$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: 28ZZy6Mx4Zr9aw8xFGBt+68WyQjbL9wZpqyt1KEEHO0= Subject key identifier: 5D:3C:89:A5:41:97:5E:C7:9E:95:11:33:1D:6B:8F:9F:43:F5:3A:BF Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 08F93062DA4E3D6B579FC580CD71DEA0DD66B093 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa Signing time: Fri 02 Oct 2026 10:29:01 +0000 ROA not before: Fri 02 Oct 2026 10:24:01 +0000 ROA not after: Fri 01 Oct 2027 10:29:01 +0000 asID: 16509 IP address blocks: 157.254.1.0/24 maxlen: 24 157.254.141.0/24 maxlen: 24 157.254.169.0/24 maxlen: 24 157.254.200.0/22 maxlen: 22 157.254.217.0/24 maxlen: 24 157.254.232.0/24 maxlen: 24 157.254.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 10:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:f9:30:62:da:4e:3d:6b:57:9f:c5:80:cd:71:de:a0:dd:66:b0:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Oct 2 10:24:01 2026 GMT Not After : Oct 1 10:29:01 2027 GMT Subject: CN=5D3C89A541975EC79E9511331D6B8F9F43F53ABF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f4:3a:ae:55:15:7d:84:5e:fd:d0:7f:22:d5: aa:d8:90:93:af:1f:a8:ba:b1:00:4b:1a:15:0c:a9: 06:ee:e2:a2:2a:78:9d:5f:82:5a:09:02:7d:a3:ea: 05:47:d4:5c:b0:73:98:f2:46:16:50:92:0f:e4:9b: de:2e:e7:4e:70:9f:0e:5a:36:54:18:44:6f:6c:d4: 71:85:f3:c7:5a:ce:27:35:94:35:9c:8d:c1:f8:4a: b0:fd:55:2f:86:32:e0:72:58:70:a1:36:fb:6c:b5: e1:b3:d4:ca:ca:4f:7f:a9:4b:a6:91:1f:60:e9:c1: 36:87:83:19:db:59:e0:cb:8f:38:36:21:60:86:c6: 32:58:20:0a:33:7f:3a:38:9e:6b:f1:8e:f0:5c:4e: 53:e7:bb:b1:bf:9b:07:95:56:a9:e8:e1:51:e6:02: bd:45:44:b9:16:bd:fb:fa:f4:ba:56:7f:f3:fe:49: be:3d:4d:e3:b7:cd:dc:cd:9c:fb:fb:a5:ef:c6:72: 20:35:07:ee:fc:7d:8d:46:77:fd:93:f9:ed:3c:f5: d4:02:eb:55:01:9d:2e:95:34:c3:a0:fd:f7:bc:1d: 12:a5:bc:10:80:c8:37:4b:ed:4a:e7:f9:70:eb:cc: 60:e9:41:eb:00:66:3e:ae:a7:86:3d:e2:3d:35:00: 8e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3C:89:A5:41:97:5E:C7:9E:95:11:33:1D:6B:8F:9F:43:F5:3A:BF X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.1.0/24 157.254.141.0/24 157.254.169.0/24 157.254.200.0/22 157.254.217.0/24 157.254.232.0/24 157.254.239.0/24 Signature Algorithm: sha256WithRSAEncryption 81:15:12:c9:17:76:1f:81:a8:de:4b:df:72:28:a1:02:f6:92: f4:f0:79:05:d3:0b:7b:3e:70:f5:11:31:24:d7:6b:fc:20:41: b5:48:a1:1c:8c:e1:c2:76:67:1e:ce:7e:40:ef:69:b1:21:0d: 01:c2:48:82:97:0a:16:87:38:29:e9:d2:a8:18:a5:34:d6:ab: 8a:78:ef:89:3a:81:82:b7:c2:0f:25:7d:5b:6c:00:d4:60:ee: 41:d3:24:01:e3:6a:86:13:4c:fa:36:67:07:00:3a:fd:0c:0a: 10:32:8d:11:c3:51:f5:12:ab:e5:e3:be:00:40:9c:19:7e:10: ba:fa:95:3d:9b:56:a3:10:b9:5d:8c:25:60:b5:13:f4:2b:dc: 2f:ed:a1:c6:5c:49:6a:5a:3c:10:73:40:34:be:30:74:75:3e: a9:68:dd:2a:a4:da:9e:a4:08:22:db:59:1f:28:11:2a:a2:91: 30:77:5c:72:6f:ce:7b:b8:a9:10:50:78:6e:1e:c8:55:a3:e4: a6:84:ed:9a:56:2c:fa:f4:37:59:f8:14:e6:41:82:da:90:87: a7:99:1a:24:9a:5b:78:d8:6b:14:e1:df:95:63:30:d8:cf:cf: db:94:47:3f:75:a1:b3:cd:5f:4b:94:60:1e:a1:03:85:5e:21: 25:1a:a3:81 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIUCPkwYtpOPWtXn8WAzXHeoN1msJMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYxMDAyMTAyNDAxWhcNMjcxMDAxMTAyOTAx WjAzMTEwLwYDVQQDEyg1RDNDODlBNTQxOTc1RUM3OUU5NTExMzMxRDZCOEY5RjQz RjUzQUJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/Q6rlUVfYRe /dB/ItWq2JCTrx+ourEASxoVDKkG7uKiKnidX4JaCQJ9o+oFR9RcsHOY8kYWUJIP 5JveLudOcJ8OWjZUGERvbNRxhfPHWs4nNZQ1nI3B+Eqw/VUvhjLgclhwoTb7bLXh s9TKyk9/qUumkR9g6cE2h4MZ21ngy484NiFghsYyWCAKM386OJ5r8Y7wXE5T57ux v5sHlVap6OFR5gK9RUS5Fr37+vS6Vn/z/km+PU3jt83czZz7+6XvxnIgNQfu/H2N Rnf9k/ntPPXUAutVAZ0ulTTDoP33vB0SpbwQgMg3S+1K5/lw68xg6UHrAGY+rqeG PeI9NQCO7wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFF08iaVBl17HnpURMx1rj59D 9Tq/MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMG CCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAnf4BAwQAnf6NAwQAnf6pAwQCnf7I AwQAnf7ZAwQAnf7oAwQAnf7vMA0GCSqGSIb3DQEBCwUAA4IBAQCBFRLJF3Yfgaje S99yKKEC9pL08HkF0wt7PnD1ETEk12v8IEG1SKEcjOHCdmcezn5A72mxIQ0BwkiC lwoWhzgp6dKoGKU01quKeO+JOoGCt8IPJX1bbADUYO5B0yQB42qGE0z6NmcHADr9 DAoQMo0Rw1H1Eqvl474AQJwZfhC6+pU9m1ajELldjCVgtRP0K9wv7aHGXElqWjwQ c0A0vjB0dT6paN0qpNqepAgi21kfKBEqopEwd1xyb857uKkQUHhuHshVo+SmhO2a Viz69DdZ+BTmQYLakIenmRokmlt42GsU4d+VYzDYz8/blEc/daGzzV9LlGAeoQOF XiElGqOB -----END CERTIFICATE-----Generated at Tue Oct 27 22:23:23 2026 by rpki-client