$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: qMrs2sQ2Vz+5oe/kaP7tM3piwvZXFEVPVkjvSn0yGUU= Subject key identifier: 3C:97:A9:F0:9A:90:30:00:E6:2F:EA:B8:CB:F4:F6:7E:C0:7A:1F:67 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 3F1E918D1EF000405A3664586EA386D56766C770 Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16509.roa Signing time: Wed 03 Sep 2025 05:50:35 +0000 ROA not before: Wed 03 Sep 2025 05:45:35 +0000 ROA not after: Wed 02 Sep 2026 05:50:35 +0000 asID: 16509 IP address blocks: 140.99.12.0/24 maxlen: 24 140.99.50.0/24 maxlen: 24 140.99.51.0/24 maxlen: 24 140.99.52.0/24 maxlen: 24 140.99.53.0/24 maxlen: 24 140.99.54.0/24 maxlen: 24 140.99.55.0/24 maxlen: 24 140.99.56.0/24 maxlen: 24 140.99.57.0/24 maxlen: 24 140.99.61.0/24 maxlen: 24 140.99.63.0/24 maxlen: 24 140.99.64.0/24 maxlen: 24 140.99.65.0/24 maxlen: 24 140.99.66.0/24 maxlen: 24 140.99.67.0/24 maxlen: 24 140.99.70.0/24 maxlen: 24 140.99.71.0/24 maxlen: 24 140.99.72.0/24 maxlen: 24 140.99.73.0/24 maxlen: 24 140.99.74.0/24 maxlen: 24 140.99.75.0/24 maxlen: 24 140.99.76.0/24 maxlen: 24 140.99.221.0/24 maxlen: 24 140.99.232.0/24 maxlen: 24 140.99.234.0/24 maxlen: 24 140.99.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 20:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:1e:91:8d:1e:f0:00:40:5a:36:64:58:6e:a3:86:d5:67:66:c7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Sep 3 05:45:35 2025 GMT Not After : Sep 2 05:50:35 2026 GMT Subject: CN=3C97A9F09A903000E62FEAB8CBF4F67EC07A1F67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6d:68:8c:25:86:7f:aa:23:78:01:cf:b7:f0: c2:9f:16:3e:01:44:42:58:f9:47:ca:28:a5:a3:80: c3:03:e2:16:82:d9:e6:83:19:6d:88:19:dc:32:de: 2b:9e:51:cc:46:39:75:45:5c:dc:a6:d5:ee:1a:11: 9d:7d:0c:eb:66:cc:3c:ec:86:c1:16:b3:95:32:cb: 02:96:bc:80:89:20:06:1b:a6:48:5e:6f:be:b0:bd: d0:db:84:3c:42:8c:19:f8:69:5a:bc:0a:ee:3d:bd: 9e:87:82:50:dd:76:79:15:cb:e7:d6:ff:31:d1:d3: 22:08:ce:2b:86:43:50:1a:23:fc:6a:29:14:58:14: 9e:c9:77:59:ed:e4:43:6d:b1:75:79:36:17:b6:42: 85:db:1d:de:1b:27:e8:73:52:03:01:62:fe:d2:3f: c9:21:3e:78:00:08:31:88:bc:f7:5e:e6:c0:7a:ea: 65:59:0c:cc:87:9e:a5:fa:50:45:90:0b:92:87:46: 16:af:5f:1c:06:e9:77:c8:64:20:4b:37:59:74:b8: 9e:ac:53:36:6a:0f:e8:a8:5d:24:ad:d0:4e:f7:17: f0:c1:71:6e:65:bc:aa:d1:82:5f:ef:34:06:f1:66: d2:31:b4:9e:f7:0b:fc:0a:8b:f4:ab:d9:0e:33:ed: e8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:97:A9:F0:9A:90:30:00:E6:2F:EA:B8:CB:F4:F6:7E:C0:7A:1F:67 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.12.0/24 140.99.50.0-140.99.57.255 140.99.61.0/24 140.99.63.0-140.99.67.255 140.99.70.0-140.99.76.255 140.99.221.0/24 140.99.232.0/24 140.99.234.0/23 Signature Algorithm: sha256WithRSAEncryption 45:d7:f7:a4:40:10:b6:59:a7:af:cb:fa:4c:5f:68:d8:5e:32: 92:4a:80:5b:fa:e4:8d:37:0c:a4:f9:d9:b0:c7:c9:3f:63:7b: 50:6f:c8:7a:c2:50:c5:50:13:05:23:1a:a5:d8:54:53:72:9b: b3:5c:62:83:66:2a:98:a7:12:19:9c:eb:18:ae:c6:0a:b4:27: 79:47:9a:39:26:f5:79:1a:65:58:a0:46:0e:3e:16:ff:d3:66: cf:ad:bf:c3:bf:1b:17:70:1e:4a:dc:6b:0f:ea:50:3a:86:36: 9f:a6:a2:78:f4:eb:9c:23:07:2b:b1:19:c1:34:29:4e:22:a5: 72:2d:bc:cc:90:a4:50:5d:05:4b:cc:bb:c0:c7:dd:2d:3d:96: 45:32:4f:eb:4c:a5:ae:aa:62:6e:27:f8:8b:1a:02:fb:99:ba: 77:0d:22:b7:d8:59:fb:96:3f:73:29:ce:52:26:f4:f8:a7:1d: 08:f2:bd:a5:09:e8:06:30:23:53:15:7a:69:ac:82:94:80:5b: f8:da:b6:46:04:f3:65:ea:aa:ef:dd:1c:35:66:84:a9:58:bc: d6:31:99:2d:c4:e1:b6:9e:79:0e:45:3b:1a:ba:67:d3:1f:0a: 0b:77:24:33:f7:09:55:be:c0:01:a0:c2:ef:f6:5a:58:e9:2d: 5e:3e:9a:20 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUPx6RjR7wAEBaNmRYbqOG1Wdmx3AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUwOTAzMDU0NTM1WhcNMjYwOTAyMDU1MDM1 WjAzMTEwLwYDVQQDEygzQzk3QTlGMDlBOTAzMDAwRTYyRkVBQjhDQkY0RjY3RUMw N0ExRjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr21ojCWGf6oj eAHPt/DCnxY+AURCWPlHyiilo4DDA+IWgtnmgxltiBncMt4rnlHMRjl1RVzcptXu GhGdfQzrZsw87IbBFrOVMssClryAiSAGG6ZIXm++sL3Q24Q8QowZ+GlavAruPb2e h4JQ3XZ5Fcvn1v8x0dMiCM4rhkNQGiP8aikUWBSeyXdZ7eRDbbF1eTYXtkKF2x3e Gyfoc1IDAWL+0j/JIT54AAgxiLz3XubAeuplWQzMh56l+lBFkAuSh0YWr18cBul3 yGQgSzdZdLierFM2ag/oqF0krdBO9xfwwXFuZbyq0YJf7zQG8WbSMbSe9wv8Cov0 q9kOM+3oOQIDAQABo4ICwDCCArwwHQYDVR0OBBYEFDyXqfCakDAA5i/quMv09n7A eh9nMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGEG CCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAjGMMMAwDBAGMYzIDBAGMYzgDBACM Yz0wDAMEAIxjPwMEAoxjQDAMAwQBjGNGAwQAjGNMAwQAjGPdAwQAjGPoAwQBjGPq MA0GCSqGSIb3DQEBCwUAA4IBAQBF1/ekQBC2Waevy/pMX2jYXjKSSoBb+uSNNwyk +dmwx8k/Y3tQb8h6wlDFUBMFIxql2FRTcpuzXGKDZiqYpxIZnOsYrsYKtCd5R5o5 JvV5GmVYoEYOPhb/02bPrb/DvxsXcB5K3GsP6lA6hjafpqJ49OucIwcrsRnBNClO IqVyLbzMkKRQXQVLzLvAx90tPZZFMk/rTKWuqmJuJ/iLGgL7mbp3DSK32Fn7lj9z Kc5SJvT4px0I8r2lCegGMCNTFXpprIKUgFv42rZGBPNl6qrv3Rw1ZoSpWLzWMZkt xOG2nnkORTsaumfTHwoLdyQz9wlVvsABoMLv9lpY6S1ePpog -----END CERTIFICATE-----Generated at Thu Sep 18 10:07:46 2025 by rpki-client