$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: HaBu14rRetqgHEWU+YL6azlSm2X/ZVZi8wuiAXLYdDU= Subject key identifier: 18:BD:62:BC:CF:23:F0:69:6F:C3:10:27:2F:A7:89:67:4B:8A:D4:00 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 3213E013D80C81E76E5095420B11510051660B6E Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16509.roa Signing time: Tue 06 Aug 2024 00:00:06 +0000 ROA not before: Mon 05 Aug 2024 23:55:06 +0000 ROA not after: Tue 05 Aug 2025 00:00:06 +0000 asID: 16509 IP address blocks: 140.99.12.0/24 maxlen: 24 140.99.50.0/24 maxlen: 24 140.99.51.0/24 maxlen: 24 140.99.52.0/24 maxlen: 24 140.99.53.0/24 maxlen: 24 140.99.54.0/24 maxlen: 24 140.99.55.0/24 maxlen: 24 140.99.56.0/24 maxlen: 24 140.99.57.0/24 maxlen: 24 140.99.61.0/24 maxlen: 24 140.99.63.0/24 maxlen: 24 140.99.64.0/24 maxlen: 24 140.99.65.0/24 maxlen: 24 140.99.66.0/24 maxlen: 24 140.99.67.0/24 maxlen: 24 140.99.70.0/24 maxlen: 24 140.99.71.0/24 maxlen: 24 140.99.72.0/24 maxlen: 24 140.99.73.0/24 maxlen: 24 140.99.74.0/24 maxlen: 24 140.99.75.0/24 maxlen: 24 140.99.76.0/24 maxlen: 24 140.99.221.0/24 maxlen: 24 140.99.232.0/24 maxlen: 24 140.99.234.0/24 maxlen: 24 140.99.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 31 Oct 2024 11:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:13:e0:13:d8:0c:81:e7:6e:50:95:42:0b:11:51:00:51:66:0b:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Aug 5 23:55:06 2024 GMT Not After : Aug 5 00:00:06 2025 GMT Subject: CN=18BD62BCCF23F0696FC310272FA789674B8AD400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:b4:89:6c:20:d3:0a:1e:0c:ca:42:84:02: 4e:ca:01:c6:09:6d:b4:db:f3:52:0a:71:f0:de:23: cf:f8:c7:ef:bb:e4:23:96:6c:bb:36:af:39:10:5c: 4e:75:80:a5:e6:4e:ae:d7:66:f9:63:66:c2:4a:d9: 0c:d4:d6:a6:49:92:74:1f:a5:8e:c7:81:71:0e:a0: 5e:af:7c:00:10:49:94:6d:f2:4a:34:26:88:50:75: 93:74:79:ae:69:ad:e5:58:9f:a2:b4:ca:36:2a:a5: 48:b0:6b:ad:76:40:35:2a:22:0b:ad:90:f9:79:3d: 23:a7:33:96:27:8e:fd:cc:a3:da:03:78:06:4a:03: 02:c4:72:4c:b4:49:17:6d:74:ed:3d:82:50:e9:57: 3c:a8:f3:36:20:68:d6:02:29:f6:dd:f4:b5:37:2a: fe:d6:34:e7:25:b5:b1:01:e8:a5:3b:a1:96:9a:6c: fa:6c:da:8e:55:db:e2:80:2f:53:f4:3f:3d:e8:db: 07:3e:40:e9:61:fa:3a:15:a8:51:00:2f:e3:37:ae: 91:f6:b7:f4:76:a4:d8:c2:bc:7a:f4:f3:70:b1:59: 76:ba:58:82:8b:52:bf:32:d4:51:54:77:72:7e:40: 1d:ec:eb:95:3a:3c:95:76:97:ac:25:f2:7d:94:5f: 8e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BD:62:BC:CF:23:F0:69:6F:C3:10:27:2F:A7:89:67:4B:8A:D4:00 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.12.0/24 140.99.50.0-140.99.57.255 140.99.61.0/24 140.99.63.0-140.99.67.255 140.99.70.0-140.99.76.255 140.99.221.0/24 140.99.232.0/24 140.99.234.0/23 Signature Algorithm: sha256WithRSAEncryption bb:b3:f7:ec:c3:0e:2c:6c:4f:78:9f:2c:f0:fc:57:73:0f:27: c4:e1:41:08:30:a8:ec:d9:65:aa:5a:83:c7:0d:40:3e:95:22: 73:15:56:41:6f:3c:07:4f:f1:89:b4:a3:43:d9:c1:f7:ca:9d: ca:4b:ff:84:88:7e:17:72:d8:61:40:a1:e0:f5:80:28:11:9e: a5:b8:30:b0:66:8f:88:2d:6b:05:8f:75:66:11:97:2d:73:fb: e8:ba:60:7c:15:e5:d0:e5:3d:18:4e:a3:5c:1a:da:cf:b4:31: 33:ef:65:7f:8c:c3:29:a3:1f:92:3b:32:81:23:d7:90:3a:c5: 34:1e:27:5a:97:2a:c8:ac:cb:55:12:6b:d4:3a:9c:6f:98:ae: 36:03:66:77:6b:b0:59:57:db:5a:77:61:17:04:69:c4:80:04: cf:6a:b5:77:a9:a2:2f:45:26:b7:f3:ec:60:e0:a1:32:51:b5: ff:04:0e:8e:e4:88:bf:3e:67:7a:4a:75:87:56:ad:58:4f:a0: a8:6f:a7:13:e5:fe:ef:63:2e:6e:d1:d1:15:7e:b6:30:a8:df: 9e:92:d1:cf:25:ed:ec:87:11:c8:f9:2c:7a:ec:4a:0f:f4:5d: 2f:44:07:db:63:af:e1:f7:4e:c4:94:81:24:fe:d6:3d:81:08: 54:67:0e:25 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUMhPgE9gMgeduUJVCCxFRAFFmC24wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjQwODA1MjM1NTA2WhcNMjUwODA1MDAwMDA2 WjAzMTEwLwYDVQQDEygxOEJENjJCQ0NGMjNGMDY5NkZDMzEwMjcyRkE3ODk2NzRC OEFENDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZq0iWwg0woe DMpChAJOygHGCW202/NSCnHw3iPP+Mfvu+Qjlmy7Nq85EFxOdYCl5k6u12b5Y2bC StkM1NamSZJ0H6WOx4FxDqBer3wAEEmUbfJKNCaIUHWTdHmuaa3lWJ+itMo2KqVI sGutdkA1KiILrZD5eT0jpzOWJ479zKPaA3gGSgMCxHJMtEkXbXTtPYJQ6Vc8qPM2 IGjWAin23fS1Nyr+1jTnJbWxAeilO6GWmmz6bNqOVdvigC9T9D896NsHPkDpYfo6 FahRAC/jN66R9rf0dqTYwrx69PNwsVl2uliCi1K/MtRRVHdyfkAd7OuVOjyVdpes JfJ9lF+OsQIDAQABo4ICwDCCArwwHQYDVR0OBBYEFBi9YrzPI/Bpb8MQJy+niWdL itQAMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGEG CCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAjGMMMAwDBAGMYzIDBAGMYzgDBACM Yz0wDAMEAIxjPwMEAoxjQDAMAwQBjGNGAwQAjGNMAwQAjGPdAwQAjGPoAwQBjGPq MA0GCSqGSIb3DQEBCwUAA4IBAQC7s/fsww4sbE94nyzw/FdzDyfE4UEIMKjs2WWq WoPHDUA+lSJzFVZBbzwHT/GJtKND2cH3yp3KS/+EiH4XcthhQKHg9YAoEZ6luDCw Zo+ILWsFj3VmEZctc/voumB8FeXQ5T0YTqNcGtrPtDEz72V/jMMpox+SOzKBI9eQ OsU0HidalyrIrMtVEmvUOpxvmK42A2Z3a7BZV9tad2EXBGnEgATParV3qaIvRSa3 8+xg4KEyUbX/BA6O5Ii/Pmd6SnWHVq1YT6Cob6cT5f7vYy5u0dEVfrYwqN+ektHP Je3shxHI+Sx67EoP9F0vRAfbY6/h907ElIEk/tY9gQhUZw4l -----END CERTIFICATE-----Generated at Wed Oct 30 11:02:45 2024 by rpki-client on console-fra.rpki-client.org