$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: MNSY3DysYt81vjlbIFRtTJDG3GFLBy32lXpQQj6/0pc= Subject key identifier: 2D:99:A9:1D:D8:2F:D0:BF:F8:9B:9D:93:CE:9E:14:D4:76:91:14:BD Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 7C0F295F32672910B5CE367D444979FD671730A4 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa Signing time: Sun 05 Oct 2025 08:34:37 +0000 ROA not before: Sun 05 Oct 2025 08:29:37 +0000 ROA not after: Sun 04 Oct 2026 08:34:37 +0000 asID: 16509 IP address blocks: 104.234.13.0/24 maxlen: 24 104.234.137.0/24 maxlen: 24 104.234.141.0/24 maxlen: 24 104.234.143.0/24 maxlen: 24 104.234.160.0/24 maxlen: 24 104.234.175.0/24 maxlen: 24 104.234.187.0/24 maxlen: 24 104.234.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 18:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:0f:29:5f:32:67:29:10:b5:ce:36:7d:44:49:79:fd:67:17:30:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Oct 5 08:29:37 2025 GMT Not After : Oct 4 08:34:37 2026 GMT Subject: CN=2D99A91DD82FD0BFF89B9D93CE9E14D4769114BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:04:18:2d:d2:75:ed:17:2b:1e:8e:62:8f:27: 3b:87:52:8b:4b:b4:6e:c4:8d:4a:2a:ad:6b:02:20: 47:51:88:cc:2c:27:e0:ee:16:00:08:6d:f3:39:d9: b9:93:44:70:0a:8d:9c:41:87:04:4d:35:c3:6d:92: 22:50:02:78:3d:91:a2:8d:9e:d2:00:7d:79:0a:31: 60:d7:5c:94:da:cc:39:12:7f:4f:61:e2:77:6b:c4: c6:5f:bb:fa:fb:52:51:23:77:ea:2b:1c:11:9a:24: e6:02:2d:1e:66:a1:56:c8:8f:b4:95:b4:e5:46:df: 61:49:11:38:1a:8b:bc:96:14:72:89:b6:72:cd:06: d3:65:bd:4d:99:0f:73:77:6f:e3:5c:95:e1:68:6c: 8a:26:fb:1c:d5:56:6d:d5:dd:c8:96:4b:06:59:c6: 14:7e:b0:21:cd:85:47:b6:37:0b:b6:35:73:6d:9f: 52:b2:6e:eb:c6:74:72:3c:0d:8b:dc:ba:88:da:ca: c4:68:10:7d:84:4c:08:73:94:06:09:a6:72:d0:c7: 0d:23:ed:75:18:e2:42:ee:51:7d:62:9c:60:63:34: 41:4a:d8:a5:15:39:9e:a1:b7:e4:47:bd:aa:37:11: 24:40:cc:47:69:17:fd:6f:3f:44:9d:ee:c0:32:ac: 3b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:99:A9:1D:D8:2F:D0:BF:F8:9B:9D:93:CE:9E:14:D4:76:91:14:BD X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.13.0/24 104.234.137.0/24 104.234.141.0/24 104.234.143.0/24 104.234.160.0/24 104.234.175.0/24 104.234.187.0/24 104.234.245.0/24 Signature Algorithm: sha256WithRSAEncryption 87:46:cc:ec:d3:62:47:3e:a3:de:c2:59:52:b3:18:20:40:e5: ba:cd:01:1a:3c:57:11:78:49:62:4c:45:d4:10:25:5f:05:8e: 63:ac:f6:b5:b3:be:e5:95:50:59:07:26:b4:95:15:3f:f7:b4: 75:2d:b5:fe:1b:40:fc:7a:2c:51:76:3d:c0:d6:a9:85:80:d3: 0b:28:af:47:97:f6:ea:8f:c2:a0:d9:9a:8c:04:d4:88:30:5d: 3a:e0:e2:ea:3e:aa:90:c0:2e:6b:30:46:8a:21:31:df:1d:5b: 25:8a:1c:50:55:b6:a6:df:09:ea:2e:b0:3c:b1:5d:32:99:59: b4:db:f9:1f:b8:ed:76:34:4e:0b:bd:3e:dc:f2:3c:f5:1a:ac: 2a:a6:a1:51:b3:ca:12:11:a7:ab:39:41:fb:bd:82:46:6c:f6: 33:d7:c6:78:0c:c5:fb:87:f6:32:be:95:b5:cf:a4:8a:8d:fe: 1a:d6:2a:fc:93:94:27:b9:7d:ab:53:34:66:e2:e3:77:27:50: 1b:db:f4:db:42:cc:d4:9c:fb:e6:34:54:6e:01:04:d5:fc:d8: 85:e3:42:f8:e5:01:f7:0c:91:80:1c:31:56:88:60:f6:f9:d7: 0d:b2:85:a6:e2:f9:4c:48:22:e6:0e:f7:ea:e6:8e:8a:56:67: 37:16:30:06 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUfA8pXzJnKRC1zjZ9REl5/WcXMKQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMDA1MDgyOTM3WhcNMjYxMDA0MDgzNDM3 WjAzMTEwLwYDVQQDEygyRDk5QTkxREQ4MkZEMEJGRjg5QjlEOTNDRTlFMTRENDc2 OTExNEJEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswQYLdJ17Rcr Ho5ijyc7h1KLS7RuxI1KKq1rAiBHUYjMLCfg7hYACG3zOdm5k0RwCo2cQYcETTXD bZIiUAJ4PZGijZ7SAH15CjFg11yU2sw5En9PYeJ3a8TGX7v6+1JRI3fqKxwRmiTm Ai0eZqFWyI+0lbTlRt9hSRE4Gou8lhRyibZyzQbTZb1NmQ9zd2/jXJXhaGyKJvsc 1VZt1d3IlksGWcYUfrAhzYVHtjcLtjVzbZ9Ssm7rxnRyPA2L3LqI2srEaBB9hEwI c5QGCaZy0McNI+11GOJC7lF9YpxgYzRBStilFTmeobfkR72qNxEkQMxHaRf9bz9E ne7AMqw7lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2ZqR3YL9C/+Judk86eFNR2 kRS9MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkG CCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAaOoNAwQAaOqJAwQAaOqNAwQAaOqP AwQAaOqgAwQAaOqvAwQAaOq7AwQAaOr1MA0GCSqGSIb3DQEBCwUAA4IBAQCHRszs 02JHPqPewllSsxggQOW6zQEaPFcReEliTEXUECVfBY5jrPa1s77llVBZBya0lRU/ 97R1LbX+G0D8eixRdj3A1qmFgNMLKK9Hl/bqj8Kg2ZqMBNSIMF064OLqPqqQwC5r MEaKITHfHVslihxQVbam3wnqLrA8sV0ymVm02/kfuO12NE4LvT7c8jz1GqwqpqFR s8oSEaerOUH7vYJGbPYz18Z4DMX7h/YyvpW1z6SKjf4a1ir8k5QnuX2rUzRm4uN3 J1Ab2/TbQszUnPvmNFRuAQTV/NiF40L45QH3DJGAHDFWiGD2+dcNsoWm4vlMSCLm Dvfq5o6KVmc3FjAG -----END CERTIFICATE-----Generated at Thu Oct 30 20:49:20 2025 by rpki-client