$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: DvKuPdU4Zmr+2eXiogi4i2MK90Ul/QSnkedweVbedac= Subject key identifier: 15:E5:D6:E3:47:F2:5F:E8:66:45:3F:EB:2F:5C:96:20:65:41:4F:3D Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 440A00EA8877914CC06F9036910177DF5A6F84B4 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa Signing time: Thu 02 Oct 2025 18:46:14 +0000 ROA not before: Thu 02 Oct 2025 18:41:14 +0000 ROA not after: Thu 01 Oct 2026 18:46:14 +0000 asID: 16509 IP address blocks: 157.254.2.0/23 maxlen: 24 157.254.200.0/22 maxlen: 22 157.254.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:0a:00:ea:88:77:91:4c:c0:6f:90:36:91:01:77:df:5a:6f:84:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Oct 2 18:41:14 2025 GMT Not After : Oct 1 18:46:14 2026 GMT Subject: CN=15E5D6E347F25FE866453FEB2F5C962065414F3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:33:b0:5e:1a:e4:60:60:9f:e4:af:30:d6:4c: b5:80:2f:bf:6f:6a:53:b5:59:6b:da:46:07:9d:5e: f5:1d:10:c3:30:23:ae:0b:99:a6:65:17:db:f1:04: ea:bd:12:35:4f:d6:a0:77:ea:c7:4c:86:89:08:14: a6:b8:8d:d0:54:98:de:99:df:50:67:bb:79:e5:75: 40:5d:0a:91:a0:a7:20:05:a3:30:78:0e:a7:10:90: 0f:fb:ab:16:09:98:45:25:9f:5c:77:e6:70:e7:0c: 58:20:95:68:89:61:31:90:cc:5b:06:31:94:e3:14: f8:89:f4:ba:40:18:96:6c:fc:26:9d:dd:20:7a:df: d7:6c:96:bb:af:cf:d8:9d:ab:01:8f:b4:63:d7:f4: 6e:7e:84:87:ae:96:c2:f4:d7:f4:07:7f:1f:ab:bb: 41:41:b4:ce:7e:16:b6:9f:b5:94:bb:0a:cf:d8:ff: 7d:d1:e2:bb:e0:d2:2e:f8:bb:13:57:c1:53:24:39: 31:72:ad:97:8d:4d:7d:76:3b:c1:1f:7f:b2:0e:b2: e4:76:64:ea:11:89:a2:4c:36:ce:88:6d:77:30:a5: cf:07:60:de:e9:1a:23:35:64:76:d4:89:ee:53:aa: 69:99:fb:b2:28:31:45:29:b9:0c:07:fa:51:27:2f: 6c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E5:D6:E3:47:F2:5F:E8:66:45:3F:EB:2F:5C:96:20:65:41:4F:3D X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.2.0/23 157.254.200.0/22 157.254.217.0/24 Signature Algorithm: sha256WithRSAEncryption b2:a7:df:d7:b2:d6:c9:bb:80:d2:99:5d:d8:0f:81:15:7e:f5: 0c:be:46:d9:9c:eb:8a:a2:6d:0d:42:2b:d3:74:d8:0b:5b:44: c9:cf:2c:eb:9d:e8:96:99:23:55:c4:02:a5:9c:7b:ec:84:ca: 71:24:ef:3e:63:63:79:31:f1:06:52:bc:90:4f:e1:e0:b5:c8: 20:bf:da:f8:69:c5:3f:fe:f2:2a:9e:fd:54:cd:aa:71:fd:d1: e5:ec:4e:b3:d4:87:88:35:07:21:f0:66:34:d7:4a:61:d3:77: 18:07:2a:a6:65:e7:1b:ce:60:8b:2a:af:8e:0a:c8:44:b9:20: 8b:e3:e1:86:ce:f9:07:7c:76:39:4e:b8:d8:dc:df:a3:d4:a4: b4:72:c2:ee:64:e7:af:c8:7c:eb:84:03:19:62:50:38:b9:81: 5a:95:47:b8:c6:b4:26:7c:d7:23:47:d4:35:f4:44:2c:39:20: 65:c4:af:3c:42:74:c5:60:1b:06:b4:96:d9:c0:c6:8d:14:09: c0:50:0b:ec:d9:78:b1:b5:d4:37:c8:ff:5f:aa:24:bd:5b:49: 40:10:4b:b8:80:b9:18:7a:82:85:a3:36:d7:0f:3e:c2:7d:99: fa:1b:40:e8:41:b9:d0:f1:ba:31:16:fc:cd:75:30:9b:7e:59: e9:a8:e0:ea -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIURAoA6oh3kUzAb5A2kQF331pvhLQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUxMDAyMTg0MTE0WhcNMjYxMDAxMTg0NjE0 WjAzMTEwLwYDVQQDEygxNUU1RDZFMzQ3RjI1RkU4NjY0NTNGRUIyRjVDOTYyMDY1 NDE0RjNEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojOwXhrkYGCf 5K8w1ky1gC+/b2pTtVlr2kYHnV71HRDDMCOuC5mmZRfb8QTqvRI1T9agd+rHTIaJ CBSmuI3QVJjemd9QZ7t55XVAXQqRoKcgBaMweA6nEJAP+6sWCZhFJZ9cd+Zw5wxY IJVoiWExkMxbBjGU4xT4ifS6QBiWbPwmnd0get/XbJa7r8/YnasBj7Rj1/RufoSH rpbC9Nf0B38fq7tBQbTOfha2n7WUuwrP2P990eK74NIu+LsTV8FTJDkxcq2XjU19 djvBH3+yDrLkdmTqEYmiTDbOiG13MKXPB2De6RojNWR21InuU6ppmfuyKDFFKbkM B/pRJy9sYwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFBXl1uNH8l/oZkU/6y9cliBl QU89MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnf4CAwQCnf7IAwQAnf7ZMA0GCSqG SIb3DQEBCwUAA4IBAQCyp9/XstbJu4DSmV3YD4EVfvUMvkbZnOuKom0NQivTdNgL W0TJzyzrneiWmSNVxAKlnHvshMpxJO8+Y2N5MfEGUryQT+Hgtcggv9r4acU//vIq nv1Uzapx/dHl7E6z1IeINQch8GY010ph03cYByqmZecbzmCLKq+OCshEuSCL4+GG zvkHfHY5TrjY3N+j1KS0csLuZOevyHzrhAMZYlA4uYFalUe4xrQmfNcjR9Q19EQs OSBlxK88QnTFYBsGtJbZwMaNFAnAUAvs2XixtdQ3yP9fqiS9W0lAEEu4gLkYeoKF ozbXDz7CfZn6G0DoQbnQ8boxFvzNdTCbflnpqODq -----END CERTIFICATE-----Generated at Mon Oct 20 13:44:15 2025 by rpki-client