$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: yXaTjORMICExRr//FXXf5g5rs/pI4HKWg8uBaFusB/E= Subject key identifier: 24:62:B8:77:E9:EC:2D:F2:36:56:80:82:DC:D0:84:57:FE:A6:E2:E4 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 7F807D42B7EDC9AF5769F94A98A9AD5B9428A0A5 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa Signing time: Thu 02 May 2024 07:29:24 +0000 ROA not before: Thu 02 May 2024 07:24:24 +0000 ROA not after: Thu 01 May 2025 07:29:24 +0000 asID: 16509 IP address blocks: 104.234.137.0/24 maxlen: 24 104.234.141.0/24 maxlen: 24 104.234.143.0/24 maxlen: 24 104.234.160.0/24 maxlen: 24 104.234.175.0/24 maxlen: 24 104.234.187.0/24 maxlen: 24 104.234.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 10:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:80:7d:42:b7:ed:c9:af:57:69:f9:4a:98:a9:ad:5b:94:28:a0:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: May 2 07:24:24 2024 GMT Not After : May 1 07:29:24 2025 GMT Subject: CN=2462B877E9EC2DF236568082DCD08457FEA6E2E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5f:01:dd:4f:9d:75:12:51:a3:bf:f4:51:99: 09:4d:75:31:21:64:bf:94:21:e7:a3:f0:7b:4a:7c: 68:ea:8e:8d:96:e7:65:d2:f1:16:68:7f:4e:04:4a: ea:3a:1a:0a:09:76:48:ff:f0:3b:fa:e3:6a:9c:51: 1f:44:e8:6f:74:e4:20:36:35:65:dc:69:68:f6:8a: eb:a6:f2:7a:b0:ba:ec:78:f8:32:7b:0c:8a:b6:46: 54:31:0a:c7:5e:66:65:38:c9:c1:4c:11:2c:9b:1c: 05:10:d4:89:14:37:9d:a7:28:a5:d8:63:6d:f3:5d: 47:00:4c:eb:75:51:92:ce:33:6f:2d:5f:2b:5b:ee: 64:f4:28:f8:f5:20:ae:e0:97:da:7e:ef:41:18:ab: 2a:b2:63:98:a9:31:79:ca:f2:8f:c9:43:4b:02:84: d0:50:b6:02:d2:73:8f:de:b6:25:b0:2c:d5:a3:fd: aa:f7:d0:81:45:f5:a0:29:df:37:08:1e:dc:64:9e: 7c:f4:ce:89:43:12:ef:7a:27:ae:dd:0c:36:87:d5: 6d:29:ae:aa:f0:52:3c:03:f9:68:1e:6f:26:1d:78: ed:ef:72:34:da:0f:bc:1a:b0:17:eb:8d:71:8f:56: 2a:58:6b:10:df:f4:06:7d:23:b2:0f:24:db:1d:ff: 5d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:62:B8:77:E9:EC:2D:F2:36:56:80:82:DC:D0:84:57:FE:A6:E2:E4 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.137.0/24 104.234.141.0/24 104.234.143.0/24 104.234.160.0/24 104.234.175.0/24 104.234.187.0/24 104.234.245.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:c0:e8:cb:f5:80:9a:a2:56:39:6f:e5:32:10:f7:2d:b8:f6: b4:d4:a4:cf:43:51:24:8e:cb:3d:73:bc:92:10:e4:89:a7:0b: dd:f2:ed:34:3b:e1:73:ff:7b:bb:56:97:a5:91:1a:79:ba:d7: b3:d3:22:68:99:79:74:8b:d0:0e:46:1f:13:52:36:df:8f:91: 5d:68:1d:05:f7:84:6a:8b:d4:a0:0e:fd:7a:36:bb:76:fa:e0: 82:de:7e:85:08:4b:a1:83:63:ab:42:c8:1e:cd:15:cc:d4:61: 9a:fb:c8:c8:c5:59:b2:8a:d7:91:e9:cb:49:ee:04:f7:73:93: f1:75:19:45:01:89:b7:fd:1f:95:e0:4d:8e:b9:5d:ac:6e:fe: ab:ea:83:eb:43:87:4c:2d:07:f0:4f:ad:37:af:1d:0e:7f:77: 83:68:0b:34:21:85:5c:00:d6:58:8e:b3:a5:8e:60:30:f8:ae: f0:a9:f6:c2:0b:99:3c:38:1f:6f:92:f4:fb:72:d7:dd:f9:65: 5f:d7:78:7b:32:13:1a:d4:42:8d:72:be:ca:05:b0:22:ad:1d: 3a:f9:0a:2c:e1:84:86:a4:72:dc:d8:50:83:4d:1b:80:51:1e: f7:76:0b:06:28:25:c1:3e:73:a4:f1:55:56:e5:42:7d:a7:50: bb:01:d9:f9 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIUf4B9Qrftya9XaflKmKmtW5QooKUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwNTAyMDcyNDI0WhcNMjUwNTAxMDcyOTI0 WjAzMTEwLwYDVQQDEygyNDYyQjg3N0U5RUMyREYyMzY1NjgwODJEQ0QwODQ1N0ZF QTZFMkU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll8B3U+ddRJR o7/0UZkJTXUxIWS/lCHno/B7Snxo6o6Nludl0vEWaH9OBErqOhoKCXZI//A7+uNq nFEfROhvdOQgNjVl3Glo9orrpvJ6sLrsePgyewyKtkZUMQrHXmZlOMnBTBEsmxwF ENSJFDedpyil2GNt811HAEzrdVGSzjNvLV8rW+5k9Cj49SCu4Jfafu9BGKsqsmOY qTF5yvKPyUNLAoTQULYC0nOP3rYlsCzVo/2q99CBRfWgKd83CB7cZJ589M6JQxLv eieu3Qw2h9VtKa6q8FI8A/loHm8mHXjt73I02g+8GrAX641xj1YqWGsQ3/QGfSOy DyTbHf9d9wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCRiuHfp7C3yNlaAgtzQhFf+ puLkMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMG CCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAaOqJAwQAaOqNAwQAaOqPAwQAaOqg AwQAaOqvAwQAaOq7AwQAaOr1MA0GCSqGSIb3DQEBCwUAA4IBAQCOwOjL9YCaolY5 b+UyEPctuPa01KTPQ1Ekjss9c7ySEOSJpwvd8u00O+Fz/3u7VpelkRp5utez0yJo mXl0i9AORh8TUjbfj5FdaB0F94Rqi9SgDv16Nrt2+uCC3n6FCEuhg2OrQsgezRXM 1GGa+8jIxVmyiteR6ctJ7gT3c5PxdRlFAYm3/R+V4E2OuV2sbv6r6oPrQ4dMLQfw T603rx0Of3eDaAs0IYVcANZYjrOljmAw+K7wqfbCC5k8OB9vkvT7ctfd+WVf13h7 MhMa1EKNcr7KBbAirR06+Qos4YSGpHLc2FCDTRuAUR73dgsGKCXBPnOk8VVW5UJ9 p1C7Adn5 -----END CERTIFICATE-----Generated at Thu May 23 09:34:36 2024 by rpki-client on console-fra.rpki-client.org