$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: JYul5xCJeYMLcdd7jUNT3HreOXcL7ubvcuPlMytJPV4= Subject key identifier: 06:D5:CA:EB:88:85:72:A9:4E:7B:87:A3:63:D3:50:0B:D6:90:9A:A1 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 1FE703853073F2B42791A1224EA275273C918B9E Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa Signing time: Thu 11 Apr 2024 13:13:42 +0000 ROA not before: Thu 11 Apr 2024 13:08:42 +0000 ROA not after: Thu 10 Apr 2025 13:13:42 +0000 asID: 16509 IP address blocks: 157.254.2.0/23 maxlen: 24 157.254.49.0/24 maxlen: 24 157.254.200.0/22 maxlen: 22 157.254.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 11:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e7:03:85:30:73:f2:b4:27:91:a1:22:4e:a2:75:27:3c:91:8b:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Apr 11 13:08:42 2024 GMT Not After : Apr 10 13:13:42 2025 GMT Subject: CN=06D5CAEB888572A94E7B87A363D3500BD6909AA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:92:36:11:ae:c8:96:4e:69:3a:e5:e4:9f:5d: 6b:73:50:8b:a6:20:57:f7:e0:44:d9:0a:0e:c6:50: e1:fc:9f:f0:05:59:81:39:23:2b:db:f8:96:9f:f2: 81:20:36:26:a6:c5:c1:d9:ba:82:eb:0d:f9:3c:28: f6:ae:05:00:60:2b:3b:45:26:84:22:17:c8:24:04: 49:73:ce:2f:d1:d4:66:75:f7:0d:91:0a:64:29:37: b4:54:19:e9:41:a6:e0:42:a2:30:91:5e:48:8e:83: 8c:76:3d:2b:6c:dd:0b:b9:3b:3d:0e:a6:a5:86:6b: 80:4b:2b:a2:85:53:06:90:b4:20:48:f2:ac:8e:17: 93:17:c0:38:f3:e9:e5:c6:00:79:e9:b1:3c:c1:b0: 9e:44:9d:89:09:48:70:72:ad:71:1b:3b:3d:89:6e: f1:a8:02:b7:4c:b0:4b:d8:ec:31:85:7d:6c:8e:7d: 56:17:f5:25:23:a1:0e:b5:e2:16:cd:b1:b7:bb:2c: 9e:2a:c8:f7:1c:e5:58:54:7b:df:86:bb:57:78:fe: 63:1a:12:7c:28:38:d2:ee:41:e2:ba:fd:cd:02:d9: 76:4c:8c:c4:bd:bf:f2:45:7b:15:df:fa:e7:82:88: 6c:83:00:05:50:4c:59:16:84:21:f3:19:fb:28:2d: 47:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D5:CA:EB:88:85:72:A9:4E:7B:87:A3:63:D3:50:0B:D6:90:9A:A1 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.2.0/23 157.254.49.0/24 157.254.200.0/22 157.254.217.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:d2:98:02:4b:a2:b1:bb:bd:fa:46:22:1b:e2:bb:ff:a5:b9: 95:ff:8b:5c:5e:e5:5a:28:e4:6f:bd:cc:4e:2b:1d:3e:df:b3: ea:f2:c4:b4:c1:1e:77:f7:ea:ce:e9:6e:63:a5:ad:1e:bb:3c: a1:b7:e6:79:d7:f8:31:65:d7:7b:18:d6:8d:d6:47:e3:06:5a: 3d:5f:b7:84:4e:b5:bc:e7:f6:de:5d:3d:47:6e:89:54:8e:70: ad:fb:47:c4:c7:0b:70:2b:5f:ea:de:f0:4f:59:75:cf:12:ed: 8a:fd:1a:ef:8b:18:e6:b5:8a:2a:87:fb:ef:cc:02:ab:1c:56: 21:32:4e:16:03:4b:0b:66:90:c2:ef:fb:f0:8d:af:2a:da:a3: dd:d7:35:83:9d:ed:f6:85:cb:d8:a7:68:86:d3:7b:a4:d7:f8: b8:ac:c0:e9:91:0f:6c:ba:3e:1d:a3:c5:eb:c0:fc:9a:c9:c3: 8b:e8:c0:d8:47:ec:14:b7:36:82:65:d7:f2:38:73:f7:bc:94: 33:00:89:fd:d5:70:e9:7c:2d:fc:41:10:7b:f5:a5:fb:7e:f2: 34:da:ae:a0:81:c3:70:11:1c:16:4c:99:35:87:4d:50:59:fd: 66:86:9a:77:47:8e:10:65:2f:a5:73:81:9c:4f:d6:a2:19:38: 85:a2:f1:36 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIUH+cDhTBz8rQnkaEiTqJ1JzyRi54wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQwNDExMTMwODQyWhcNMjUwNDEwMTMxMzQy WjAzMTEwLwYDVQQDEygwNkQ1Q0FFQjg4ODU3MkE5NEU3Qjg3QTM2M0QzNTAwQkQ2 OTA5QUExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JI2Ea7Ilk5p OuXkn11rc1CLpiBX9+BE2QoOxlDh/J/wBVmBOSMr2/iWn/KBIDYmpsXB2bqC6w35 PCj2rgUAYCs7RSaEIhfIJARJc84v0dRmdfcNkQpkKTe0VBnpQabgQqIwkV5IjoOM dj0rbN0LuTs9DqalhmuASyuihVMGkLQgSPKsjheTF8A48+nlxgB56bE8wbCeRJ2J CUhwcq1xGzs9iW7xqAK3TLBL2OwxhX1sjn1WF/UlI6EOteIWzbG3uyyeKsj3HOVY VHvfhrtXeP5jGhJ8KDjS7kHiuv3NAtl2TIzEvb/yRXsV3/rngohsgwAFUExZFoQh 8xn7KC1HJQIDAQABo4ICkDCCAowwHQYDVR0OBBYEFAbVyuuIhXKpTnuHo2PTUAvW kJqhMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBnf4CAwQAnf4xAwQCnf7IAwQAnf7Z MA0GCSqGSIb3DQEBCwUAA4IBAQCL0pgCS6Kxu736RiIb4rv/pbmV/4tcXuVaKORv vcxOKx0+37Pq8sS0wR539+rO6W5jpa0euzyht+Z51/gxZdd7GNaN1kfjBlo9X7eE TrW85/beXT1HbolUjnCt+0fExwtwK1/q3vBPWXXPEu2K/RrvixjmtYoqh/vvzAKr HFYhMk4WA0sLZpDC7/vwja8q2qPd1zWDne32hcvYp2iG03uk1/i4rMDpkQ9suj4d o8XrwPyaycOL6MDYR+wUtzaCZdfyOHP3vJQzAIn91XDpfC38QRB79aX7fvI02q6g gcNwERwWTJk1h01QWf1mhpp3R44QZS+lc4GcT9aiGTiFovE2 -----END CERTIFICATE-----Generated at Thu May 2 10:17:28 2024 by rpki-client on console-ams.rpki-client.org