$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: EwknD4DdPIVg8Cy0VEPtPOgz7AQl2Ljbb4h0UXxmjj8= Subject key identifier: F3:54:AB:45:55:50:F2:5A:BB:06:3A:A7:02:C4:C2:76:2F:1D:A3:1E Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 099F85978EEAD8735D23CC309AE0EE8BBB3A0C3D Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa Signing time: Wed 27 Nov 2024 07:55:22 +0000 ROA not before: Wed 27 Nov 2024 07:50:22 +0000 ROA not after: Wed 26 Nov 2025 07:55:22 +0000 asID: 16509 IP address blocks: 104.234.13.0/24 maxlen: 24 104.234.137.0/24 maxlen: 24 104.234.141.0/24 maxlen: 24 104.234.143.0/24 maxlen: 24 104.234.160.0/24 maxlen: 24 104.234.175.0/24 maxlen: 24 104.234.187.0/24 maxlen: 24 104.234.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 09:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:9f:85:97:8e:ea:d8:73:5d:23:cc:30:9a:e0:ee:8b:bb:3a:0c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Nov 27 07:50:22 2024 GMT Not After : Nov 26 07:55:22 2025 GMT Subject: CN=F354AB455550F25ABB063AA702C4C2762F1DA31E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:26:fe:8f:1b:d9:d8:fa:4b:33:b4:f2:aa:83: 82:f9:33:f1:07:4c:bc:e8:73:23:1b:5d:24:eb:89: 20:ee:68:16:51:06:a6:ed:25:36:2c:eb:d5:c3:2b: 19:f4:7d:11:12:ce:4b:ed:42:f9:94:10:9e:ac:c9: c0:eb:fd:74:f8:31:ff:2c:3a:83:fb:75:ee:23:72: ab:f3:9c:19:bc:dd:e7:f1:28:0b:aa:6f:17:f0:f1: 63:12:05:cc:b0:c1:7c:98:66:ab:5d:3e:20:e7:1b: 0d:b7:43:ba:44:90:a7:04:88:78:fe:94:f3:9e:70: 24:56:9a:ab:be:95:6e:90:55:2b:35:52:35:f0:51: 87:f9:d8:cc:53:89:d2:67:bf:b1:28:13:8b:47:fa: 1a:40:89:38:2c:30:01:78:cc:dc:34:5c:05:69:42: 55:c1:85:ae:03:e0:f0:ae:57:2c:b2:14:67:d6:48: 31:b7:08:42:8d:8b:41:b7:cc:59:82:e6:60:af:dd: bc:e5:12:ea:c7:0f:e1:37:bf:74:97:46:9d:f9:03: bb:5f:2b:0e:3b:cb:fa:4e:28:f5:3d:ab:1c:82:8e: 4a:da:bd:2a:5d:ba:0d:d7:f2:5e:26:d7:2f:90:f4: 0d:e7:79:98:5d:44:9f:50:39:9a:cb:c7:d6:65:d8: 85:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:54:AB:45:55:50:F2:5A:BB:06:3A:A7:02:C4:C2:76:2F:1D:A3:1E X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.13.0/24 104.234.137.0/24 104.234.141.0/24 104.234.143.0/24 104.234.160.0/24 104.234.175.0/24 104.234.187.0/24 104.234.245.0/24 Signature Algorithm: sha256WithRSAEncryption 23:23:7e:df:25:0e:cc:00:fa:74:63:4a:6c:39:3a:58:6c:36: 5c:68:27:fb:13:d3:d9:78:5a:1f:29:f3:56:35:fa:9f:59:d5: ea:09:4f:77:f4:98:be:67:3c:35:72:ab:5f:60:1f:6c:77:de: a2:f9:20:5e:90:2e:93:82:df:ce:03:5a:d5:5b:21:51:b4:7b: 67:57:5d:5d:73:56:4b:35:ba:f0:48:a0:de:90:ba:70:5b:d8: e2:20:94:e9:f7:91:93:38:8b:1e:d5:ff:4b:a4:c5:d7:1d:28: d7:61:6e:71:22:72:e3:41:a7:ee:0f:6d:68:0b:13:20:57:0c: 5f:e1:71:7f:ce:4f:83:16:50:8c:27:d5:9e:fe:a3:77:0a:37: 11:81:2f:05:96:86:2f:53:02:a7:7f:e6:42:f7:ee:12:d6:3a: fe:71:08:dd:fb:84:a6:15:21:1a:b0:7d:19:c9:90:e6:bb:a5: 91:68:3a:ca:6d:a6:2a:30:11:e4:f5:28:8d:aa:3e:67:a3:54: 37:47:3c:5d:a0:23:50:db:45:e6:c2:1a:a4:b4:b1:18:18:33: c5:ab:7c:12:03:97:1d:90:22:09:7f:16:56:a3:0c:b8:de:f0: 8b:c3:4a:e1:47:02:89:c9:b0:13:d6:9a:16:e4:03:82:f3:58: 92:09:6d:1f -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUCZ+Fl47q2HNdI8wwmuDui7s6DD0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMTI3MDc1MDIyWhcNMjUxMTI2MDc1NTIy WjAzMTEwLwYDVQQDEyhGMzU0QUI0NTU1NTBGMjVBQkIwNjNBQTcwMkM0QzI3NjJG MURBMzFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8yb+jxvZ2PpL M7TyqoOC+TPxB0y86HMjG10k64kg7mgWUQam7SU2LOvVwysZ9H0REs5L7UL5lBCe rMnA6/10+DH/LDqD+3XuI3Kr85wZvN3n8SgLqm8X8PFjEgXMsMF8mGarXT4g5xsN t0O6RJCnBIh4/pTznnAkVpqrvpVukFUrNVI18FGH+djMU4nSZ7+xKBOLR/oaQIk4 LDABeMzcNFwFaUJVwYWuA+DwrlcsshRn1kgxtwhCjYtBt8xZguZgr9285RLqxw/h N790l0ad+QO7XysOO8v6Tij1Pascgo5K2r0qXboN1/JeJtcvkPQN53mYXUSfUDma y8fWZdiFawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNUq0VVUPJauwY6pwLEwnYv HaMeMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkG CCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAaOoNAwQAaOqJAwQAaOqNAwQAaOqP AwQAaOqgAwQAaOqvAwQAaOq7AwQAaOr1MA0GCSqGSIb3DQEBCwUAA4IBAQAjI37f JQ7MAPp0Y0psOTpYbDZcaCf7E9PZeFofKfNWNfqfWdXqCU939Ji+Zzw1cqtfYB9s d96i+SBekC6Tgt/OA1rVWyFRtHtnV11dc1ZLNbrwSKDekLpwW9jiIJTp95GTOIse 1f9LpMXXHSjXYW5xInLjQafuD21oCxMgVwxf4XF/zk+DFlCMJ9We/qN3CjcRgS8F loYvUwKnf+ZC9+4S1jr+cQjd+4SmFSEasH0ZyZDmu6WRaDrKbaYqMBHk9SiNqj5n o1Q3RzxdoCNQ20XmwhqktLEYGDPFq3wSA5cdkCIJfxZWowy43vCLw0rhRwKJybAT 1poW5AOC81iSCW0f -----END CERTIFICATE-----Generated at Fri May 9 10:24:51 2025 by rpki-client