$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: /8knpT/eoOEgUlTmCD2KmflmzF+IRtM2pwAEIwsOXvg= Subject key identifier: 4D:88:E5:2B:1F:94:6E:19:1E:A8:EA:EB:80:3C:B7:BD:BF:53:EC:BD Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 792D0341C9DC9A56FFAC8EA3B96D89E1BF6CCCC5 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa Signing time: Mon 27 Oct 2025 14:17:42 +0000 ROA not before: Mon 27 Oct 2025 14:12:42 +0000 ROA not after: Mon 26 Oct 2026 14:17:42 +0000 asID: 16509 IP address blocks: 23.95.142.0/24 maxlen: 24 64.50.161.0/24 maxlen: 24 64.50.166.0/24 maxlen: 24 64.50.183.0/24 maxlen: 24 67.210.104.0/24 maxlen: 24 209.200.231.0/24 maxlen: 24 209.200.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:2d:03:41:c9:dc:9a:56:ff:ac:8e:a3:b9:6d:89:e1:bf:6c:cc:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Oct 27 14:12:42 2025 GMT Not After : Oct 26 14:17:42 2026 GMT Subject: CN=4D88E52B1F946E191EA8EAEB803CB7BDBF53ECBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1f:46:0b:a0:15:2b:80:10:11:47:da:81:e8: b3:9b:40:46:e9:39:5a:25:f6:4e:8a:c0:dd:71:4a: 64:00:d8:fd:5a:ba:40:b8:0e:fd:78:3e:2a:d6:0c: 52:b6:3a:43:85:32:3d:8c:a9:37:8a:5a:59:45:10: 05:2f:54:b7:81:e0:14:a9:ee:dd:78:d4:9a:a2:87: fa:3d:bc:25:94:84:b5:53:24:7c:c3:ab:e0:b8:5a: 1a:8c:33:78:67:8b:2c:d9:00:b9:c9:c3:b3:12:cc: 00:20:2e:d8:fd:a5:29:6f:5f:f6:6f:83:25:20:6a: 3b:3b:5e:56:be:c3:30:18:6d:56:52:8c:86:bc:b4: 48:be:5d:c4:9a:2a:73:1c:43:88:fe:89:c6:04:42: 04:a4:4f:3c:81:50:be:e0:3e:9f:ce:da:b5:0d:b6: 23:21:40:d0:92:a9:98:bb:93:0a:9b:c2:3f:5e:69: 2a:fb:f1:7e:d1:9b:77:db:b0:9f:ed:1c:dc:3d:f0: 3a:7f:07:b5:b0:cd:be:c1:54:46:93:a1:8c:a3:12: 99:52:30:b4:60:69:71:01:6d:8b:e1:df:2b:6d:73: a3:a4:3b:60:33:e5:7e:bc:13:b9:ec:b6:2f:7f:ea: 70:dc:13:93:a5:3f:36:4d:fa:88:ce:ae:40:c3:d1: 50:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:88:E5:2B:1F:94:6E:19:1E:A8:EA:EB:80:3C:B7:BD:BF:53:EC:BD X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.142.0/24 64.50.161.0/24 64.50.166.0/24 64.50.183.0/24 67.210.104.0/24 209.200.231.0/24 209.200.241.0/24 Signature Algorithm: sha256WithRSAEncryption 88:ee:c2:0b:4c:55:0c:db:6a:18:69:2f:1d:bf:8f:c2:7b:96: 18:b5:6d:e6:61:45:85:2b:16:92:a7:69:53:11:92:26:c2:5b: b8:d4:64:ae:57:d1:b7:25:ab:b6:14:9a:7d:12:3f:0b:5f:60: b1:00:44:b9:e2:cb:8c:19:ec:45:33:15:d2:9e:73:8a:5f:dd: c5:25:9f:b1:a6:55:23:45:5e:0c:1a:12:e8:f0:fc:30:46:43: bc:3b:12:da:8e:37:33:c2:a4:ab:bd:4f:99:8b:dd:6e:b8:ca: 78:9a:92:62:4d:20:18:f9:b6:6d:69:09:7e:96:3f:11:e2:6a: d3:56:fe:03:f8:99:c1:33:89:98:92:d7:99:c6:09:8e:7b:71: 6f:1d:bb:a3:55:7d:5c:30:da:2d:71:92:11:1d:ca:05:d0:0f: af:f4:92:8c:f2:27:ae:8b:c3:25:c1:e2:ca:2f:2d:43:7c:79: b8:44:3d:13:ab:69:1e:91:4b:35:73:92:08:ad:3d:ba:eb:a0: 78:d8:61:bc:4a:f7:27:e9:36:dc:cd:12:42:08:b0:d9:5a:c0: 5d:fb:86:48:12:a3:08:48:86:b0:0a:a7:f4:7a:bc:fe:94:46: fa:a6:07:8a:63:82:f2:bd:4f:66:d2:54:bd:89:cb:b0:bd:8b: e1:85:3b:8c -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIUeS0DQcncmlb/rI6juW2J4b9szMUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUxMDI3MTQxMjQyWhcNMjYxMDI2MTQxNzQy WjAzMTEwLwYDVQQDEyg0RDg4RTUyQjFGOTQ2RTE5MUVBOEVBRUI4MDNDQjdCREJG NTNFQ0JEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx9GC6AVK4AQ EUfageizm0BG6TlaJfZOisDdcUpkANj9WrpAuA79eD4q1gxStjpDhTI9jKk3ilpZ RRAFL1S3geAUqe7deNSaoof6PbwllIS1UyR8w6vguFoajDN4Z4ss2QC5ycOzEswA IC7Y/aUpb1/2b4MlIGo7O15WvsMwGG1WUoyGvLRIvl3EmipzHEOI/onGBEIEpE88 gVC+4D6fztq1DbYjIUDQkqmYu5MKm8I/Xmkq+/F+0Zt327Cf7RzcPfA6fwe1sM2+ wVRGk6GMoxKZUjC0YGlxAW2L4d8rbXOjpDtgM+V+vBO57LYvf+pw3BOTpT82TfqI zq5Aw9FQpwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFE2I5SsflG4ZHqjq64A8t72/ U+y9MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMG CCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAF1+OAwQAQDKhAwQAQDKmAwQAQDK3 AwQAQ9JoAwQA0cjnAwQA0cjxMA0GCSqGSIb3DQEBCwUAA4IBAQCI7sILTFUM22oY aS8dv4/Ce5YYtW3mYUWFKxaSp2lTEZImwlu41GSuV9G3Jau2FJp9Ej8LX2CxAES5 4suMGexFMxXSnnOKX93FJZ+xplUjRV4MGhLo8PwwRkO8OxLajjczwqSrvU+Zi91u uMp4mpJiTSAY+bZtaQl+lj8R4mrTVv4D+JnBM4mYkteZxgmOe3FvHbujVX1cMNot cZIRHcoF0A+v9JKM8ieui8MlweLKLy1DfHm4RD0Tq2kekUs1c5IIrT2666B42GG8 Svcn6TbczRJCCLDZWsBd+4ZIEqMISIawCqf0erz+lEb6pgeKY4LyvU9m0lS9icuw vYvhhTuM -----END CERTIFICATE-----Generated at Wed Nov 5 21:51:10 2025 by rpki-client