$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS21859.roa File: AS21859.roa (raw, json) Hash identifier: Pwt5OnoUrp5BhLnJX1uGJi3+w+rS35h6qF4ZMVfnYuA= Subject key identifier: C8:39:A9:1C:3E:80:16:7A:BB:4A:6B:AD:DF:FF:5B:37:3E:7D:E0:06 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 7BBE0DFBDA00A014008BAAF8E2A6223F7CB29369 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS21859.roa Signing time: Thu 12 Jun 2025 02:52:39 +0000 ROA not before: Thu 12 Jun 2025 02:47:39 +0000 ROA not after: Thu 11 Jun 2026 02:52:39 +0000 asID: 21859 IP address blocks: 209.200.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 07:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:be:0d:fb:da:00:a0:14:00:8b:aa:f8:e2:a6:22:3f:7c:b2:93:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jun 12 02:47:39 2025 GMT Not After : Jun 11 02:52:39 2026 GMT Subject: CN=C839A91C3E80167ABB4A6BADDFFF5B373E7DE006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:46:47:df:9d:b8:2d:13:fa:d4:94:bb:cf:99: ac:10:60:b0:ed:c8:cb:06:b2:25:99:4d:3e:e7:74: b3:21:b2:44:d9:52:53:7e:21:27:d7:ca:8b:c6:1c: 88:da:66:ef:f3:3f:a3:d0:8c:be:fe:55:9f:97:3b: 21:ed:ea:63:a4:ec:5b:86:a0:36:15:d7:d1:5f:16: 39:35:14:64:c9:37:66:c2:b0:4e:bc:3f:fa:b0:48: 1a:d4:0b:be:e6:4d:c6:6a:ac:f0:9c:04:12:65:09: e5:4d:1d:d8:5f:8f:ad:95:30:38:3f:3c:f9:e8:3d: dc:1a:34:66:b0:dc:8c:b6:18:d2:7e:4c:c6:79:c5: 1a:d4:49:33:1f:b0:d4:c5:57:5b:36:ed:8f:5a:6e: e3:c3:ea:2c:77:4f:37:65:6d:1e:06:0b:4c:7a:75: 4d:d6:f9:28:9f:35:8e:f9:3e:0a:99:8c:00:10:ce: f1:08:ae:1a:45:34:08:d6:4d:d5:06:11:c4:46:fd: 84:bd:e5:1b:fd:9e:b8:ad:27:d5:c2:b2:b2:c2:41: 2b:76:32:fe:1f:5d:de:4a:33:f7:c1:e7:08:4f:27: ed:24:69:3d:22:9b:e7:e2:1a:e9:f1:cb:11:0f:53: 68:77:e8:c4:53:a3:fb:ea:01:bd:c1:30:51:0e:9a: 44:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:39:A9:1C:3E:80:16:7A:BB:4A:6B:AD:DF:FF:5B:37:3E:7D:E0:06 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS21859.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.200.238.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:00:93:1c:ac:f6:07:9d:23:98:38:4e:c8:c4:8d:7c:ff:f6: e0:d0:c7:5a:69:3b:81:67:bd:73:61:78:c0:42:1f:21:b8:98: e6:15:85:17:09:e3:02:c0:ed:f2:0d:05:7a:1e:5f:5d:72:aa: 09:fd:61:51:65:3e:b5:8d:f7:f0:5e:e8:12:d2:4e:e2:ef:78: f4:e3:6c:38:f7:ef:d8:23:ea:15:a0:69:39:93:b7:10:9e:f6: 5f:2f:3d:2a:ae:94:31:84:c8:73:e4:ce:c1:1a:e0:59:03:49: 73:d1:25:5d:43:0c:65:b2:77:e4:2e:7e:f0:8d:36:a1:b2:88: 27:b8:da:68:a0:08:b6:30:52:3b:d1:13:c6:ad:45:35:7a:72: 83:97:95:4e:00:2a:1a:02:b4:f3:72:09:d8:d0:15:85:11:9c: fa:f6:e6:b0:ff:d8:6b:65:4a:89:60:3d:b0:99:75:7d:e1:13: 5b:b4:81:ad:e2:02:44:33:08:18:5b:92:47:f1:3b:e3:4c:0f: a3:8a:4b:e2:61:c3:07:21:02:5a:d8:1b:ea:61:62:b7:c9:2d: 0f:e8:a4:da:ab:db:1c:79:bd:89:0b:0c:1c:d2:73:57:c2:48: d4:95:0f:73:b8:38:6f:4c:9c:bf:80:32:0d:02:95:70:66:17: a8:aa:34:8c -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUe74N+9oAoBQAi6r44qYiP3yyk2kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNjEyMDI0NzM5WhcNMjYwNjExMDI1MjM5 WjAzMTEwLwYDVQQDEyhDODM5QTkxQzNFODAxNjdBQkI0QTZCQURERkZGNUIzNzNF N0RFMDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUZH3524LRP6 1JS7z5msEGCw7cjLBrIlmU0+53SzIbJE2VJTfiEn18qLxhyI2mbv8z+j0Iy+/lWf lzsh7epjpOxbhqA2FdfRXxY5NRRkyTdmwrBOvD/6sEga1Au+5k3GaqzwnAQSZQnl TR3YX4+tlTA4Pzz56D3cGjRmsNyMthjSfkzGecUa1EkzH7DUxVdbNu2PWm7jw+os d083ZW0eBgtMenVN1vkonzWO+T4KmYwAEM7xCK4aRTQI1k3VBhHERv2EveUb/Z64 rSfVwrKywkErdjL+H13eSjP3wecITyftJGk9Ipvn4hrp8csRD1Nod+jEU6P76gG9 wTBRDppEiQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFMg5qRw+gBZ6u0prrd//Wzc+ feAGMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIxODU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cjuMA0GCSqGSIb3DQEBCwUAA4IB AQAaAJMcrPYHnSOYOE7IxI18//bg0MdaaTuBZ71zYXjAQh8huJjmFYUXCeMCwO3y DQV6Hl9dcqoJ/WFRZT61jffwXugS0k7i73j042w49+/YI+oVoGk5k7cQnvZfLz0q rpQxhMhz5M7BGuBZA0lz0SVdQwxlsnfkLn7wjTahsognuNpooAi2MFI70RPGrUU1 enKDl5VOACoaArTzcgnY0BWFEZz69uaw/9hrZUqJYD2wmXV94RNbtIGt4gJEMwgY W5JH8TvjTA+jikviYcMHIQJa2BvqYWK3yS0P6KTaq9sceb2JCwwc0nNXwkjUlQ9z uDhvTJy/gDINApVwZheoqjSM -----END CERTIFICATE-----Generated at Sun Jun 15 10:56:57 2025 by rpki-client