$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: h+Lb/9jrPCX6uspTcZrFjp+QP7xfRaOQxUKPg07zNeY= Subject key identifier: CA:D9:0C:E7:F3:EF:BA:8A:2A:7A:BD:3D:6A:03:5F:DC:E4:30:F4:64 Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Certificate serial: 4D69082688E16776C5BE3CB0288C774C4F197703 Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS16509.roa Signing time: Mon 31 Oct 2022 19:49:17 +0000 ROA not before: Mon 31 Oct 2022 19:44:17 +0000 ROA not after: Mon 30 Oct 2023 19:49:17 +0000 asID: 16509 IP address blocks: 157.53.253.0/24 maxlen: 24 157.53.254.0/24 maxlen: 24 157.53.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Jul 2023 21:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:69:08:26:88:e1:67:76:c5:be:3c:b0:28:8c:77:4c:4f:19:77:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Validity Not Before: Oct 31 19:44:17 2022 GMT Not After : Oct 30 19:49:17 2023 GMT Subject: CN=CAD90CE7F3EFBA8A2A7ABD3D6A035FDCE430F464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ce:8e:99:5a:62:1a:60:99:8d:44:79:8f:e3: 47:a2:b4:e1:03:c1:8a:a8:05:43:21:4d:89:17:11: 2e:17:c8:6a:a3:8d:2a:bc:61:87:df:4b:1e:34:23: e0:d8:9c:ad:0b:20:03:6f:97:85:27:dd:b1:4c:50: 17:6c:ec:25:fa:c2:df:66:57:ed:84:45:d0:11:75: 5e:b7:12:8a:5a:fd:7d:d9:26:0a:84:6a:95:41:2d: e7:4b:26:f5:b9:ce:c7:0e:c8:47:5e:4b:95:12:30: 2b:bf:8a:f5:b8:cb:b4:3f:67:1d:13:9e:99:f4:b5: 3e:b0:fb:13:5b:fe:5d:22:3f:16:ee:8c:d8:f9:5b: 16:bb:27:46:04:d6:d4:01:d4:46:81:72:56:75:ca: da:08:c8:18:3c:d7:01:a7:2f:72:f0:73:34:5a:38: 67:37:03:d2:72:01:ff:67:a7:6e:f2:6f:0e:f1:73: de:5b:c3:9c:20:4e:81:55:41:14:49:84:bb:fa:4b: 16:78:b3:78:6e:a4:af:07:a9:41:ab:76:b8:18:48: d8:9f:bb:76:21:d1:db:43:4e:4c:61:d4:d1:0f:e1: 10:ac:ec:7d:42:69:6b:06:f8:33:59:50:8e:9a:31: e1:f4:b1:cd:e5:24:a6:9f:3b:52:14:3f:5e:cd:68: 14:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D9:0C:E7:F3:EF:BA:8A:2A:7A:BD:3D:6A:03:5F:DC:E4:30:F4:64 X509v3 Authority Key Identifier: keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.53.253.0-157.53.255.255 Signature Algorithm: sha256WithRSAEncryption 61:fc:47:51:27:ad:cb:a0:bb:d6:88:2b:19:84:81:d3:82:d8: 3a:94:9d:22:e2:92:3e:da:ed:ba:f7:ce:2b:7b:3f:ac:b8:55: 67:af:a5:17:d9:3d:b6:11:63:42:16:2d:de:f5:ca:0e:23:b4: 9f:6b:29:74:b7:ea:4d:00:00:df:45:f5:50:6a:f2:82:f4:c8: 1a:42:f5:cb:37:34:30:e5:82:53:69:83:4f:ee:4d:fe:86:a5: c1:3f:45:cd:52:c1:73:c8:fd:f0:5a:72:1d:39:b3:3d:6f:40: 8b:56:d2:af:b8:1b:df:d1:81:ea:3a:7c:63:54:00:dc:f7:66: 20:88:cc:2f:fa:55:24:44:dd:8b:83:20:c0:89:b2:53:b8:93: 11:4a:f4:c6:47:f3:bd:59:6e:1d:d6:32:3c:11:33:52:39:8a: 73:8a:9c:b9:70:b1:7f:08:77:d8:19:ae:b8:e9:88:cf:28:67: b0:e3:8e:3a:85:df:11:67:d7:e8:33:24:43:f8:50:7d:16:de: 31:49:ae:d1:60:76:04:da:06:70:12:8b:f5:1b:80:03:53:19: ea:ca:c4:f5:92:da:6d:c6:2c:5f:f8:76:bf:ae:52:52:10:c5: 92:33:99:e8:5c:4e:d8:d9:e1:82:e5:ab:d7:d3:60:92:32:47: e2:7c:c9:c6 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUTWkIJojhZ3bFvjywKIx3TE8ZdwMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjIxMDMxMTk0NDE3WhcNMjMxMDMwMTk0OTE3 WjAzMTEwLwYDVQQDEyhDQUQ5MENFN0YzRUZCQThBMkE3QUJEM0Q2QTAzNUZEQ0U0 MzBGNDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs6OmVpiGmCZ jUR5j+NHorThA8GKqAVDIU2JFxEuF8hqo40qvGGH30seNCPg2JytCyADb5eFJ92x TFAXbOwl+sLfZlfthEXQEXVetxKKWv192SYKhGqVQS3nSyb1uc7HDshHXkuVEjAr v4r1uMu0P2cdE56Z9LU+sPsTW/5dIj8W7ozY+VsWuydGBNbUAdRGgXJWdcraCMgY PNcBpy9y8HM0WjhnNwPScgH/Z6du8m8O8XPeW8OcIE6BVUEUSYS7+ksWeLN4bqSv B6lBq3a4GEjYn7t2IdHbQ05MYdTRD+EQrOx9QmlrBvgzWVCOmjHh9LHN5SSmnztS FD9ezWgUiwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFMrZDOfz77qKKnq9PWoDX9zk MPRkMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0 ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw ODRiODYvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCYG CCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBACdNf0DAwGdNDANBgkqhkiG9w0B AQsFAAOCAQEAYfxHUSety6C71ogrGYSB04LYOpSdIuKSPtrtuvfOK3s/rLhVZ6+l F9k9thFjQhYt3vXKDiO0n2spdLfqTQAA30X1UGrygvTIGkL1yzc0MOWCU2mDT+5N /oalwT9FzVLBc8j98FpyHTmzPW9Ai1bSr7gb39GB6jp8Y1QA3PdmIIjML/pVJETd i4MgwImyU7iTEUr0xkfzvVluHdYyPBEzUjmKc4qcuXCxfwh32BmuuOmIzyhnsOOO OoXfEWfX6DMkQ/hQfRbeMUmu0WB2BNoGcBKL9RuAA1MZ6srE9ZLabcYsX/h2v65S UhDFkjOZ6FxO2NnhguWr19NgkjJH4nzJxg== -----END CERTIFICATE-----Generated at Wed Jul 19 22:31:46 2023 by rpki-client on console-fra.rpki-client.org