$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: lmAZfYNsWfkcCPhO1xueEAgbyQPdamMMYmjReFQ+aUY= Subject key identifier: 17:13:06:A0:12:EC:3A:1D:63:5E:6A:06:46:79:F9:8E:69:40:13:3A Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 4A48950C9BFFD2C5C354A50D4AD8F1B1F21A74BC Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa Signing time: Sun 19 Feb 2023 19:07:56 +0000 ROA not before: Sun 19 Feb 2023 19:02:56 +0000 ROA not after: Sun 18 Feb 2024 19:07:56 +0000 asID: 16509 IP address blocks: 209.200.231.0/24 maxlen: 24 209.200.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Jul 2023 20:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:48:95:0c:9b:ff:d2:c5:c3:54:a5:0d:4a:d8:f1:b1:f2:1a:74:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Feb 19 19:02:56 2023 GMT Not After : Feb 18 19:07:56 2024 GMT Subject: CN=171306A012EC3A1D635E6A064679F98E6940133A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:68:3b:17:e7:d6:bf:7e:84:91:6b:e1:0e:8e: 12:4e:7c:0b:d4:f5:d2:c2:fa:44:b8:0f:4b:8f:c4: 25:38:20:ac:1b:f8:ea:cd:9f:d4:4e:47:9c:ff:73: 95:41:80:ef:03:05:c8:6d:1f:67:f3:8e:e1:65:80: 56:7e:ec:13:f3:b4:1c:59:da:ad:89:fd:b6:17:24: 32:6d:61:af:38:fc:36:92:60:4e:37:83:b0:0d:bf: b5:14:6e:67:9f:ab:3e:82:12:e0:f2:3c:f6:02:05: cf:80:4b:38:f6:79:46:40:8a:50:dc:4f:29:97:df: 59:e0:37:ee:53:11:be:f2:d0:07:86:03:0f:fd:84: b2:97:7c:7c:0a:b2:15:19:0b:70:66:88:4f:c8:00: a3:53:43:97:f6:74:d0:b7:08:93:14:0b:01:d6:c9: 16:d6:f0:ee:92:6b:e6:f9:7c:98:da:71:2b:e7:d3: 2f:ae:1a:00:4e:d3:1a:a3:43:55:96:0f:7e:28:49: e6:83:0a:25:7c:ea:f1:a2:cb:de:35:f2:9b:ae:6f: c5:88:e4:01:ce:d2:77:b2:6c:9b:d8:48:0a:c1:67: 1f:c2:e0:fb:ea:fe:da:12:9f:ec:1c:e1:e2:8c:7e: 3f:c1:de:ba:83:23:b0:ff:02:37:2c:38:70:f7:3a: c6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:13:06:A0:12:EC:3A:1D:63:5E:6A:06:46:79:F9:8E:69:40:13:3A X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.200.231.0/24 209.200.241.0/24 Signature Algorithm: sha256WithRSAEncryption 54:97:eb:a5:e2:74:b1:11:bd:f1:20:00:26:91:1b:5e:23:3b: 45:8f:ad:78:1a:f8:2d:d4:09:d6:16:b7:e1:56:a8:6f:6e:3c: e5:3e:52:e0:10:e8:33:10:19:dc:f3:09:24:c1:98:cd:f5:40: 8c:5c:f9:57:c1:40:43:02:b2:ca:c7:23:b1:28:00:61:58:05: 16:d9:88:6c:c0:43:4e:59:4a:6b:bd:c5:5c:f3:44:2d:17:8a: bd:13:83:ad:70:0e:7f:76:f5:ef:25:71:c0:06:6f:2b:dc:a8: 18:47:e6:bb:cf:98:61:bc:20:80:5f:6e:e2:8d:71:fd:c1:25: 3a:da:85:72:5b:bd:27:db:71:4b:d1:c7:75:b4:a7:45:d0:c7: 81:30:59:38:25:f7:a0:5c:ea:f2:dd:0c:b0:92:88:5b:d0:5a: a3:35:a9:c7:10:1b:93:2c:83:93:de:8e:5f:ca:0d:bc:65:67: 91:5b:ed:5f:97:1d:13:50:27:9a:29:75:f9:e0:86:77:5d:8e: 73:b1:69:cf:a0:f7:cd:25:47:e1:3c:81:a6:1d:51:ac:3f:c6: b7:c1:58:41:48:d8:52:ea:10:64:6d:5f:91:51:a8:74:aa:60: bf:c8:4c:ec:c0:cc:be:b9:d1:ec:aa:86:00:a4:17:4b:ef:a2: 7f:ab:1f:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUSkiVDJv/0sXDVKUNStjxsfIadLwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjMwMjE5MTkwMjU2WhcNMjQwMjE4MTkwNzU2 WjAzMTEwLwYDVQQDEygxNzEzMDZBMDEyRUMzQTFENjM1RTZBMDY0Njc5Rjk4RTY5 NDAxMzNBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGg7F+fWv36E kWvhDo4STnwL1PXSwvpEuA9Lj8QlOCCsG/jqzZ/UTkec/3OVQYDvAwXIbR9n847h ZYBWfuwT87QcWdqtif22FyQybWGvOPw2kmBON4OwDb+1FG5nn6s+ghLg8jz2AgXP gEs49nlGQIpQ3E8pl99Z4DfuUxG+8tAHhgMP/YSyl3x8CrIVGQtwZohPyACjU0OX 9nTQtwiTFAsB1skW1vDukmvm+XyY2nEr59MvrhoATtMao0NVlg9+KEnmgwolfOrx osveNfKbrm/FiOQBztJ3smyb2EgKwWcfwuD76v7aEp/sHOHijH4/wd66gyOw/wI3 LDhw9zrGiwIDAQABo4IChDCCAoAwHQYDVR0OBBYEFBcTBqAS7DodY15qBkZ5+Y5p QBM6MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0cjnAwQA0cjxMA0GCSqGSIb3DQEB CwUAA4IBAQBUl+ul4nSxEb3xIAAmkRteIztFj614Gvgt1AnWFrfhVqhvbjzlPlLg EOgzEBnc8wkkwZjN9UCMXPlXwUBDArLKxyOxKABhWAUW2YhswENOWUprvcVc80Qt F4q9E4OtcA5/dvXvJXHABm8r3KgYR+a7z5hhvCCAX27ijXH9wSU62oVyW70n23FL 0cd1tKdF0MeBMFk4JfegXOry3Qywkohb0FqjNanHEBuTLIOT3o5fyg28ZWeRW+1f lx0TUCeaKXX54IZ3XY5zsWnPoPfNJUfhPIGmHVGsP8a3wVhBSNhS6hBkbV+RUah0 qmC/yEzswMy+udHsqoYApBdL76J/qx8m -----END CERTIFICATE-----Generated at Wed Jul 19 22:33:09 2023 by rpki-client on console-ams.rpki-client.org