$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS21859.roa File: AS21859.roa (raw, json) Hash identifier: hoZM2YjMFW8dbZDqn/02/rZ4p5F8oxUrqxcIx1he/hg= Subject key identifier: 0C:5E:5A:AE:CD:7C:A8:F8:F5:B0:0B:9D:0F:55:E3:C4:F0:1A:64:CD Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 0DB3EF18A3A163C5FE2153BD574093A98E770C08 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS21859.roa Signing time: Sun 12 Jan 2025 11:48:00 +0000 ROA not before: Sun 12 Jan 2025 11:43:00 +0000 ROA not after: Sun 11 Jan 2026 11:48:00 +0000 asID: 21859 IP address blocks: 157.254.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:b3:ef:18:a3:a1:63:c5:fe:21:53:bd:57:40:93:a9:8e:77:0c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jan 12 11:43:00 2025 GMT Not After : Jan 11 11:48:00 2026 GMT Subject: CN=0C5E5AAECD7CA8F8F5B00B9D0F55E3C4F01A64CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:73:db:9d:cd:cc:99:84:7e:e9:fb:53:82:bc: d2:bc:25:42:70:49:89:23:fd:d3:35:f7:2c:cb:15: 56:6d:84:ac:25:a8:a9:31:28:54:26:bd:fd:e5:be: 70:64:82:24:84:10:fa:d7:89:9a:4b:81:b8:f3:13: fa:8c:68:ce:0c:0b:28:3b:a9:b3:24:39:50:3b:6a: 07:b3:91:0f:fa:82:32:29:50:9e:68:a9:7a:dc:59: bd:94:5e:01:31:62:51:e5:be:25:26:a4:af:c5:ba: 19:0b:75:62:f6:f1:f6:56:cf:34:d0:44:d7:6b:c3: 14:21:94:5c:8e:aa:ae:e9:e2:0a:3b:bf:53:e7:73: f1:72:4e:37:3b:72:a6:66:54:79:7d:1b:bd:b1:cd: f4:f8:13:be:14:3f:5a:32:1c:dd:fb:1d:fe:fa:e4: ed:b5:b3:23:ab:02:4a:4e:6a:b5:c1:f7:18:b2:53: f9:8b:f6:06:8d:a2:fa:0d:de:2c:37:ea:35:dc:67: 0d:c8:e7:27:32:1e:19:b9:66:9f:de:a8:66:e7:8d: 2f:f0:f5:65:a5:0a:64:15:7d:3e:d7:ee:74:61:ec: 88:7d:3f:08:eb:fa:68:70:3d:e3:cf:b7:ed:b4:0f: 5a:c3:45:41:24:4d:a0:47:20:7a:d1:14:05:32:c4: f8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5E:5A:AE:CD:7C:A8:F8:F5:B0:0B:9D:0F:55:E3:C4:F0:1A:64:CD X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS21859.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.228.0/24 Signature Algorithm: sha256WithRSAEncryption 37:64:9a:a1:3d:e7:78:ea:04:22:aa:b6:6e:74:0d:78:65:9b: 08:4f:2e:f7:5b:67:53:11:f5:49:83:26:eb:db:26:4c:42:87: 2a:3b:06:5e:4d:08:10:92:75:fd:3c:70:d9:0c:ca:a8:47:36: 80:5e:fd:4c:64:16:88:cb:80:c7:6f:fc:1f:f9:e2:10:bf:ee: 84:80:71:67:86:c9:1c:1c:be:d0:f7:a5:8d:13:96:95:a2:20: 30:71:d7:28:7b:77:89:cb:62:12:a0:ff:95:51:c5:a0:9f:77: d8:07:dc:49:f4:52:d1:07:09:45:e0:5a:d3:ee:bd:cd:f0:85: 06:49:74:f5:b9:4c:c9:81:a3:45:93:63:de:eb:e9:a6:e7:4f: 11:71:91:22:73:1a:4b:d5:12:49:6c:b6:f4:dc:9b:95:50:c1: db:dc:9a:e8:da:f6:c1:46:43:00:96:be:1e:61:4c:b3:53:8d: 20:e7:e1:62:b3:51:bf:50:85:fb:92:dc:df:48:f4:ad:59:8d: bc:5b:b1:54:34:5c:d6:02:a0:95:8b:b6:f6:ba:6c:0c:e7:d8: 3f:c7:6c:c9:cf:7a:97:0f:9b:64:2f:44:fc:f1:00:28:6f:21: e2:b6:33:b0:c5:bc:31:1f:e3:81:f4:93:67:20:6b:4a:8c:62: 57:2d:4e:a0 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUDbPvGKOhY8X+IVO9V0CTqY53DAgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwMTEyMTE0MzAwWhcNMjYwMTExMTE0ODAw WjAzMTEwLwYDVQQDEygwQzVFNUFBRUNEN0NBOEY4RjVCMDBCOUQwRjU1RTNDNEYw MUE2NENEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHPbnc3MmYR+ 6ftTgrzSvCVCcEmJI/3TNfcsyxVWbYSsJaipMShUJr395b5wZIIkhBD614maS4G4 8xP6jGjODAsoO6mzJDlQO2oHs5EP+oIyKVCeaKl63Fm9lF4BMWJR5b4lJqSvxboZ C3Vi9vH2Vs800ETXa8MUIZRcjqqu6eIKO79T53Pxck43O3KmZlR5fRu9sc30+BO+ FD9aMhzd+x3++uTttbMjqwJKTmq1wfcYslP5i/YGjaL6Dd4sN+o13GcNyOcnMh4Z uWaf3qhm540v8PVlpQpkFX0+1+50YeyIfT8I6/pocD3jz7fttA9aw0VBJE2gRyB6 0RQFMsT4ZQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFAxeWq7NfKj49bALnQ9V48Tw GmTNMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzIxODU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf7kMA0GCSqGSIb3DQEBCwUAA4IB AQA3ZJqhPed46gQiqrZudA14ZZsITy73W2dTEfVJgybr2yZMQocqOwZeTQgQknX9 PHDZDMqoRzaAXv1MZBaIy4DHb/wf+eIQv+6EgHFnhskcHL7Q96WNE5aVoiAwcdco e3eJy2ISoP+VUcWgn3fYB9xJ9FLRBwlF4FrT7r3N8IUGSXT1uUzJgaNFk2Pe6+mm 508RcZEicxpL1RJJbLb03JuVUMHb3Jro2vbBRkMAlr4eYUyzU40g5+Fis1G/UIX7 ktzfSPStWY28W7FUNFzWAqCVi7b2umwM59g/x2zJz3qXD5tkL0T88QAobyHitjOw xbwxH+OB9JNnIGtKjGJXLU6g -----END CERTIFICATE-----Generated at Sat Apr 5 12:11:30 2025 by rpki-client