$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS21859.roa File: AS21859.roa (raw, json) Hash identifier: 8RKs417qACKdSE/XhpYnQp1d2ZOFRVs2M6tcuA0aCII= Subject key identifier: 94:80:0F:DA:96:08:40:64:5C:90:8B:4A:84:B8:6E:B7:42:E3:5D:08 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 2FC5B2BAB9A2449558F1187155A214A99BBD2757 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS21859.roa Signing time: Thu 17 Jul 2025 07:50:56 +0000 ROA not before: Thu 17 Jul 2025 07:45:56 +0000 ROA not after: Thu 16 Jul 2026 07:50:56 +0000 asID: 21859 IP address blocks: 157.254.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 01:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c5:b2:ba:b9:a2:44:95:58:f1:18:71:55:a2:14:a9:9b:bd:27:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jul 17 07:45:56 2025 GMT Not After : Jul 16 07:50:56 2026 GMT Subject: CN=94800FDA960840645C908B4A84B86EB742E35D08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:62:52:63:5b:8c:24:0d:bf:47:37:45:fe:75: 83:73:d1:5c:22:ed:f3:d4:ee:ff:43:67:5c:4f:90: 51:6a:63:e6:67:5c:05:a5:9a:8c:2b:ee:b7:99:e7: 26:44:b1:33:6e:e5:cb:89:7f:83:e8:a7:3a:e1:b4: 53:11:0f:71:52:bb:64:08:cd:34:12:9e:79:5c:65: 33:4f:09:15:8b:15:fa:49:74:7b:bd:8d:af:cd:62: f5:2b:12:81:f6:07:e8:e4:89:03:36:99:ec:fe:ac: 14:3a:e9:7e:0b:66:8a:de:72:fc:92:d1:3d:fb:f0: 37:93:78:aa:94:9d:1a:e6:e0:f1:a3:0e:cf:cd:57: 91:59:14:54:0d:59:6b:3c:d7:8a:c5:ab:5c:d0:1d: e5:84:9c:ac:28:ae:eb:52:ee:73:20:9b:80:a5:e5: 92:2e:ab:7b:bc:ba:33:f5:ca:cf:c5:61:b3:72:24: 8d:cd:44:0b:0a:be:b7:92:e8:ee:8a:5a:41:c3:6a: 1d:65:0d:ce:15:a9:70:2a:12:d8:90:3d:81:ff:90: 20:88:2e:98:bc:ae:bb:67:b4:0f:1b:4e:6b:c8:00: 7b:e7:12:90:6b:dc:9f:76:07:bb:ef:79:ed:15:c9: 0a:3e:f6:18:98:01:46:54:19:c9:a8:1d:1f:6f:a2: e4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:80:0F:DA:96:08:40:64:5C:90:8B:4A:84:B8:6E:B7:42:E3:5D:08 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS21859.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.191.0/24 Signature Algorithm: sha256WithRSAEncryption 47:fa:ff:d4:b6:42:6c:b5:ca:e3:a5:84:88:a9:27:bc:c2:c4: 3f:24:1b:98:97:a5:18:e3:6a:89:53:f9:b2:94:92:04:51:7f: ba:46:76:18:af:92:e8:8e:02:62:42:10:02:ab:59:56:af:7d: c2:64:a0:59:b5:08:ef:2d:e1:6f:21:6f:b6:c1:53:6b:00:42: 1b:a3:42:af:cb:af:60:64:c2:b9:0b:a8:e8:f4:46:13:55:02: 35:e5:57:f7:b4:e9:ec:59:6d:c8:21:94:64:d3:57:59:25:d2: 12:e7:e6:23:1f:ff:7f:06:ae:df:3b:ce:50:b9:02:52:63:42: 93:32:be:e0:b6:f0:e6:aa:11:c8:c5:52:ae:8d:fc:c5:d1:52: ea:c2:f0:fe:33:84:62:38:ee:7f:a4:a2:50:97:5e:73:7f:80: 7a:4b:de:8c:46:6c:4c:36:f6:44:7a:51:75:79:55:dd:3f:35: 1a:d6:58:bd:75:51:be:49:0a:da:64:25:5d:e3:30:15:b0:11: 72:83:92:1f:38:55:e7:4f:67:eb:c6:12:55:c1:78:8a:09:2f: 48:b1:d1:bf:51:0a:60:7f:ef:0c:62:79:da:dc:77:b3:f7:9e: d1:c7:c4:be:89:a7:bb:92:40:da:42:e6:4c:7d:a6:d0:f6:d4: 4e:8d:8f:31 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUL8WyurmiRJVY8RhxVaIUqZu9J1cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwNzE3MDc0NTU2WhcNMjYwNzE2MDc1MDU2 WjAzMTEwLwYDVQQDEyg5NDgwMEZEQTk2MDg0MDY0NUM5MDhCNEE4NEI4NkVCNzQy RTM1RDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGJSY1uMJA2/ RzdF/nWDc9FcIu3z1O7/Q2dcT5BRamPmZ1wFpZqMK+63mecmRLEzbuXLiX+D6Kc6 4bRTEQ9xUrtkCM00Ep55XGUzTwkVixX6SXR7vY2vzWL1KxKB9gfo5IkDNpns/qwU Oul+C2aK3nL8ktE9+/A3k3iqlJ0a5uDxow7PzVeRWRRUDVlrPNeKxatc0B3lhJys KK7rUu5zIJuApeWSLqt7vLoz9crPxWGzciSNzUQLCr63kujuilpBw2odZQ3OFalw KhLYkD2B/5AgiC6YvK67Z7QPG05ryAB75xKQa9yfdge773ntFckKPvYYmAFGVBnJ qB0fb6LkmQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFJSAD9qWCEBkXJCLSoS4brdC 410IMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzIxODU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf6/MA0GCSqGSIb3DQEBCwUAA4IB AQBH+v/UtkJstcrjpYSIqSe8wsQ/JBuYl6UY42qJU/mylJIEUX+6RnYYr5LojgJi QhACq1lWr33CZKBZtQjvLeFvIW+2wVNrAEIbo0Kvy69gZMK5C6jo9EYTVQI15Vf3 tOnsWW3IIZRk01dZJdIS5+YjH/9/Bq7fO85QuQJSY0KTMr7gtvDmqhHIxVKujfzF 0VLqwvD+M4RiOO5/pKJQl15zf4B6S96MRmxMNvZEelF1eVXdPzUa1li9dVG+SQra ZCVd4zAVsBFyg5IfOFXnT2frxhJVwXiKCS9IsdG/UQpgf+8MYnna3Hez957Rx8S+ iae7kkDaQuZMfabQ9tROjY8x -----END CERTIFICATE-----Generated at Mon Aug 4 14:14:18 2025 by rpki-client