$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: 86lkEd5R1cA2g/42toNlpEyAxSEYKEGLpL7hy/4P/Ks= Subject key identifier: 2F:65:F9:99:6B:3B:FA:F9:AF:7E:20:52:4A:BB:AE:0C:FC:4F:AC:6A Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 1063102002A97E3FAD2363220D63EEE89BB83F99 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa Signing time: Fri 19 Jun 2026 15:24:03 +0000 ROA not before: Fri 19 Jun 2026 15:19:03 +0000 ROA not after: Fri 18 Jun 2027 15:24:03 +0000 asID: 16509 IP address blocks: 23.95.142.0/24 maxlen: 24 23.95.162.0/24 maxlen: 24 64.50.161.0/24 maxlen: 24 64.50.166.0/24 maxlen: 24 64.50.183.0/24 maxlen: 24 67.210.104.0/24 maxlen: 24 209.200.231.0/24 maxlen: 24 209.200.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Jun 2026 15:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:63:10:20:02:a9:7e:3f:ad:23:63:22:0d:63:ee:e8:9b:b8:3f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jun 19 15:19:03 2026 GMT Not After : Jun 18 15:24:03 2027 GMT Subject: CN=2F65F9996B3BFAF9AF7E20524ABBAE0CFC4FAC6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:90:46:4f:0a:03:4b:69:51:f4:1a:ca:c9:0a: be:92:ea:9f:c1:04:d8:d4:2a:2e:f6:48:3d:d1:47: 6a:ea:51:d1:90:46:83:13:e9:9b:4e:cb:b1:9a:f5: 01:8f:6c:b1:0a:a0:8a:74:eb:3d:de:04:6a:3d:ad: 51:91:2a:25:2a:23:0e:92:cc:b4:28:7d:0d:ad:99: 1c:30:6c:7c:ea:ef:a6:1d:a8:a1:97:ac:18:33:68: 2d:bf:d3:ed:c9:8a:43:35:08:e7:e6:c3:b9:6b:b5: d3:5c:c0:f9:bd:20:7f:be:00:e7:95:02:35:b3:47: f4:41:07:96:97:69:cb:4f:4a:1a:7e:6f:3e:4f:67: 5e:a3:9b:fa:d8:48:6c:77:96:cd:d9:72:0e:f6:22: 4f:26:93:29:20:f3:2c:2e:c8:de:c0:cb:f0:24:b3: 5c:92:da:ce:b2:87:88:a1:7b:e9:46:36:48:b2:44: 46:10:c8:c7:34:48:79:5f:90:85:69:38:71:d6:84: 8f:7c:7e:4f:ad:c0:27:89:da:9b:5b:bc:61:0e:cf: 33:55:74:77:e2:48:2c:5b:a5:c6:b3:3e:b1:3f:73: 5c:de:f7:9d:66:21:3f:9c:76:83:4d:56:b3:c3:0d: 42:ea:42:e6:4d:d8:70:bb:19:23:cb:42:1d:ef:3a: 47:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:65:F9:99:6B:3B:FA:F9:AF:7E:20:52:4A:BB:AE:0C:FC:4F:AC:6A X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.142.0/24 23.95.162.0/24 64.50.161.0/24 64.50.166.0/24 64.50.183.0/24 67.210.104.0/24 209.200.231.0/24 209.200.241.0/24 Signature Algorithm: sha256WithRSAEncryption 39:28:d7:ad:00:ac:2b:ba:bb:71:e0:19:b8:02:22:ea:8c:50: 00:60:23:c8:75:1c:c1:e1:cd:d2:d1:8d:66:cf:fb:af:24:64: bf:5c:08:15:66:44:6f:ae:7f:98:0e:99:70:43:d8:a1:ab:b3: 2f:2c:e4:f8:c0:ee:36:2c:f2:47:f9:b7:59:75:9a:cb:66:f8: 06:c1:45:88:97:3e:40:0b:27:8a:2f:4e:1d:f0:d9:1a:75:47: 37:2a:14:c2:f7:43:0b:d3:eb:9c:20:27:39:eb:31:4e:6c:a4: 5f:0e:37:8e:8a:59:fa:25:34:ad:97:dd:fd:8d:6d:36:9d:b6: 93:bc:bf:2a:4f:92:ad:4c:d3:02:d2:ae:02:29:46:8e:0c:67: 8e:ed:d5:15:ad:97:79:b5:1f:60:57:f8:dc:71:23:e5:18:96: 0c:a9:8c:ea:71:27:99:9b:a0:00:db:d4:46:70:22:96:38:77: 3a:da:8c:fd:12:76:ea:5f:c8:e2:d3:25:5d:cf:89:88:38:7a: 57:95:8e:8a:2c:e4:ea:ca:1a:fe:6f:33:2e:3c:9f:79:ff:c0: 8d:b5:f6:7f:25:ae:17:9d:0f:59:50:49:65:52:13:ae:e9:92: 80:d0:cd:0d:17:47:cd:d3:4d:c5:e7:06:f0:da:9c:ce:b6:33: e4:21:ec:0f -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUEGMQIAKpfj+tI2MiDWPu6Ju4P5kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwNjE5MTUxOTAzWhcNMjcwNjE4MTUyNDAz WjAzMTEwLwYDVQQDEygyRjY1Rjk5OTZCM0JGQUY5QUY3RTIwNTI0QUJCQUUwQ0ZD NEZBQzZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pBGTwoDS2lR 9BrKyQq+kuqfwQTY1Cou9kg90Udq6lHRkEaDE+mbTsuxmvUBj2yxCqCKdOs93gRq Pa1RkSolKiMOksy0KH0NrZkcMGx86u+mHaihl6wYM2gtv9PtyYpDNQjn5sO5a7XT XMD5vSB/vgDnlQI1s0f0QQeWl2nLT0oafm8+T2deo5v62Ehsd5bN2XIO9iJPJpMp IPMsLsjewMvwJLNcktrOsoeIoXvpRjZIskRGEMjHNEh5X5CFaThx1oSPfH5PrcAn idqbW7xhDs8zVXR34kgsW6XGsz6xP3Nc3vedZiE/nHaDTVazww1C6kLmTdhwuxkj y0Id7zpHKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9l+ZlrO/r5r34gUkq7rgz8 T6xqMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkG CCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAF1+OAwQAF1+iAwQAQDKhAwQAQDKm AwQAQDK3AwQAQ9JoAwQA0cjnAwQA0cjxMA0GCSqGSIb3DQEBCwUAA4IBAQA5KNet AKwrurtx4Bm4AiLqjFAAYCPIdRzB4c3S0Y1mz/uvJGS/XAgVZkRvrn+YDplwQ9ih q7MvLOT4wO42LPJH+bdZdZrLZvgGwUWIlz5ACyeKL04d8NkadUc3KhTC90ML0+uc ICc56zFObKRfDjeOiln6JTStl939jW02nbaTvL8qT5KtTNMC0q4CKUaODGeO7dUV rZd5tR9gV/jccSPlGJYMqYzqcSeZm6AA29RGcCKWOHc62oz9EnbqX8ji0yVdz4mI OHpXlY6KLOTqyhr+bzMuPJ95/8CNtfZ/Ja4XnQ9ZUEllUhOu6ZKA0M0NF0fN003F 5wbw2pzOtjPkIewP -----END CERTIFICATE-----Generated at Fri Jun 26 02:59:21 2026 by rpki-client