$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: K08I7swi7ZWNEB6Lf5zQ3G90UTsWKnyHzwWzunklPzc= Subject key identifier: A7:AC:5C:D8:C8:D5:DE:37:18:83:0F:34:47:E1:E8:15:4D:7E:A4:AD Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 6D7D6487F8AB6356580D27CDF832825C873B1D0E Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa Signing time: Sun 07 Jul 2024 00:00:23 +0000 ROA not before: Sat 06 Jul 2024 23:55:23 +0000 ROA not after: Sun 06 Jul 2025 00:00:23 +0000 asID: 16509 IP address blocks: 157.254.2.0/23 maxlen: 24 157.254.200.0/22 maxlen: 22 157.254.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 00:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:7d:64:87:f8:ab:63:56:58:0d:27:cd:f8:32:82:5c:87:3b:1d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jul 6 23:55:23 2024 GMT Not After : Jul 6 00:00:23 2025 GMT Subject: CN=A7AC5CD8C8D5DE3718830F3447E1E8154D7EA4AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e1:2e:d1:1f:66:5d:e8:a0:b4:b2:80:5d:53: 58:bf:2a:f0:c9:da:22:fd:04:b7:9d:2b:a1:d5:80: aa:43:e3:e9:eb:2f:aa:91:a4:a6:d7:22:f0:4b:1f: c7:f2:fe:32:24:54:13:a4:a5:7e:de:89:39:32:53: e5:6b:aa:f7:3c:62:e1:82:ba:ef:96:9c:22:c1:86: 12:92:3c:db:cb:15:5c:27:32:04:7d:a0:e8:91:53: df:a8:fc:26:e7:bc:82:41:55:e7:89:d7:c3:14:45: fc:ed:e3:4a:15:1b:ec:ec:7e:2c:b5:d3:1e:21:5a: 8e:69:4d:b0:71:9f:d7:c8:26:54:43:34:8b:a4:bc: 68:19:4d:18:f0:e9:01:52:cc:d8:ec:2e:d1:12:c2: 3d:c2:ab:8d:f2:b1:28:7e:7e:bc:50:45:e6:c9:39: c5:dc:f5:9b:e3:3d:24:3e:8e:23:09:34:e5:2c:64: d2:ab:aa:b1:05:80:b3:17:d4:84:e9:9d:b4:b1:24: 61:77:b8:0e:0b:8c:5e:95:93:59:1f:b4:0a:19:3d: 06:60:4b:89:f4:e3:91:ed:5c:42:7e:4c:41:20:cf: 07:8b:b9:3c:5d:ec:ea:57:67:67:80:d1:8f:e5:61: f1:f4:5e:83:a3:25:c9:ed:aa:9b:5a:4a:41:f0:6f: 01:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AC:5C:D8:C8:D5:DE:37:18:83:0F:34:47:E1:E8:15:4D:7E:A4:AD X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.2.0/23 157.254.200.0/22 157.254.217.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:29:e2:a1:84:ce:ac:b8:59:26:2e:a2:0c:31:35:56:bc:69: 28:7a:56:1d:97:f1:83:b9:f2:58:76:88:17:c8:a7:5c:d7:9d: ba:1b:9f:f0:73:f9:83:08:9a:97:78:36:6f:6a:16:24:93:33: ad:08:53:d0:9b:30:3c:43:3c:28:eb:63:97:31:74:58:94:7c: 0a:f1:b6:f6:b9:92:ab:c9:a6:a6:4a:d6:be:3a:e1:5a:a6:b2: 23:8d:fa:75:7a:66:c1:45:25:ff:30:7e:ee:a3:75:06:eb:c9: 83:b8:68:f6:c0:2d:6a:01:4a:33:5d:03:38:5d:71:7e:e2:fa: ee:8c:24:89:fc:a9:71:ca:4a:af:c2:20:9b:f2:be:48:2b:52: a3:a1:d8:8d:fb:d7:6e:a9:dd:c3:de:71:d1:b7:dc:c5:d9:05: 89:da:cf:bc:11:13:3a:42:ac:7d:93:dd:6d:d1:b7:fd:ee:8c: e4:fd:05:e5:e1:f9:c4:16:10:28:b1:e0:22:58:f8:30:3c:38: 20:85:fc:21:12:c7:81:28:0f:ad:87:dc:a2:aa:b8:01:e7:b6: 97:19:3f:94:20:eb:1a:18:e4:43:32:ae:ba:8e:4c:fc:1a:ca: 9a:98:f9:d7:dd:8d:44:b2:3a:e1:a2:8e:d8:99:2a:67:76:00: a2:e5:ad:a0 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUbX1kh/irY1ZYDSfN+DKCXIc7HQ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQwNzA2MjM1NTIzWhcNMjUwNzA2MDAwMDIz WjAzMTEwLwYDVQQDEyhBN0FDNUNEOEM4RDVERTM3MTg4MzBGMzQ0N0UxRTgxNTRE N0VBNEFEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruEu0R9mXeig tLKAXVNYvyrwydoi/QS3nSuh1YCqQ+Pp6y+qkaSm1yLwSx/H8v4yJFQTpKV+3ok5 MlPla6r3PGLhgrrvlpwiwYYSkjzbyxVcJzIEfaDokVPfqPwm57yCQVXnidfDFEX8 7eNKFRvs7H4stdMeIVqOaU2wcZ/XyCZUQzSLpLxoGU0Y8OkBUszY7C7REsI9wquN 8rEofn68UEXmyTnF3PWb4z0kPo4jCTTlLGTSq6qxBYCzF9SE6Z20sSRhd7gOC4xe lZNZH7QKGT0GYEuJ9OOR7VxCfkxBIM8Hi7k8XezqV2dngNGP5WHx9F6DoyXJ7aqb WkpB8G8B8wIDAQABo4ICijCCAoYwHQYDVR0OBBYEFKesXNjI1d43GIMPNEfh6BVN fqStMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnf4CAwQCnf7IAwQAnf7ZMA0GCSqG SIb3DQEBCwUAA4IBAQCPKeKhhM6suFkmLqIMMTVWvGkoelYdl/GDufJYdogXyKdc 1526G5/wc/mDCJqXeDZvahYkkzOtCFPQmzA8Qzwo62OXMXRYlHwK8bb2uZKryaam Sta+OuFaprIjjfp1embBRSX/MH7uo3UG68mDuGj2wC1qAUozXQM4XXF+4vrujCSJ /KlxykqvwiCb8r5IK1KjodiN+9duqd3D3nHRt9zF2QWJ2s+8ERM6Qqx9k91t0bf9 7ozk/QXl4fnEFhAoseAiWPgwPDgghfwhEseBKA+th9yiqrgB57aXGT+UIOsaGORD Mq66jkz8GsqamPnX3Y1Esjrhoo7YmSpndgCi5a2g -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:20 2025 by rpki-client