$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS21859.roa File: AS21859.roa (raw, json) Hash identifier: zZTD6aXBCmgOK3CJD2UkbjSc+rgF9Ku9UdwonpUXtYs= Subject key identifier: 93:95:D4:9C:85:99:3B:B3:D8:DD:CE:76:E7:8B:36:EB:BD:E9:C6:23 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 421C8E325F08BF23E880FF104D3918C90B145B7D Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS21859.roa Signing time: Thu 19 Mar 2026 13:44:01 +0000 ROA not before: Thu 19 Mar 2026 13:39:01 +0000 ROA not after: Thu 18 Mar 2027 13:44:01 +0000 asID: 21859 IP address blocks: 157.254.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 21:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:1c:8e:32:5f:08:bf:23:e8:80:ff:10:4d:39:18:c9:0b:14:5b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Mar 19 13:39:01 2026 GMT Not After : Mar 18 13:44:01 2027 GMT Subject: CN=9395D49C85993BB3D8DDCE76E78B36EBBDE9C623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:49:e8:35:b7:be:98:7f:dc:f3:66:59:67:86: e7:c2:97:7c:52:f1:29:10:8b:fc:43:73:d9:69:f9: d2:c0:e5:e4:fd:57:60:d1:bb:c8:bd:22:90:9e:fb: f3:fd:b7:90:88:c3:64:69:8b:a8:d6:8e:92:c7:c8: 8b:7d:96:13:05:2f:78:8f:13:b1:e3:c3:5c:b6:92: 19:d4:d7:b4:02:ad:d8:2a:3c:b3:96:ee:f6:0c:42: d5:bb:94:ec:d0:3b:84:5f:5e:c0:ee:33:b0:a5:2a: 18:fb:6b:27:8a:c7:4d:e0:10:b3:f6:81:9c:09:4c: 48:3b:38:cf:c5:8d:0e:2d:16:a2:43:01:be:c6:9e: 30:1f:d1:01:89:af:fd:dd:1a:6b:76:93:a0:5a:aa: 17:ed:1d:2a:82:e0:92:c0:ed:0f:03:a1:da:fe:94: c2:14:76:08:58:09:78:e7:b2:94:31:0e:63:82:2f: 6f:ec:c2:40:f8:49:f9:87:e6:ef:4b:27:db:19:b6: ec:ff:c6:ea:00:4e:57:ac:8a:dc:8d:1c:8b:bf:e1: d9:b4:ca:32:e6:5b:b3:f7:a1:9a:ce:0e:74:46:a4: 86:1c:5d:48:bc:03:68:0c:eb:1b:ec:e7:1a:49:e2: 1c:79:c0:22:47:de:2b:1e:62:69:7b:03:73:f8:50: 48:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:95:D4:9C:85:99:3B:B3:D8:DD:CE:76:E7:8B:36:EB:BD:E9:C6:23 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS21859.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.212.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:fe:f7:a8:a3:15:54:e5:46:12:38:03:73:ee:96:d3:6d:8b: 3f:cd:96:0d:58:03:c0:74:d2:80:89:e7:0d:f5:2e:07:35:9c: 48:db:89:a1:8a:b2:1c:dc:64:a4:a7:59:7d:04:d7:f9:66:6d: 0d:a2:1b:5b:93:d7:b1:a0:92:a8:89:ba:15:07:a3:91:f8:ca: 6d:e9:c2:39:81:49:92:83:95:97:7d:18:56:8d:29:c8:04:b1: 26:3e:b2:a5:ae:05:f0:8f:28:c8:d7:f8:c8:55:34:de:fb:49: 99:d9:14:e1:c5:b6:c2:59:d5:74:b1:a4:3c:b8:21:71:31:01: 41:24:e7:eb:32:0b:c5:37:2b:79:63:a5:e7:b8:43:4e:e0:b0: b5:f8:cd:a2:c2:48:90:06:79:09:26:2b:5d:71:3f:64:f1:9b: 4a:4c:05:f7:e9:ad:b2:39:b8:90:a9:57:d0:e8:92:de:bd:cc: 65:8c:43:61:36:34:79:62:d9:c2:57:7d:90:a9:56:16:d6:6a: 56:64:b0:01:7f:72:ad:7c:f3:84:90:11:87:0a:e5:ce:20:dd: 0f:c8:f1:df:f5:b0:e3:49:ed:ff:df:c0:ce:af:bd:6e:ba:f0: 83:79:37:0c:98:04:ea:61:5e:e8:97:0a:d1:82:b5:f9:49:59: d5:f9:6b:02 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUQhyOMl8IvyPogP8QTTkYyQsUW30wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwMzE5MTMzOTAxWhcNMjcwMzE4MTM0NDAx WjAzMTEwLwYDVQQDEyg5Mzk1RDQ5Qzg1OTkzQkIzRDhERENFNzZFNzhCMzZFQkJE RTlDNjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0noNbe+mH/c 82ZZZ4bnwpd8UvEpEIv8Q3PZafnSwOXk/Vdg0bvIvSKQnvvz/beQiMNkaYuo1o6S x8iLfZYTBS94jxOx48NctpIZ1Ne0Aq3YKjyzlu72DELVu5Ts0DuEX17A7jOwpSoY +2snisdN4BCz9oGcCUxIOzjPxY0OLRaiQwG+xp4wH9EBia/93RprdpOgWqoX7R0q guCSwO0PA6Ha/pTCFHYIWAl457KUMQ5jgi9v7MJA+En5h+bvSyfbGbbs/8bqAE5X rIrcjRyLv+HZtMoy5luz96Gazg50RqSGHF1IvANoDOsb7OcaSeIcecAiR94rHmJp ewNz+FBITQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFJOV1JyFmTuz2N3OdueLNuu9 6cYjMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzIxODU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf7UMA0GCSqGSIb3DQEBCwUAA4IB AQBq/veooxVU5UYSOANz7pbTbYs/zZYNWAPAdNKAiecN9S4HNZxI24mhirIc3GSk p1l9BNf5Zm0Nohtbk9exoJKoiboVB6OR+Mpt6cI5gUmSg5WXfRhWjSnIBLEmPrKl rgXwjyjI1/jIVTTe+0mZ2RThxbbCWdV0saQ8uCFxMQFBJOfrMgvFNyt5Y6XnuENO 4LC1+M2iwkiQBnkJJitdcT9k8ZtKTAX36a2yObiQqVfQ6JLevcxljENhNjR5YtnC V32QqVYW1mpWZLABf3KtfPOEkBGHCuXOIN0PyPHf9bDjSe3/38DOr71uuvCDeTcM mATqYV7olwrRgrX5SVnV+WsC -----END CERTIFICATE-----Generated at Mon Mar 23 04:39:46 2026 by rpki-client