$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS21859.roa File: AS21859.roa (raw, json) Hash identifier: cr5ie7z1dCO0YmFMZov6onLGmVtUk19+LbpMk2ypzNI= Subject key identifier: 5B:0E:37:CA:11:BD:6F:6A:17:44:B4:78:C1:93:63:ED:3B:DD:02:30 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 379A0C18B2DE3B3B521930FFD76DD41EC195EF22 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS21859.roa Signing time: Mon 13 Oct 2025 02:40:57 +0000 ROA not before: Mon 13 Oct 2025 02:35:57 +0000 ROA not after: Mon 12 Oct 2026 02:40:57 +0000 asID: 21859 IP address blocks: 104.234.62.0/24 maxlen: 24 104.234.98.0/24 maxlen: 24 104.234.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 23:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:9a:0c:18:b2:de:3b:3b:52:19:30:ff:d7:6d:d4:1e:c1:95:ef:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Oct 13 02:35:57 2025 GMT Not After : Oct 12 02:40:57 2026 GMT Subject: CN=5B0E37CA11BD6F6A1744B478C19363ED3BDD0230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a9:e9:65:d6:12:54:1e:f1:31:3b:e1:e2:36: 23:6a:e7:6e:e0:4f:30:35:d2:36:38:91:83:1e:cf: 82:d6:5e:96:8c:79:bf:88:40:ae:48:51:07:d0:6d: 11:dc:41:32:c8:ea:e9:fa:3e:3a:bb:29:2b:c8:a7: d6:00:de:5d:6e:32:97:2e:76:dd:df:9b:55:1d:e4: 88:18:da:7f:09:77:16:a6:60:38:da:42:f7:b0:e9: c5:39:22:f2:f3:55:14:57:e3:83:84:ec:49:26:0c: ae:90:49:99:5f:e6:25:4a:ab:50:aa:f5:25:ed:7e: d7:b2:f0:dd:3a:9a:1c:22:22:23:f2:c8:76:de:64: 6f:db:e8:40:e9:73:ad:5c:f1:d0:3e:e7:39:6f:f6: 9c:22:7e:f2:2a:19:5a:3e:d9:96:2c:f5:af:09:e5: a0:20:bc:57:99:55:ed:fa:b4:47:44:1f:26:6f:40: 8c:04:6f:4f:2e:99:31:58:d0:8b:c5:9a:0a:6e:93: ff:b9:b2:f4:7f:3a:52:ed:44:f8:8b:78:1b:3d:63: 3b:af:42:c7:72:61:9a:1a:77:d4:6b:89:60:77:fe: ae:16:03:09:c3:0d:59:5a:ee:97:d2:b3:79:9d:92: c3:b4:aa:b3:42:f2:98:73:bc:7a:0d:4e:6f:9f:f8: ee:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0E:37:CA:11:BD:6F:6A:17:44:B4:78:C1:93:63:ED:3B:DD:02:30 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS21859.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.62.0/24 104.234.98.0/24 104.234.191.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:9b:dd:e0:53:06:41:ce:5f:0b:f9:1c:51:27:d6:c9:54:fc: 8a:11:e9:36:96:57:32:25:82:9a:a1:c8:d5:a8:10:45:e2:33: 3a:61:e2:98:43:bc:8a:23:9f:8f:a7:b6:34:79:5e:41:ce:8e: 35:69:5f:a8:61:01:93:24:c3:2c:ab:db:48:62:47:ee:8e:b6: cb:b8:d8:2c:58:89:7e:14:23:6a:28:3a:16:d1:a4:a4:f7:20: ab:25:fd:5f:f2:1b:38:b3:92:e7:62:87:c2:71:70:15:62:ad: 96:d3:f4:fa:da:5b:e7:fa:6e:2f:31:12:8e:23:8b:bc:71:d4: 67:c2:31:c5:ad:5a:f6:5b:93:c0:e0:31:99:0f:fb:d5:63:3c: c3:a0:a4:bd:c0:09:0a:d6:57:30:ce:2c:0d:3b:a2:4c:00:4d: 68:ec:37:64:8b:9a:6a:20:6b:d1:54:fc:c6:fa:d9:08:09:f0: c7:a3:10:12:81:01:72:3b:af:18:1a:88:ae:5b:b2:82:51:05: 4e:06:bd:a5:7b:09:9e:14:13:87:f1:90:bf:49:24:cc:83:89: 25:0a:64:34:e8:4b:23:9f:11:11:9e:6f:e3:ae:8e:6b:fc:d7: 99:75:62:e2:7b:ae:dc:1d:65:b9:00:aa:38:c6:e6:21:14:19: 40:af:7b:dd -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUN5oMGLLeOztSGTD/123UHsGV7yIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMDEzMDIzNTU3WhcNMjYxMDEyMDI0MDU3 WjAzMTEwLwYDVQQDEyg1QjBFMzdDQTExQkQ2RjZBMTc0NEI0NzhDMTkzNjNFRDNC REQwMjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKnpZdYSVB7x MTvh4jYjaudu4E8wNdI2OJGDHs+C1l6WjHm/iECuSFEH0G0R3EEyyOrp+j46uykr yKfWAN5dbjKXLnbd35tVHeSIGNp/CXcWpmA42kL3sOnFOSLy81UUV+ODhOxJJgyu kEmZX+YlSqtQqvUl7X7XsvDdOpocIiIj8sh23mRv2+hA6XOtXPHQPuc5b/acIn7y KhlaPtmWLPWvCeWgILxXmVXt+rRHRB8mb0CMBG9PLpkxWNCLxZoKbpP/ubL0fzpS 7UT4i3gbPWM7r0LHcmGaGnfUa4lgd/6uFgMJww1ZWu6X0rN5nZLDtKqzQvKYc7x6 DU5vn/ju7QIDAQABo4ICijCCAoYwHQYDVR0OBBYEFFsON8oRvW9qF0S0eMGTY+07 3QIwMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIxODU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaOo+AwQAaOpiAwQAaOq/MA0GCSqG SIb3DQEBCwUAA4IBAQCOm93gUwZBzl8L+RxRJ9bJVPyKEek2llcyJYKaocjVqBBF 4jM6YeKYQ7yKI5+Pp7Y0eV5Bzo41aV+oYQGTJMMsq9tIYkfujrbLuNgsWIl+FCNq KDoW0aSk9yCrJf1f8hs4s5LnYofCcXAVYq2W0/T62lvn+m4vMRKOI4u8cdRnwjHF rVr2W5PA4DGZD/vVYzzDoKS9wAkK1lcwziwNO6JMAE1o7Ddki5pqIGvRVPzG+tkI CfDHoxASgQFyO68YGoiuW7KCUQVOBr2lewmeFBOH8ZC/SSTMg4klCmQ06EsjnxER nm/jro5r/NeZdWLie67cHWW5AKo4xuYhFBlAr3vd -----END CERTIFICATE-----Generated at Wed Nov 5 04:34:20 2025 by rpki-client