$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: Sz2LieYAu0zkf5Gzh8ozcJeajeoXGhXXU0IoVj6UVPw= Subject key identifier: 5E:3F:27:23:CB:4C:6B:81:A3:A0:6A:93:C1:2E:12:C6:9C:39:C7:65 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 0169B31E8240C2681E43044C33450568971D6CFD Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa Signing time: Sun 21 Jan 2024 20:01:12 +0000 ROA not before: Sun 21 Jan 2024 19:56:12 +0000 ROA not after: Sun 19 Jan 2025 20:01:12 +0000 asID: 16509 IP address blocks: 209.200.231.0/24 maxlen: 24 209.200.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 07:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:69:b3:1e:82:40:c2:68:1e:43:04:4c:33:45:05:68:97:1d:6c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jan 21 19:56:12 2024 GMT Not After : Jan 19 20:01:12 2025 GMT Subject: CN=5E3F2723CB4C6B81A3A06A93C12E12C69C39C765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:44:11:ce:3b:75:a9:dc:64:9b:d9:34:31:bf: c6:11:5a:b5:1e:b5:90:c5:73:1f:d3:cb:ce:61:6c: 30:56:38:c0:2f:58:40:ae:25:4a:15:3c:f6:2b:08: 2e:b5:d2:f2:8c:5e:d7:12:73:21:28:40:29:3f:d5: 0e:0d:b4:1d:eb:7e:76:94:aa:68:72:25:3c:10:50: 0e:4c:4e:ad:c0:f0:a3:aa:ea:c4:6d:9d:7f:fb:84: 48:98:a8:64:fa:43:71:3c:5e:bb:a6:84:95:80:3b: 8a:7d:c9:aa:d1:12:66:39:eb:8d:d5:13:65:87:c8: 98:1f:65:64:ef:cb:1f:31:de:7a:a8:a8:3e:72:f7: 6a:29:be:41:39:f2:2b:6a:ed:79:00:dd:a4:aa:7e: 2d:c9:3e:e6:82:37:20:dd:32:ae:d0:de:3e:67:f7: 97:c2:b3:1b:71:35:19:92:32:22:e3:34:d1:5d:d5: 19:2e:6f:3c:5e:06:8d:d9:d7:cf:b4:c3:8d:e0:66: 68:af:46:0b:a4:e8:03:b3:7b:e5:df:ba:73:b9:16: 37:95:0d:79:6a:c6:b9:20:0a:56:04:08:0e:bf:c3: b3:d7:f0:b9:7e:b6:33:2f:c5:12:13:ba:ec:8c:df: a6:dd:f4:e4:c9:fd:4d:a7:1a:3a:77:57:5a:19:e8: d5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:3F:27:23:CB:4C:6B:81:A3:A0:6A:93:C1:2E:12:C6:9C:39:C7:65 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.200.231.0/24 209.200.241.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:dc:c9:0c:74:9c:d2:e9:4f:be:df:32:92:8a:84:66:8c:63: a4:09:a5:40:37:a1:c4:d3:b0:7d:d5:98:5d:8d:e7:bd:8e:eb: 17:af:2a:3c:0a:da:92:77:cd:6e:5f:34:39:e5:6b:71:1d:0b: c1:33:9b:0d:a2:44:7e:ad:7d:5c:77:1a:dc:aa:5b:cd:0d:10: f2:ed:f8:d1:ab:eb:39:cc:89:de:fb:55:03:01:ee:18:6e:a5: 91:98:4c:23:f3:ad:11:2f:70:c6:88:26:bb:3c:53:c5:36:32: b4:8b:3c:c5:2b:fc:76:e1:3b:24:a1:fd:ea:96:f5:3d:66:b3: dc:3a:fc:2f:9a:21:4c:dd:14:5d:24:c0:f3:a1:be:11:da:b9: 78:65:d3:95:65:10:7d:a8:94:44:1c:36:02:5d:85:4c:86:b1: 83:2f:90:df:60:0a:7e:89:5b:b3:5d:7e:47:8e:85:26:48:67: d1:db:ba:41:b7:83:a2:e5:18:bc:62:a0:43:06:2e:ed:87:88: 0b:93:42:8f:6e:2d:e8:ca:15:f6:b8:6e:25:2e:98:7b:c7:7d: 67:8e:cd:c6:89:fc:6c:ae:4d:97:76:fa:b5:07:c4:21:b8:eb: 48:d8:8e:15:ae:93:67:09:6c:74:5e:21:69:40:59:82:6a:80: 57:eb:3c:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUAWmzHoJAwmgeQwRMM0UFaJcdbP0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjQwMTIxMTk1NjEyWhcNMjUwMTE5MjAwMTEy WjAzMTEwLwYDVQQDEyg1RTNGMjcyM0NCNEM2QjgxQTNBMDZBOTNDMTJFMTJDNjlD MzlDNzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUQRzjt1qdxk m9k0Mb/GEVq1HrWQxXMf08vOYWwwVjjAL1hAriVKFTz2KwgutdLyjF7XEnMhKEAp P9UODbQd6352lKpociU8EFAOTE6twPCjqurEbZ1/+4RImKhk+kNxPF67poSVgDuK fcmq0RJmOeuN1RNlh8iYH2Vk78sfMd56qKg+cvdqKb5BOfIrau15AN2kqn4tyT7m gjcg3TKu0N4+Z/eXwrMbcTUZkjIi4zTRXdUZLm88XgaN2dfPtMON4GZor0YLpOgD s3vl37pzuRY3lQ15asa5IApWBAgOv8Oz1/C5frYzL8USE7rsjN+m3fTkyf1Npxo6 d1daGejVQQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFF4/JyPLTGuBo6Bqk8EuEsac OcdlMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0cjnAwQA0cjxMA0GCSqGSIb3DQEB CwUAA4IBAQBL3MkMdJzS6U++3zKSioRmjGOkCaVAN6HE07B91Zhdjee9jusXryo8 CtqSd81uXzQ55WtxHQvBM5sNokR+rX1cdxrcqlvNDRDy7fjRq+s5zIne+1UDAe4Y bqWRmEwj860RL3DGiCa7PFPFNjK0izzFK/x24Tskof3qlvU9ZrPcOvwvmiFM3RRd JMDzob4R2rl4ZdOVZRB9qJREHDYCXYVMhrGDL5DfYAp+iVuzXX5HjoUmSGfR27pB t4Oi5Ri8YqBDBi7th4gLk0KPbi3oyhX2uG4lLph7x31njs3Gifxsrk2Xdvq1B8Qh uOtI2I4VrpNnCWx0XiFpQFmCaoBX6zym -----END CERTIFICATE-----Generated at Thu Apr 25 05:43:48 2024 by rpki-client on console-fra.rpki-client.org