$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: O/aKhOU7Oqdrg99CRtd7FqTYl5Ow9AllzMDNPlIGBPw= Subject key identifier: 94:78:7F:66:E2:02:C4:13:F5:E7:95:13:72:54:BB:D2:D5:99:F6:18 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 0DC7BA1FD3EA23AA0B90383313B72D09657D39B9 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa Signing time: Sat 15 Aug 2026 17:37:15 +0000 ROA not before: Sat 15 Aug 2026 17:32:15 +0000 ROA not after: Sat 14 Aug 2027 17:37:15 +0000 asID: 16509 IP address blocks: 157.254.1.0/24 maxlen: 24 157.254.141.0/24 maxlen: 24 157.254.169.0/24 maxlen: 24 157.254.200.0/22 maxlen: 22 157.254.217.0/24 maxlen: 24 157.254.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 12:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:c7:ba:1f:d3:ea:23:aa:0b:90:38:33:13:b7:2d:09:65:7d:39:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Aug 15 17:32:15 2026 GMT Not After : Aug 14 17:37:15 2027 GMT Subject: CN=94787F66E202C413F5E795137254BBD2D599F618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:11:20:06:e7:39:8e:29:e7:f0:05:b5:85:36: 98:1c:05:c6:71:b3:65:88:6e:e3:82:dd:b4:e8:e1: 38:c1:b9:54:f1:1c:a0:59:22:d0:75:52:2e:4b:a2: 92:98:2f:fb:bf:f4:f5:f7:c4:d0:c1:77:ec:60:99: c2:9a:b4:65:51:f7:e8:fa:aa:a5:f3:98:7b:2c:8d: 10:bd:7b:79:9d:48:13:2b:4b:cd:56:7d:5e:11:3e: bc:73:89:3a:93:a0:b2:02:a9:92:61:a0:43:44:65: c5:dc:1e:25:f8:c8:9e:48:e3:7a:26:5b:5b:b7:c1: 90:8b:27:72:a9:65:b7:1f:f0:1e:6f:ba:54:b7:d2: 82:6e:85:87:5b:1b:5c:d3:87:4e:76:7f:be:ae:c7: 70:c8:09:1e:0b:b9:7e:bd:ef:b2:61:2d:b7:00:57: 96:79:09:55:11:a3:76:c1:57:79:c0:e0:da:0c:b6: ae:ef:88:08:25:6f:d2:8f:e0:d8:16:71:ab:3d:b5: 89:04:b2:36:09:85:cb:5f:0d:1c:19:be:ae:4e:4e: 9c:1f:61:4c:48:55:de:31:f4:1b:14:9f:c5:a3:73: 14:bc:33:12:06:c9:5f:66:ac:6b:86:ba:86:07:fe: d3:c9:76:c0:57:3b:0a:38:58:83:d4:21:d8:6d:a7: 17:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:78:7F:66:E2:02:C4:13:F5:E7:95:13:72:54:BB:D2:D5:99:F6:18 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.1.0/24 157.254.141.0/24 157.254.169.0/24 157.254.200.0/22 157.254.217.0/24 157.254.239.0/24 Signature Algorithm: sha256WithRSAEncryption 55:43:3a:c4:a5:7d:52:6f:c6:57:17:d1:4f:f9:f7:2b:b2:28: 9a:f9:0d:53:c5:2a:d7:0e:73:16:0b:93:84:e6:ea:ff:ae:a5: d3:24:ad:66:1d:1b:63:7b:d6:4b:4d:da:06:02:db:cf:f0:29: fa:1c:0b:3c:90:bd:b6:bd:4e:bf:f6:13:54:fa:f9:01:43:4c: b4:8a:5f:2c:cb:b1:9f:2c:80:ce:03:3e:fc:f0:79:f5:e1:1d: ef:c9:79:8b:37:6c:d7:37:ff:5c:ea:f0:47:1d:d4:bc:f3:b0: e3:89:83:8f:8b:32:c6:87:e5:87:63:c1:a7:45:81:cb:e0:7b: da:48:27:d9:e1:43:9d:83:9d:dc:88:c9:64:4d:61:f2:71:63: 1c:a2:2e:4c:9d:b0:07:3e:c0:42:e1:1d:93:b7:42:42:37:6b: fd:88:d2:ef:c4:94:df:3e:66:bf:e4:a6:b5:75:f6:30:33:90: 30:c5:8a:0e:cc:f4:d6:d7:28:eb:29:b0:c2:ff:58:56:83:28: ee:b2:59:fb:e4:08:e5:dd:91:29:b6:63:88:e8:42:43:21:99: 0f:27:b1:60:52:ad:d5:9f:67:26:49:55:f2:8f:b1:99:58:6b: f0:74:1b:c2:6b:6c:bb:c7:fd:2f:69:83:ab:f9:87:78:e0:56: 75:3d:f5:eb -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUDce6H9PqI6oLkDgzE7ctCWV9ObkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwODE1MTczMjE1WhcNMjcwODE0MTczNzE1 WjAzMTEwLwYDVQQDEyg5NDc4N0Y2NkUyMDJDNDEzRjVFNzk1MTM3MjU0QkJEMkQ1 OTlGNjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhEgBuc5jinn 8AW1hTaYHAXGcbNliG7jgt206OE4wblU8RygWSLQdVIuS6KSmC/7v/T198TQwXfs YJnCmrRlUffo+qql85h7LI0QvXt5nUgTK0vNVn1eET68c4k6k6CyAqmSYaBDRGXF 3B4l+MieSON6Jltbt8GQiydyqWW3H/Aeb7pUt9KCboWHWxtc04dOdn++rsdwyAke C7l+ve+yYS23AFeWeQlVEaN2wVd5wODaDLau74gIJW/Sj+DYFnGrPbWJBLI2CYXL Xw0cGb6uTk6cH2FMSFXeMfQbFJ/Fo3MUvDMSBslfZqxrhrqGB/7TyXbAVzsKOFiD 1CHYbacXpQIDAQABo4ICnDCCApgwHQYDVR0OBBYEFJR4f2biAsQT9eeVE3JUu9LV mfYYMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0G CCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAnf4BAwQAnf6NAwQAnf6pAwQCnf7I AwQAnf7ZAwQAnf7vMA0GCSqGSIb3DQEBCwUAA4IBAQBVQzrEpX1Sb8ZXF9FP+fcr siia+Q1TxSrXDnMWC5OE5ur/rqXTJK1mHRtje9ZLTdoGAtvP8Cn6HAs8kL22vU6/ 9hNU+vkBQ0y0il8sy7GfLIDOAz788Hn14R3vyXmLN2zXN/9c6vBHHdS887DjiYOP izLGh+WHY8GnRYHL4HvaSCfZ4UOdg53ciMlkTWHycWMcoi5MnbAHPsBC4R2Tt0JC N2v9iNLvxJTfPma/5Ka1dfYwM5AwxYoOzPTW1yjrKbDC/1hWgyjusln75Ajl3ZEp tmOI6EJDIZkPJ7FgUq3Vn2cmSVXyj7GZWGvwdBvCa2y7x/0vaYOr+Yd44FZ1PfXr -----END CERTIFICATE-----Generated at Fri Sep 11 17:09:05 2026 by rpki-client