$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS21859.roa File: AS21859.roa (raw, json) Hash identifier: 3J5m1acHW/Uqi6dLPszbEiLo7LZfu9mYGXUIxJAQDus= Subject key identifier: 41:A4:F8:8D:5B:32:70:31:2E:CA:1A:C3:95:59:43:FE:26:87:7C:93 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 06805CAA9F535F19516A8F95D8B0D92699E2708B Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS21859.roa Signing time: Thu 12 Jun 2025 02:52:40 +0000 ROA not before: Thu 12 Jun 2025 02:47:40 +0000 ROA not after: Thu 11 Jun 2026 02:52:40 +0000 asID: 21859 IP address blocks: 104.234.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 11:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:80:5c:aa:9f:53:5f:19:51:6a:8f:95:d8:b0:d9:26:99:e2:70:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jun 12 02:47:40 2025 GMT Not After : Jun 11 02:52:40 2026 GMT Subject: CN=41A4F88D5B3270312ECA1AC3955943FE26877C93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0e:1d:6b:44:55:07:bf:81:78:56:54:c9:1f: 46:cb:ba:25:51:d1:3f:14:13:ae:9c:59:94:8d:32: fc:a0:d5:db:8b:f6:b9:6b:b9:48:5b:74:0b:88:0b: c0:c3:56:8e:ae:fb:61:16:8f:b5:90:21:33:18:09: 9c:e7:21:4d:de:48:72:37:f5:68:49:a4:2d:d1:3a: f6:2c:ea:bb:93:81:6c:4b:a7:01:6b:e8:9b:c8:25: c5:cf:d5:65:9f:9f:1c:85:2b:2a:2e:ba:78:c7:d1: 64:a4:72:60:a2:15:6e:dc:56:62:33:ce:53:74:dc: 4e:40:ca:e1:73:9f:04:73:44:25:69:79:05:9a:f5: 8e:24:c2:2d:15:1f:f6:b4:9b:d6:af:8d:89:bf:7e: 7c:79:b8:9f:4e:77:10:9e:84:30:34:fd:ae:7c:0f: 7b:33:fc:ad:32:c5:f8:b5:54:37:41:5e:5a:eb:2c: 06:d4:9d:66:e9:4d:c4:75:61:a9:7a:d7:7f:80:b4: 19:ae:08:df:fd:ab:21:6a:28:a1:23:6c:00:d7:e5: 28:b2:2d:58:93:79:45:6c:7b:25:bf:a0:bc:16:4f: 98:4c:44:a2:a5:3a:f8:c9:e9:28:8b:c8:79:14:52: e3:ad:41:d3:f0:41:56:45:ce:9f:78:87:4c:a9:89: e2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A4:F8:8D:5B:32:70:31:2E:CA:1A:C3:95:59:43:FE:26:87:7C:93 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS21859.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.62.0/24 Signature Algorithm: sha256WithRSAEncryption 48:01:10:6b:5f:33:21:88:0e:90:78:7c:4b:6d:f0:30:6d:50: 92:f3:36:97:fd:b1:b1:ed:84:15:ff:4f:da:37:22:c8:c1:a8: 68:d7:2d:ec:b7:40:53:09:df:9f:a5:2a:93:26:6d:e1:28:d1: 43:41:b4:e7:fa:f3:dc:5e:fc:9c:4e:ec:62:1e:04:90:b9:73: 45:f8:ba:ea:7b:99:60:fe:4e:2a:f6:a7:a8:cb:d4:a4:81:80: 67:76:27:39:f0:a8:96:3e:dc:17:1f:c8:78:19:f0:88:c2:42: d1:51:60:a3:a0:ea:87:bc:b9:f9:83:4c:9f:83:ae:84:79:0b: ce:e1:0e:08:e5:de:72:99:fb:3b:57:2e:dd:82:fd:47:a5:c6: 06:86:8c:9b:5c:6e:71:65:b2:fa:32:7f:9b:bb:d1:36:32:ae: b3:c9:56:da:0a:71:2e:08:53:07:da:b4:bc:f2:a1:c3:11:51: bd:aa:1f:20:61:71:53:a2:e8:4b:78:8f:28:0b:eb:84:07:48: 28:9d:20:fb:55:de:40:9c:24:eb:76:0a:74:22:6a:57:eb:9d: 7c:09:d1:4b:5c:fe:6f:0f:e3:c7:4b:29:cd:08:4c:70:4e:4e: 1c:ae:eb:d6:06:5e:8f:de:f5:b2:e6:42:28:c7:da:1a:35:1d: 93:0a:f8:b1 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUBoBcqp9TXxlRao+V2LDZJpnicIswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNjEyMDI0NzQwWhcNMjYwNjExMDI1MjQw WjAzMTEwLwYDVQQDEyg0MUE0Rjg4RDVCMzI3MDMxMkVDQTFBQzM5NTU5NDNGRTI2 ODc3QzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg4da0RVB7+B eFZUyR9Gy7olUdE/FBOunFmUjTL8oNXbi/a5a7lIW3QLiAvAw1aOrvthFo+1kCEz GAmc5yFN3khyN/VoSaQt0Tr2LOq7k4FsS6cBa+ibyCXFz9Vln58chSsqLrp4x9Fk pHJgohVu3FZiM85TdNxOQMrhc58Ec0QlaXkFmvWOJMItFR/2tJvWr42Jv358ebif TncQnoQwNP2ufA97M/ytMsX4tVQ3QV5a6ywG1J1m6U3EdWGpetd/gLQZrgjf/ash aiihI2wA1+Uosi1Yk3lFbHslv6C8Fk+YTESipTr4yekoi8h5FFLjrUHT8EFWRc6f eIdMqYnimQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFEGk+I1bMnAxLsoaw5VZQ/4m h3yTMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIxODU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOo+MA0GCSqGSIb3DQEBCwUAA4IB AQBIARBrXzMhiA6QeHxLbfAwbVCS8zaX/bGx7YQV/0/aNyLIwaho1y3st0BTCd+f pSqTJm3hKNFDQbTn+vPcXvycTuxiHgSQuXNF+Lrqe5lg/k4q9qeoy9SkgYBndic5 8KiWPtwXH8h4GfCIwkLRUWCjoOqHvLn5g0yfg66EeQvO4Q4I5d5ymfs7Vy7dgv1H pcYGhoybXG5xZbL6Mn+bu9E2Mq6zyVbaCnEuCFMH2rS88qHDEVG9qh8gYXFTouhL eI8oC+uEB0gonSD7Vd5AnCTrdgp0ImpX6518CdFLXP5vD+PHSynNCExwTk4cruvW Bl6P3vWy5kIox9oaNR2TCvix -----END CERTIFICATE-----Generated at Sun Jun 15 21:31:22 2025 by rpki-client