$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: aC+f9Mr87cC/2xuJdN13/ylIiS4DbD3XkpIr27OH/RY= Subject key identifier: 7F:86:D4:0D:02:C9:C9:B8:38:F6:CE:2D:53:A6:24:2B:52:33:E2:5D Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 52E143B38FF4AE407286C04EB2DD55E0A78A3099 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa Signing time: Fri 09 May 2025 06:13:55 +0000 ROA not before: Fri 09 May 2025 06:08:55 +0000 ROA not after: Fri 08 May 2026 06:13:55 +0000 asID: 16509 IP address blocks: 23.95.142.0/24 maxlen: 24 64.50.161.0/24 maxlen: 24 67.210.104.0/24 maxlen: 24 209.200.231.0/24 maxlen: 24 209.200.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 01:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:e1:43:b3:8f:f4:ae:40:72:86:c0:4e:b2:dd:55:e0:a7:8a:30:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: May 9 06:08:55 2025 GMT Not After : May 8 06:13:55 2026 GMT Subject: CN=7F86D40D02C9C9B838F6CE2D53A6242B5233E25D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:08:eb:bc:11:66:27:58:48:db:96:d6:55:14: ba:09:d7:42:47:96:6a:8a:0e:75:a1:a5:41:5f:3c: 35:48:92:e8:3b:59:38:cd:dd:03:5e:02:78:ed:b8: 51:47:48:c1:5a:2a:c0:8b:af:9d:e3:b0:56:85:93: 9f:aa:8d:18:45:8b:c7:fb:5c:34:57:31:d0:77:64: 8a:32:52:6d:59:03:5c:c3:89:cf:fd:9c:70:3a:5d: 58:4d:fa:c0:0f:55:5c:a3:7e:96:fa:d6:c4:fe:00: 4f:8e:87:51:8c:e3:cf:2c:57:1d:40:72:55:85:ce: d8:e2:bc:03:7f:8a:75:8d:f5:74:cc:8a:bf:f2:5e: b9:ca:29:b2:81:bb:f3:c7:33:39:6d:cc:87:b3:96: 6e:d5:b0:50:6f:2c:a2:a5:54:e5:9e:32:b5:2f:d1: 69:1e:aa:f1:6a:40:3f:9f:64:65:1c:0d:ff:1a:50: 23:ae:7c:88:da:ef:42:49:2b:22:97:59:6a:7d:9d: 1f:57:03:90:85:aa:83:83:09:af:1b:15:ab:81:65: 7f:87:b0:57:1a:06:b6:ef:a6:41:0e:8e:c1:e6:f1: d3:c4:44:1b:f3:3f:ac:42:4b:28:f1:46:30:5d:98: 11:36:0e:82:75:a0:b4:d6:9a:67:2c:fd:4e:76:c1: 0b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:86:D4:0D:02:C9:C9:B8:38:F6:CE:2D:53:A6:24:2B:52:33:E2:5D X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.142.0/24 64.50.161.0/24 67.210.104.0/24 209.200.231.0/24 209.200.241.0/24 Signature Algorithm: sha256WithRSAEncryption 43:d8:e6:99:6f:73:dc:e3:31:c5:43:a5:9d:9e:26:77:7c:f8: 80:7b:78:87:57:5a:42:64:a8:d1:77:92:f3:b1:fa:05:0e:a4: 4c:32:f4:83:58:51:c4:d5:73:d6:4f:c0:62:f6:08:43:50:7e: 28:7f:a2:0b:d8:42:8c:85:87:6c:08:18:5b:d9:9a:0c:f6:db: 87:6c:b6:5d:18:f5:4a:61:66:85:6a:85:37:6b:bc:dd:86:55: 98:25:97:5d:65:de:32:af:cc:c8:33:9d:e2:ff:a7:67:67:12: 74:0b:f0:30:8e:b1:cb:50:b0:00:a9:7d:61:8a:64:7e:17:cb: 81:17:9e:c9:9d:8f:95:51:9f:9e:d0:d7:64:90:c3:35:94:89: 1b:92:bc:00:cd:b7:8c:47:6d:e1:ca:85:b6:f2:52:7e:fe:d7: 64:69:ab:c6:76:76:6d:7a:dd:6e:cd:80:cf:8a:85:d5:72:80: 91:2d:03:ba:27:19:1f:b7:51:87:4b:08:51:a3:94:bc:b5:b2: 22:7a:13:de:08:81:ab:d7:ff:e6:be:b2:c7:c7:48:da:b8:37: 8f:f1:1e:cd:85:56:1c:8b:cf:5e:88:e4:5f:f1:04:b5:c0:84: 38:96:57:3d:d0:86:6d:a7:9c:29:98:fc:12:23:91:49:77:54: 34:9e:39:8a -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUUuFDs4/0rkByhsBOst1V4KeKMJkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNTA5MDYwODU1WhcNMjYwNTA4MDYxMzU1 WjAzMTEwLwYDVQQDEyg3Rjg2RDQwRDAyQzlDOUI4MzhGNkNFMkQ1M0E2MjQyQjUy MzNFMjVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gjrvBFmJ1hI 25bWVRS6CddCR5Zqig51oaVBXzw1SJLoO1k4zd0DXgJ47bhRR0jBWirAi6+d47BW hZOfqo0YRYvH+1w0VzHQd2SKMlJtWQNcw4nP/ZxwOl1YTfrAD1Vco36W+tbE/gBP jodRjOPPLFcdQHJVhc7Y4rwDf4p1jfV0zIq/8l65yimygbvzxzM5bcyHs5Zu1bBQ byyipVTlnjK1L9FpHqrxakA/n2RlHA3/GlAjrnyI2u9CSSsil1lqfZ0fVwOQhaqD gwmvGxWrgWV/h7BXGga276ZBDo7B5vHTxEQb8z+sQkso8UYwXZgRNg6CdaC01ppn LP1OdsELvQIDAQABo4ICljCCApIwHQYDVR0OBBYEFH+G1A0Cycm4OPbOLVOmJCtS M+JdMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAF1+OAwQAQDKhAwQAQ9JoAwQA0cjn AwQA0cjxMA0GCSqGSIb3DQEBCwUAA4IBAQBD2OaZb3Pc4zHFQ6WdniZ3fPiAe3iH V1pCZKjRd5LzsfoFDqRMMvSDWFHE1XPWT8Bi9ghDUH4of6IL2EKMhYdsCBhb2ZoM 9tuHbLZdGPVKYWaFaoU3a7zdhlWYJZddZd4yr8zIM53i/6dnZxJ0C/AwjrHLULAA qX1himR+F8uBF57JnY+VUZ+e0NdkkMM1lIkbkrwAzbeMR23hyoW28lJ+/tdkaavG dnZtet1uzYDPioXVcoCRLQO6Jxkft1GHSwhRo5S8tbIiehPeCIGr1//mvrLHx0ja uDeP8R7NhVYci89eiORf8QS1wIQ4llc90IZtp5wpmPwSI5FJd1Q0njmK -----END CERTIFICATE-----Generated at Fri Jun 6 03:53:40 2025 by rpki-client