
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: bX5mkjsIBpDeL2ta0RPn70yQuQHbkxrvSSGWTxKhq4o=
Subject key identifier: 6A:BF:85:A8:A7:4F:CC:71:34:0F:14:53:21:76:60:B2:94:76:22:81
Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial: 176F33D6EE08D3D914C4555195E089CD58931F51
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS21859.roa
Signing time: Fri 06 Feb 2026 09:31:30 +0000
ROA not before: Fri 06 Feb 2026 09:26:30 +0000
ROA not after: Fri 05 Feb 2027 09:31:30 +0000
asID: 21859
IP address blocks: 40.27.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 23 Feb 2026 18:55:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:6f:33:d6:ee:08:d3:d9:14:c4:55:51:95:e0:89:cd:58:93:1f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Validity
Not Before: Feb 6 09:26:30 2026 GMT
Not After : Feb 5 09:31:30 2027 GMT
Subject: CN=6ABF85A8A74FCC71340F1453217660B294762281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:d5:5b:a8:9f:0c:a3:22:88:52:5f:1d:ba:
27:cf:ee:2e:b0:d8:a2:ee:15:6c:91:84:be:eb:6a:
a6:da:06:b6:24:30:54:25:8c:71:1a:00:f2:fc:40:
76:55:eb:c8:04:9d:41:e0:42:17:6d:42:33:0e:1e:
f3:62:81:23:ff:09:37:06:06:dd:a8:77:36:27:8a:
f8:45:61:16:d2:39:6f:db:e1:da:80:bb:6a:42:0c:
c8:a7:0b:63:78:68:49:03:79:28:16:ad:37:67:c4:
ce:18:0a:e5:4b:2c:61:74:8c:ef:f2:c3:c1:97:f1:
7f:fa:f9:58:36:0c:cd:d6:2d:7a:66:a2:e0:4f:b6:
1b:eb:3f:78:ee:3f:2b:46:ac:3d:a2:e1:87:ab:37:
03:d8:47:23:c7:23:21:f9:99:09:54:88:3d:3f:9d:
dd:19:0d:cb:18:dc:80:8f:e8:cb:66:01:fa:2c:74:
70:5b:f6:50:49:07:ed:de:17:91:1b:41:61:a7:ab:
7e:ed:5f:67:9c:b6:94:eb:a3:6b:40:39:db:b2:d9:
b5:f5:94:cf:34:22:47:2c:5c:c4:1d:1d:6b:77:c7:
52:94:56:83:93:7d:2c:a6:99:c6:cc:90:69:f0:00:
74:82:16:ab:63:63:64:e9:24:27:bc:35:c8:1c:39:
38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BF:85:A8:A7:4F:CC:71:34:0F:14:53:21:76:60:B2:94:76:22:81
X509v3 Authority Key Identifier:
keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.27.57.0/24
Signature Algorithm: sha256WithRSAEncryption
10:ce:32:0b:ab:b4:f3:c7:a5:b3:9d:a1:32:b6:64:7a:41:7b:
bd:1e:23:be:f7:95:af:a2:ce:de:d7:d4:13:1c:bb:12:59:06:
16:10:05:ff:e2:63:fd:23:f5:88:6e:9d:72:4e:26:a8:08:b3:
24:0b:0e:e6:fb:65:54:55:55:c2:39:7e:83:a0:79:bd:a2:74:
df:a5:46:fb:f8:5e:78:63:a2:75:a1:d8:d1:4c:11:ec:41:7c:
98:2c:bd:87:68:a5:34:d2:6b:bf:28:1d:8d:72:0e:c1:14:78:
72:76:eb:e6:16:06:0f:47:89:9a:93:7b:b0:33:c7:1c:ba:b0:
0f:ca:0d:ee:25:7f:9b:3f:87:71:c4:de:f0:57:6f:7b:75:71:
40:a2:89:20:80:ad:6a:ad:85:4c:74:e1:b6:2b:5e:9f:b1:ee:
a8:14:3e:93:00:93:61:8b:a7:b4:18:36:f9:41:2b:fc:c1:b3:
9b:65:09:20:ac:47:2f:9c:85:ae:ce:83:d4:ed:53:c4:8e:7c:
2b:c3:1f:2c:6a:7f:d2:ef:1e:0c:1a:ae:e8:b8:18:a0:60:3e:
d8:b8:6b:ba:3c:4e:e8:39:38:d5:fa:11:8e:13:fa:e4:1d:a7:
c6:25:9e:9c:90:b4:59:b4:17:c3:6e:77:f2:42:16:16:56:a0:
d2:be:45:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:00:54 2026 by rpki-client