$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: 6GVDZvRrCd5iP0++YzPdUMtlv37ky0CAZ7sBz1+FTLU= Subject key identifier: 2B:F2:44:9A:6F:01:1A:44:5A:CB:0A:F3:46:CD:7C:F4:2E:00:89:92 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 013B4D2AF0F89A747A6BB70C35DEFB88CB52770F Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16509.roa Signing time: Thu 14 Sep 2023 07:57:49 +0000 ROA not before: Thu 14 Sep 2023 07:52:49 +0000 ROA not after: Thu 12 Sep 2024 07:57:49 +0000 asID: 16509 IP address blocks: 23.130.112.0/24 maxlen: 24 23.130.240.0/24 maxlen: 24 23.142.96.0/24 maxlen: 24 23.156.240.0/24 maxlen: 24 23.161.160.0/24 maxlen: 24 140.99.123.0/24 maxlen: 24 140.99.221.0/24 maxlen: 24 140.99.232.0/24 maxlen: 24 140.99.234.0/24 maxlen: 24 140.99.235.0/24 maxlen: 24 2600:3300::/28 maxlen: 28 2600:3310::/28 maxlen: 28 2600:3320::/28 maxlen: 28 2600:3330::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 Sep 2023 09:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:3b:4d:2a:f0:f8:9a:74:7a:6b:b7:0c:35:de:fb:88:cb:52:77:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Sep 14 07:52:49 2023 GMT Not After : Sep 12 07:57:49 2024 GMT Subject: CN=2BF2449A6F011A445ACB0AF346CD7CF42E008992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4c:ee:0b:f6:a5:32:4c:46:bf:60:2e:29:50: d2:51:4d:36:57:28:57:9d:a8:80:a9:4a:a2:a9:ab: 1c:15:e1:76:f1:13:c7:fb:2e:cd:81:55:28:0b:d3: 93:f3:b5:2f:dd:07:50:8f:1f:17:69:08:a6:7e:4e: fd:db:80:c6:50:66:39:ad:25:88:7e:3d:af:43:63: 04:07:55:ea:90:b5:b9:cf:ae:54:62:e9:10:ae:4b: 00:75:84:4d:99:1a:2f:24:90:27:d0:62:54:26:58: b7:74:77:2d:81:e4:8e:5f:ce:c3:8a:ac:5a:a8:6d: 18:7f:32:5b:a6:e1:0a:30:db:8f:50:0a:68:fd:78: c1:df:cf:70:65:ce:5a:30:50:8d:a5:be:86:c4:d6: 89:52:30:15:12:26:f2:e5:8e:4c:4d:e0:38:6c:c7: b3:2b:c1:97:fc:00:a3:1d:fc:ce:69:e4:dc:d8:df: 92:c3:45:4c:75:85:ed:bd:63:d6:79:f9:05:84:2c: 95:b2:d7:21:6c:4f:cc:d8:28:e9:9a:81:6c:9b:7a: 64:25:40:93:20:d5:50:2a:67:b5:22:a4:ee:29:40: dc:0e:c9:9b:bf:76:de:b0:2d:ef:82:3c:8d:b8:b8: 21:a6:b0:df:b3:99:08:f6:be:06:d2:53:16:dd:85: 6f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F2:44:9A:6F:01:1A:44:5A:CB:0A:F3:46:CD:7C:F4:2E:00:89:92 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.130.112.0/24 23.130.240.0/24 23.142.96.0/24 23.156.240.0/24 23.161.160.0/24 140.99.123.0/24 140.99.221.0/24 140.99.232.0/24 140.99.234.0/23 IPv6: 2600:3300::/26 Signature Algorithm: sha256WithRSAEncryption 83:9a:bf:94:41:de:0d:b5:73:da:66:45:fb:75:6c:67:46:48: 25:ab:8b:c0:58:7a:bf:f0:c8:ec:14:ac:6f:f8:bb:f2:c7:29: fa:95:d3:b4:e8:70:7b:2e:3a:61:ed:91:ca:b2:d7:76:c0:8e: ad:05:cd:e4:03:92:40:fb:d8:e3:30:e2:a7:ca:01:d2:ea:78: d9:a4:3c:93:3b:77:1e:0e:b0:80:7a:c8:e1:47:a2:94:1a:8a: f7:3f:3e:08:25:cd:05:87:d9:8d:61:ef:22:de:73:26:0e:6f: 7a:6c:1e:2e:63:ed:47:10:4a:da:96:6e:42:fc:9a:73:b0:58: d9:b7:cf:43:8b:97:a7:ab:80:e7:4b:b9:3a:d9:92:1d:04:88: 86:20:4f:ec:24:4c:30:da:a6:96:c0:c4:6a:98:9a:03:8a:5d: 35:f5:61:19:c0:ef:e5:e9:c8:95:5d:78:42:f2:cf:3b:4d:ab: 92:bb:2e:16:24:4b:db:6f:39:03:bd:3b:e7:04:41:6b:19:82: bc:ae:5f:70:a9:7e:b1:fd:71:ac:2d:93:ad:46:a5:4f:db:35: 17:a9:99:7e:3d:f5:fc:6f:f8:f2:4b:5e:c0:26:e7:92:1f:7b: fe:ba:a4:8a:16:85:0f:0d:44:17:46:90:1b:90:08:ed:52:9f: ea:d2:36:17 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUATtNKvD4mnR6a7cMNd77iMtSdw8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjMwOTE0MDc1MjQ5WhcNMjQwOTEyMDc1NzQ5 WjAzMTEwLwYDVQQDEygyQkYyNDQ5QTZGMDExQTQ0NUFDQjBBRjM0NkNEN0NGNDJF MDA4OTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkzuC/alMkxG v2AuKVDSUU02VyhXnaiAqUqiqascFeF28RPH+y7NgVUoC9OT87Uv3QdQjx8XaQim fk7924DGUGY5rSWIfj2vQ2MEB1XqkLW5z65UYukQrksAdYRNmRovJJAn0GJUJli3 dHctgeSOX87DiqxaqG0YfzJbpuEKMNuPUApo/XjB389wZc5aMFCNpb6GxNaJUjAV Eiby5Y5MTeA4bMezK8GX/ACjHfzOaeTc2N+Sw0VMdYXtvWPWefkFhCyVstchbE/M 2CjpmoFsm3pkJUCTINVQKme1IqTuKUDcDsmbv3besC3vgjyNuLghprDfs5kI9r4G 0lMW3YVvBQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFCvyRJpvARpEWssK80bNfPQu AImSMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4G CCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQAF4JwAwQAF4LwAwQAF45gAwQAF5zw AwQAF6GgAwQAjGN7AwQAjGPdAwQAjGPoAwQBjGPqMA0EAgACMAcDBQYmADMAMA0G CSqGSIb3DQEBCwUAA4IBAQCDmr+UQd4NtXPaZkX7dWxnRkglq4vAWHq/8MjsFKxv +Lvyxyn6ldO06HB7Ljph7ZHKstd2wI6tBc3kA5JA+9jjMOKnygHS6njZpDyTO3ce DrCAesjhR6KUGor3Pz4IJc0Fh9mNYe8i3nMmDm96bB4uY+1HEEralm5C/JpzsFjZ t89Di5enq4DnS7k62ZIdBIiGIE/sJEww2qaWwMRqmJoDil019WEZwO/l6ciVXXhC 8s87TauSuy4WJEvbbzkDvTvnBEFrGYK8rl9wqX6x/XGsLZOtRqVP2zUXqZl+PfX8 b/jyS17AJueSH3v+uqSKFoUPDUQXRpAbkAjtUp/q0jYX -----END CERTIFICATE-----Generated at Thu Sep 14 08:34:46 2023 by rpki-client on console-ams.rpki-client.org