$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: u86xQJ/HxlfZpSIgcAfoHMB1QoNctbVFHatsNs59JD4= Subject key identifier: 87:0D:12:0B:87:BC:C4:80:45:AF:7B:3C:82:29:54:C6:09:F3:98:03 Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Certificate serial: 71A88A3453E10CF7D94F8010C6B2DBC9B2160B44 Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS16509.roa Signing time: Mon 02 Sep 2024 20:13:05 +0000 ROA not before: Mon 02 Sep 2024 20:08:05 +0000 ROA not after: Mon 01 Sep 2025 20:13:05 +0000 asID: 16509 IP address blocks: 157.53.253.0/24 maxlen: 24 157.53.254.0/24 maxlen: 24 157.53.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 17:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a8:8a:34:53:e1:0c:f7:d9:4f:80:10:c6:b2:db:c9:b2:16:0b:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Validity Not Before: Sep 2 20:08:05 2024 GMT Not After : Sep 1 20:13:05 2025 GMT Subject: CN=870D120B87BCC48045AF7B3C822954C609F39803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:89:57:7e:a4:25:17:00:f8:73:51:9e:db:f6: 08:cd:05:af:eb:b2:b2:30:ef:c7:c0:19:98:97:56: d0:2e:2b:82:48:13:de:9f:06:fc:79:c6:4e:a0:45: f5:44:b4:d2:0f:41:83:81:36:19:51:d4:50:15:9e: a7:95:ba:51:24:4f:03:fc:f7:31:6f:f7:50:a0:66: a7:52:65:20:d7:33:52:be:36:44:bf:79:24:d8:a7: 1a:9b:70:29:dd:1c:60:ff:7a:da:f0:9d:21:2a:e1: 98:a2:54:6e:3e:a6:71:1a:4f:39:ab:75:54:84:6b: 14:26:67:e3:31:13:81:e5:a7:62:7a:91:5e:6d:44: dd:21:f2:b1:31:29:e3:8d:8c:1e:a5:36:c9:c9:f3: fe:d2:f7:24:c3:b5:6b:78:5f:b5:c0:43:66:bd:6d: 8b:ae:10:82:05:a9:83:0c:1b:dd:9a:34:f8:4d:84: b9:78:ef:b8:a4:40:5c:ae:11:e3:5b:71:88:b4:26: 23:ab:52:69:02:02:47:51:7f:93:18:a2:2d:bb:4d: fd:fb:4b:0e:60:85:22:66:19:33:96:23:58:f9:8b: a3:53:be:77:9d:df:60:9a:46:9f:78:b4:13:3a:46: 47:16:0f:61:a0:2a:7f:4e:14:a7:39:a1:44:02:bf: bd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0D:12:0B:87:BC:C4:80:45:AF:7B:3C:82:29:54:C6:09:F3:98:03 X509v3 Authority Key Identifier: keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.53.253.0-157.53.255.255 Signature Algorithm: sha256WithRSAEncryption 87:af:44:b9:60:43:bf:58:0c:20:b3:5c:0e:a3:4f:9c:69:a7: cc:66:ef:1e:5a:b5:38:25:5e:d0:60:f9:2b:12:82:c3:63:0e: bf:29:75:3b:76:6e:f3:ce:4b:97:24:07:a8:f8:1a:c5:fb:8e: 94:84:64:8b:92:8f:46:ed:b6:72:46:c2:42:8e:51:da:01:a1: cb:bd:05:c5:bb:46:36:3e:25:4d:77:47:14:f2:42:58:8e:91: a9:a7:d4:f0:e2:58:50:46:19:c5:56:8f:cb:1b:bb:04:d8:cc: d9:4f:d9:42:39:1f:41:ac:cb:64:78:dc:7e:22:45:18:b3:d2: c4:5d:36:22:f6:5e:fc:5e:7f:6d:f9:89:c2:57:70:c2:bc:fa: fb:d9:e1:d3:31:23:80:87:c0:d9:de:c8:41:0f:54:e7:f0:f6: fc:fc:07:f7:21:18:6a:9f:45:42:6f:91:69:4c:8e:7a:02:8c: 6b:52:ae:68:a4:34:5c:b0:ad:cf:a5:5e:fa:e4:81:04:b7:50: 78:88:2f:b9:de:64:75:48:b3:cb:6a:7a:7b:93:1c:9a:27:f8: bd:b3:59:60:3c:c5:15:84:02:37:51:63:98:20:52:8c:73:c2: 83:61:cb:b8:91:40:fd:52:fb:93:fc:fb:f3:7f:c3:38:a0:fc: 25:db:4d:ec -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUcaiKNFPhDPfZT4AQxrLbybIWC0QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjQwOTAyMjAwODA1WhcNMjUwOTAxMjAxMzA1 WjAzMTEwLwYDVQQDEyg4NzBEMTIwQjg3QkNDNDgwNDVBRjdCM0M4MjI5NTRDNjA5 RjM5ODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44lXfqQlFwD4 c1Ge2/YIzQWv67KyMO/HwBmYl1bQLiuCSBPenwb8ecZOoEX1RLTSD0GDgTYZUdRQ FZ6nlbpRJE8D/Pcxb/dQoGanUmUg1zNSvjZEv3kk2Kcam3Ap3Rxg/3ra8J0hKuGY olRuPqZxGk85q3VUhGsUJmfjMROB5adiepFebUTdIfKxMSnjjYwepTbJyfP+0vck w7VreF+1wENmvW2LrhCCBamDDBvdmjT4TYS5eO+4pEBcrhHjW3GItCYjq1JpAgJH UX+TGKItu039+0sOYIUiZhkzliNY+YujU753nd9gmkafeLQTOkZHFg9hoCp/ThSn OaFEAr+91QIDAQABo4IChTCCAoEwHQYDVR0OBBYEFIcNEguHvMSARa97PIIpVMYJ 85gDMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0 ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw ODRiODYvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCYG CCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBACdNf0DAwGdNDANBgkqhkiG9w0B AQsFAAOCAQEAh69EuWBDv1gMILNcDqNPnGmnzGbvHlq1OCVe0GD5KxKCw2MOvyl1 O3Zu885LlyQHqPgaxfuOlIRki5KPRu22ckbCQo5R2gGhy70FxbtGNj4lTXdHFPJC WI6RqafU8OJYUEYZxVaPyxu7BNjM2U/ZQjkfQazLZHjcfiJFGLPSxF02IvZe/F5/ bfmJwldwwrz6+9nh0zEjgIfA2d7IQQ9U5/D2/PwH9yEYap9FQm+RaUyOegKMa1Ku aKQ0XLCtz6Ve+uSBBLdQeIgvud5kdUizy2p6e5Mcmif4vbNZYDzFFYQCN1FjmCBS jHPCg2HLuJFA/VL7k/z783/DOKD8JdtN7A== -----END CERTIFICATE-----Generated at Thu Nov 21 17:27:32 2024 by rpki-client on console-fra.rpki-client.org