$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: 9QAWxxOhFzNwI0WYVxQyoksFAIZVkw4sHhaFowc7wT0= Subject key identifier: 8E:70:2B:F5:D4:B0:3C:3F:79:EA:C7:A5:09:AB:79:B9:49:68:96:11 Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4 Certificate serial: 2DF40C7D8F575674D3434981073684E02CC2FD0F Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS16509.roa Signing time: Wed 12 Feb 2025 17:59:36 +0000 ROA not before: Wed 12 Feb 2025 17:54:36 +0000 ROA not after: Wed 11 Feb 2026 17:59:36 +0000 asID: 16509 IP address blocks: 64.202.96.0/24 maxlen: 24 66.225.239.0/24 maxlen: 24 205.234.204.0/24 maxlen: 24 216.246.3.0/24 maxlen: 24 216.246.96.0/24 maxlen: 24 216.246.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Feb 2025 23:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f4:0c:7d:8f:57:56:74:d3:43:49:81:07:36:84:e0:2c:c2:fd:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4 Validity Not Before: Feb 12 17:54:36 2025 GMT Not After : Feb 11 17:59:36 2026 GMT Subject: CN=8E702BF5D4B03C3F79EAC7A509AB79B949689611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:de:ef:d8:b7:c8:17:be:c7:0c:e5:3b:4e:ba: fa:b5:6d:bb:61:f6:65:d9:a6:3b:71:6b:a3:c4:1c: 4d:08:64:6d:35:d1:b2:17:1a:11:ae:a9:87:74:6a: 7e:a4:07:91:17:d1:05:d7:d1:e4:a4:4e:ca:1d:de: 21:e6:4a:a4:9d:4e:31:7f:2f:f2:15:10:10:38:d8: 61:7f:78:7d:52:8f:9d:34:93:3d:87:b7:b0:b5:93: b3:ff:79:6c:14:5d:12:bb:96:c8:a7:69:38:a2:7f: 2b:a4:f5:7f:b6:a0:33:dd:77:86:33:3f:55:17:c9: e3:ae:d4:f0:84:4b:2c:95:00:af:87:4f:11:99:91: 11:f1:5d:60:d6:07:2e:c1:c6:fc:2e:1c:1e:c4:ef: e6:83:7e:00:7a:5b:89:f0:e3:b4:e5:c1:c6:e7:1e: 2f:1a:65:fd:52:9c:5e:5f:cf:58:e1:24:be:e0:37: 86:9a:eb:ec:f6:01:46:a5:f7:23:01:cb:bf:97:fd: 87:1d:12:4a:ed:73:7a:53:69:14:16:1d:32:75:4e: 34:1d:52:ec:c3:fa:69:cc:f3:f0:f8:60:b7:26:ab: 1b:9a:7a:a0:97:2d:bd:1f:7d:35:37:db:7b:8e:da: b0:c0:c6:f4:1b:87:7c:6f:58:64:de:68:fd:15:e0: da:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:70:2B:F5:D4:B0:3C:3F:79:EA:C7:A5:09:AB:79:B9:49:68:96:11 X509v3 Authority Key Identifier: keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.202.96.0/24 66.225.239.0/24 205.234.204.0/24 216.246.3.0/24 216.246.96.0/24 216.246.99.0/24 Signature Algorithm: sha256WithRSAEncryption 35:64:4e:d4:10:19:4c:86:2e:3c:e8:77:c7:ed:99:ff:dc:f6: 64:26:49:3c:2c:6c:38:7f:a7:25:7d:b9:6f:e6:38:68:e9:6d: dc:53:bd:ff:6a:0c:85:c7:f1:5b:f3:ff:dc:94:35:09:89:5f: 0b:b9:71:4f:6e:f9:d9:ae:2b:04:f7:ab:b2:a5:9d:94:b4:65: df:9e:3f:24:bd:8e:6a:7a:50:52:78:74:34:43:e8:69:df:de: f6:ac:1a:4e:92:92:04:0a:bb:de:ac:ee:b8:d0:3f:67:96:a7: 26:78:5c:13:44:95:ae:ed:b3:a7:14:fd:4a:6f:a1:b6:06:05: 65:22:f9:45:59:cb:fe:60:ba:67:9d:5c:26:34:0f:96:69:2b: 16:72:8d:c3:05:8a:2c:4a:17:fe:82:dd:36:9f:85:6a:21:1c: 74:79:82:49:58:e1:93:b6:ed:e8:be:6d:02:14:9a:9c:ad:d8: cc:26:3a:be:ca:5a:58:86:7f:9d:06:b0:c7:58:49:8b:83:97: be:54:d0:2f:87:99:5d:8e:44:84:5d:7d:78:f6:35:b3:61:01: 66:ba:ef:39:0f:01:b2:f3:c9:5b:2d:1b:2d:6a:f4:a2:9e:92: 77:98:50:ed:0f:f2:48:60:02:24:83:de:f9:6c:ff:d6:68:09: 43:1e:c9:63 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIULfQMfY9XVnTTQ0mBBzaE4CzC/Q8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjUwMjEyMTc1NDM2WhcNMjYwMjExMTc1OTM2 WjAzMTEwLwYDVQQDEyg4RTcwMkJGNUQ0QjAzQzNGNzlFQUM3QTUwOUFCNzlCOTQ5 Njg5NjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud7v2LfIF77H DOU7Trr6tW27YfZl2aY7cWujxBxNCGRtNdGyFxoRrqmHdGp+pAeRF9EF19HkpE7K Hd4h5kqknU4xfy/yFRAQONhhf3h9Uo+dNJM9h7ewtZOz/3lsFF0Su5bIp2k4on8r pPV/tqAz3XeGMz9VF8njrtTwhEsslQCvh08RmZER8V1g1gcuwcb8LhwexO/mg34A eluJ8OO05cHG5x4vGmX9UpxeX89Y4SS+4DeGmuvs9gFGpfcjAcu/l/2HHRJK7XN6 U2kUFh0ydU40HVLsw/ppzPPw+GC3Jqsbmnqgly29H301N9t7jtqwwMb0G4d8b1hk 3mj9FeDa3wIDAQABo4ICnDCCApgwHQYDVR0OBBYEFI5wK/XUsDw/eerHpQmreblJ aJYRMB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi MzQ2MmEvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0G CCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAQMpgAwQAQuHvAwQAzerMAwQA2PYD AwQA2PZgAwQA2PZjMA0GCSqGSIb3DQEBCwUAA4IBAQA1ZE7UEBlMhi486HfH7Zn/ 3PZkJkk8LGw4f6clfblv5jho6W3cU73/agyFx/Fb8//clDUJiV8LuXFPbvnZrisE 96uypZ2UtGXfnj8kvY5qelBSeHQ0Q+hp3972rBpOkpIECrverO640D9nlqcmeFwT RJWu7bOnFP1Kb6G2BgVlIvlFWcv+YLpnnVwmNA+WaSsWco3DBYosShf+gt02n4Vq IRx0eYJJWOGTtu3ovm0CFJqcrdjMJjq+ylpYhn+dBrDHWEmLg5e+VNAvh5ldjkSE XX149jWzYQFmuu85DwGy88lbLRstavSinpJ3mFDtD/JIYAIkg975bP/WaAlDHslj -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:45 2025 by rpki-client