b3:88:f6: 9e:28:ad:a7:f3:a6:85:88:bd:d9:98:d6:5b:d1:3b: 60:20:73:49:98:9e:a7:fc:31:05:ab:11:09:87:57: e9:f7:74:61:8e:3f:b7:36:bb:70:14:3a:6b:39:55: c5:29:99:c2:83:51:c4:e2:7b:e9:9c:ef:64:b8:5e: 4f:ac:34:fa:cb:9c:59:0e:f2:7b:32:e3:51:9a:90: c1:75:38:60:15:8f:a1:3f:97:b8:95:2f:98:d9:f3: 60:52:37:25:08:77:29:b3:0f:31:87:9b:97:0e:a3: ec:c9:7b:92:7d:ae:77:63:9a:df:ea:ab:2e:80:fc: ba:a4:db:af:9e:d4:91:af:a1:0f:7f:99:c9:3d:26: 49:e1:86:68:72:6b:f4:c5:90:ad:42:12:b1:8e:df: 5d:44:a4:40:e4:2e:0e:60:c2:45:f8:5d:1a:67:21: 2a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:47:17:43:2E:F3:76:42:B9:D5:1D:8A:D4:C2:96:FA:FD:F6:7A:95 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS21859.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.191.0/24 Signature Algorithm: sha256WithRSAEncryption 05:26:f6:b9:2c:e1:ef:f5:da:59:cf:70:cb:dd:fb:ff:2d:2b: 61:29:67:35:61:6e:c4:1c:7d:d4:5e:6c:19:3d:cf:bf:49:01: 3a:3b:2b:b2:91:e7:b8:8b:ff:47:9e:3f:6f:28:17:65:d9:af: 02:b0:26:cc:05:70:c0:7a:8a:c8:6c:45:98:c0:bc:04:21:8f: 98:a9:7e:ca:f1:e3:dc:82:31:fa:e9:1e:69:64:6f:7a:6e:cb: 12:96:23:ef:f4:5d:07:e9:bc:ec:7e:67:b0:10:d1:82:61:65: 3c:b1:70:95:f9:69:ed:e7:72:86:d0:11:11:8d:30:59:79:34: 95:bf:41:ac:1e:db:21:ff:0a:80:92:ce:a8:6a:c9:0f:91:b5: cd:f8:d2:3a:96:7d:bc:20:8c:6a:82:57:4f:23:c1:00:51:8e: 70:18:43:6d:60:af:15:ae:9a:39:90:d8:45:0e:3b:38:e9:dc: 3d:cb:0d:2f:9e:b7:70:2f:b2:1a:38:6b:3d:25:01:65:2e:4b: 1a:5e:e2:2c:e1:e7:15:d5:99:9c:04:ce:a8:f0:6b:b9:70:9b: 10:d3:4b:04:6e:02:36:59:0a:0a:f2:20:b6:cc:9a:a1:24:23: c9:6b:07:a2:7f:ad:b2:42:14:74:7c:19:7b:eb:dd:ec:e5:49: 6f:ca:89:ae -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUKpnYSMGoY04ckhUcQhBaUq0oUGowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwOTIzMDgwODI2WhcNMjYwOTIyMDgxMzI2 WjAzMTEwLwYDVQQDEyhFNjQ3MTc0MzJFRjM3NjQyQjlENTFEOEFENEMyOTZGQUZE RjY3QTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sxl0kerbTWL f264qrRhpB2/yHP0Cko5tcRvGrQvro1vSvJRii6dX3rhi+bbNUg/rBVy/Gt1tagW /1IdNpPysLG6I8gu36RsUn28fU9NfTsdDQ2t2y6ziPaeKK2n86aFiL3ZmNZb0Ttg IHNJmJ6n/DEFqxEJh1fp93Rhjj+3NrtwFDprOVXFKZnCg1HE4nvpnO9kuF5PrDT6 y5xZDvJ7MuNRmpDBdThgFY+hP5e4lS+Y2fNgUjclCHcpsw8xh5uXDqPsyXuSfa53 Y5rf6qsugPy6pNuvntSRr6EPf5nJPSZJ4YZocmv0xZCtQhKxjt9dRKRA5C4OYMJF +F0aZyEqyQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFOZHF0Mu83ZCudUditTClvr9 9nqVMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzIxODU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf6/MA0GCSqGSIb3DQEBCwUAA4IB AQAFJva5LOHv9dpZz3DL3fv/LSthKWc1YW7EHH3UXmwZPc+/SQE6Oyuykee4i/9H nj9vKBdl2a8CsCbMBXDAeorIbEWYwLwEIY+YqX7K8ePcgjH66R5pZG96bssSliPv 9F0H6bzsfmewENGCYWU8sXCV+Wnt53KG0BERjTBZeTSVv0GsHtsh/wqAks6oaskP kbXN+NI6ln28IIxqgldPI8EAUY5wGENtYK8Vrpo5kNhFDjs46dw9yw0vnrdwL7Ia OGs9JQFlLksaXuIs4ecV1ZmcBM6o8Gu5cJsQ00sEbgI2WQoK8iC2zJqhJCPJawei f62yQhR0fBl7693s5Ulvyomu -----END CERTIFICATE-----Generated at Sun Oct 19 23:12:29 2025 by rpki-client