$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: B6sQ3X5/K6P2RGevLZVLMTS3eBp9TVlkHq+JYLKkz9Q= Subject key identifier: 9C:50:8D:C6:39:E4:5C:81:5F:88:CA:20:7A:23:6D:EE:E8:45:84:E4 Certificate issuer: /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683 Certificate serial: 5F25E602A284EF39A03FFF0832BB8C2F0B000A0E Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer Subject info access: rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS16509.roa Signing time: Thu 13 Aug 2026 00:00:48 +0000 ROA not before: Wed 12 Aug 2026 23:55:48 +0000 ROA not after: Thu 12 Aug 2027 00:00:48 +0000 asID: 16509 IP address blocks: 207.180.22.0/24 maxlen: 24 207.180.25.0/24 maxlen: 24 207.180.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Aug 2026 14:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:25:e6:02:a2:84:ef:39:a0:3f:ff:08:32:bb:8c:2f:0b:00:0a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683 Validity Not Before: Aug 12 23:55:48 2026 GMT Not After : Aug 12 00:00:48 2027 GMT Subject: CN=9C508DC639E45C815F88CA207A236DEEE84584E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:15:6a:a5:9b:ae:10:78:95:97:d5:63:50:dc: f5:5a:c9:8e:18:60:fb:9d:06:4f:35:94:0e:79:b9: 89:eb:24:f4:17:b8:9e:23:8b:be:f8:94:b1:3e:fa: fe:7c:a1:d9:88:bb:9f:35:1f:61:1d:20:3b:29:3f: 72:80:ad:23:91:8e:22:8b:1a:0e:e1:91:94:4b:2b: ca:d3:e7:bc:71:4f:a1:b4:30:3c:a8:56:3d:6a:3c: fb:c6:66:6f:5f:f5:aa:67:5c:fb:df:5a:2e:55:64: 6c:22:18:0e:f5:41:93:9d:d3:32:9c:b4:9e:8d:15: 59:45:a2:f8:b1:d2:21:31:be:6f:a4:08:3f:b8:22: a2:fb:d9:07:90:fb:71:ad:53:3e:56:03:2a:10:1e: f1:2c:63:19:d3:80:6a:3d:0c:b2:91:86:b1:ad:9d: aa:40:cf:7b:be:c6:20:f0:fb:f8:c0:e5:40:20:e1: 04:f5:25:f8:a0:92:cd:cf:00:44:80:fd:36:38:85: b9:7e:af:73:5a:0a:35:86:e6:d6:46:bf:6e:f7:3a: a3:43:4c:a4:f5:b7:f8:1d:a1:85:d1:c0:f9:83:2e: 39:ce:cd:15:5b:cc:d9:fb:f5:81:ad:1e:ee:09:fa: 36:75:1a:2d:bd:a0:19:64:d6:2b:fa:fe:2d:ab:ea: 7d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:50:8D:C6:39:E4:5C:81:5F:88:CA:20:7A:23:6D:EE:E8:45:84:E4 X509v3 Authority Key Identifier: keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.180.22.0/24 207.180.25.0/24 207.180.27.0/24 Signature Algorithm: sha256WithRSAEncryption 67:3f:c3:c0:e2:13:1a:a2:6e:7f:98:a8:7e:98:45:32:1a:5b: 53:2c:bb:1c:48:c1:a1:85:db:c0:5f:23:97:20:45:9d:70:41: 2e:33:94:09:84:dd:1d:34:51:4d:15:12:82:6d:56:50:ff:75: 05:74:de:7c:68:f8:24:c6:82:ea:ce:c0:9d:18:6c:21:5d:f6: 36:71:b0:dc:bb:0b:11:93:6a:b1:a7:e2:b3:17:f1:39:ed:27: 53:a2:b6:2a:68:14:fc:2c:de:69:7f:65:76:66:02:47:dd:e2: 25:70:7b:b6:a0:79:59:ed:7e:f7:93:14:bb:33:9c:e7:41:cd: 16:27:16:0f:b0:ee:d6:f3:19:e2:48:e8:9a:cb:54:b8:82:42: bb:a2:2b:5f:27:0f:8c:1b:69:dc:49:31:24:f3:20:fc:06:0d: 90:7b:f0:df:f6:51:e6:fc:f4:47:71:63:d8:cd:fe:d3:45:ea: 24:f2:c8:90:e2:28:c3:25:20:a4:fb:1d:bd:1e:be:4f:e7:6f: 2d:6f:34:ab:59:58:22:11:76:d4:62:a0:a8:a7:c8:12:f6:ca: 36:86:e3:bb:cb:2e:8f:a6:f5:f8:fe:2c:1d:9f:9e:dc:35:67: 90:25:34:f0:8b:12:b6:9a:f2:4c:30:a8:76:78:a9:17:f6:61: 11:3b:0c:bd -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUXyXmAqKE7zmgP/8IMruMLwsACg4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYwODEyMjM1NTQ4WhcNMjcwODEyMDAwMDQ4 WjAzMTEwLwYDVQQDEyg5QzUwOERDNjM5RTQ1QzgxNUY4OENBMjA3QTIzNkRFRUU4 NDU4NEU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxVqpZuuEHiV l9VjUNz1WsmOGGD7nQZPNZQOebmJ6yT0F7ieI4u++JSxPvr+fKHZiLufNR9hHSA7 KT9ygK0jkY4iixoO4ZGUSyvK0+e8cU+htDA8qFY9ajz7xmZvX/WqZ1z731ouVWRs IhgO9UGTndMynLSejRVZRaL4sdIhMb5vpAg/uCKi+9kHkPtxrVM+VgMqEB7xLGMZ 04BqPQyykYaxrZ2qQM97vsYg8Pv4wOVAIOEE9SX4oJLNzwBEgP02OIW5fq9zWgo1 hubWRr9u9zqjQ0yk9bf4HaGF0cD5gy45zs0VW8zZ+/WBrR7uCfo2dRotvaAZZNYr +v4tq+p9pQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFJxQjcY55FyBX4jKIHojbe7o RYTkMB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4 NmRkM2YvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAz7QWAwQAz7QZAwQAz7QbMA0GCSqG SIb3DQEBCwUAA4IBAQBnP8PA4hMaom5/mKh+mEUyGltTLLscSMGhhdvAXyOXIEWd cEEuM5QJhN0dNFFNFRKCbVZQ/3UFdN58aPgkxoLqzsCdGGwhXfY2cbDcuwsRk2qx p+KzF/E57SdTorYqaBT8LN5pf2V2ZgJH3eIlcHu2oHlZ7X73kxS7M5znQc0WJxYP sO7W8xniSOiay1S4gkK7oitfJw+MG2ncSTEk8yD8Bg2Qe/Df9lHm/PRHcWPYzf7T Reok8siQ4ijDJSCk+x29Hr5P528tbzSrWVgiEXbUYqCop8gS9so2huO7yy6PpvX4 /iwdn57cNWeQJTTwixK2mvJMMKh2eKkX9mEROwy9 -----END CERTIFICATE-----Generated at Sat Aug 15 07:43:08 2026 by rpki-client