$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: xW79c/9OViMF3IxJsZwHAhRHdcNZHwXpYV7zH0JI5Ns= Subject key identifier: 89:8A:4E:AC:FF:E7:C5:3A:73:61:16:89:12:D5:54:45:D8:DF:F3:7D Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 4C799721D2B6BD0B097B3C591F42646B790FFDAA Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16509.roa Signing time: Tue 08 Jul 2025 00:29:44 +0000 ROA not before: Tue 08 Jul 2025 00:24:44 +0000 ROA not after: Tue 07 Jul 2026 00:29:44 +0000 asID: 16509 IP address blocks: 140.99.12.0/24 maxlen: 24 140.99.50.0/24 maxlen: 24 140.99.51.0/24 maxlen: 24 140.99.52.0/24 maxlen: 24 140.99.53.0/24 maxlen: 24 140.99.54.0/24 maxlen: 24 140.99.55.0/24 maxlen: 24 140.99.56.0/24 maxlen: 24 140.99.57.0/24 maxlen: 24 140.99.61.0/24 maxlen: 24 140.99.63.0/24 maxlen: 24 140.99.64.0/24 maxlen: 24 140.99.65.0/24 maxlen: 24 140.99.66.0/24 maxlen: 24 140.99.67.0/24 maxlen: 24 140.99.70.0/24 maxlen: 24 140.99.71.0/24 maxlen: 24 140.99.72.0/24 maxlen: 24 140.99.73.0/24 maxlen: 24 140.99.74.0/24 maxlen: 24 140.99.75.0/24 maxlen: 24 140.99.76.0/24 maxlen: 24 140.99.221.0/24 maxlen: 24 140.99.232.0/24 maxlen: 24 140.99.234.0/24 maxlen: 24 140.99.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 22:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:79:97:21:d2:b6:bd:0b:09:7b:3c:59:1f:42:64:6b:79:0f:fd:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Jul 8 00:24:44 2025 GMT Not After : Jul 7 00:29:44 2026 GMT Subject: CN=898A4EACFFE7C53A7361168912D55445D8DFF37D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f5:a6:da:03:e0:e5:f5:b3:d5:24:08:a0:23: ec:7d:eb:1d:04:a6:35:a1:50:29:eb:1a:16:f0:3c: 1c:6b:4c:40:e8:b8:8f:35:db:80:0a:ae:41:b8:8a: 16:6d:0d:1f:07:39:b6:ae:fc:0c:d5:a6:ad:c7:d5: 01:1a:63:ad:4c:6f:33:39:bc:d6:98:de:f2:57:8d: 8a:b0:1a:53:e6:b0:8c:0a:00:ec:09:f3:be:d4:73: 4c:21:6b:07:98:0b:cc:d4:1f:64:bc:1e:f6:fe:aa: 5c:5c:f9:ba:23:f4:13:72:e1:34:fa:a3:ec:1a:81: 79:17:72:4a:01:29:a3:57:2a:17:d4:d3:24:9a:0f: d4:5e:35:94:56:6c:7f:74:db:5d:ae:01:8e:fb:80: 13:35:dd:73:3d:07:ef:d9:ee:ed:15:cc:82:6c:92: 33:62:9a:b4:b7:01:bc:e5:6a:1f:0c:ab:0e:41:6c: 32:48:54:f0:8f:c6:cb:0a:44:57:0c:58:f7:3e:42: c3:bd:e5:f7:24:be:bc:6f:c0:95:40:00:26:e2:1a: bc:3f:cf:5b:43:06:46:be:cd:71:c2:cf:04:94:6b: 4d:bb:f0:f8:fd:b7:6d:f2:e2:f3:77:20:37:39:59: 98:e9:7f:d7:c1:5d:19:f8:cc:97:31:a8:de:73:1f: 0c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8A:4E:AC:FF:E7:C5:3A:73:61:16:89:12:D5:54:45:D8:DF:F3:7D X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.12.0/24 140.99.50.0-140.99.57.255 140.99.61.0/24 140.99.63.0-140.99.67.255 140.99.70.0-140.99.76.255 140.99.221.0/24 140.99.232.0/24 140.99.234.0/23 Signature Algorithm: sha256WithRSAEncryption b1:b3:2f:19:be:1e:0e:82:f2:b3:c7:c1:8b:96:9a:96:46:74: 42:f6:6b:1e:6b:5d:6b:3e:ce:c9:44:9a:47:84:5a:f4:51:85: 01:cb:8e:d7:5a:d5:7a:6f:d2:d4:4c:f5:4a:70:e1:9c:6c:77: 5f:78:e8:93:a0:5c:b1:f1:e5:d3:b8:1e:54:84:3e:a6:66:ff: ee:c1:27:b1:f1:1a:b2:83:e9:40:2f:d1:18:f6:a0:06:c7:b3: 34:c7:94:8c:e5:ed:c1:cd:9c:5d:4e:52:d2:d9:7b:3e:98:1e: a4:08:63:03:9c:3b:cf:40:e5:9d:c1:a1:69:9a:43:5d:d5:8e: fc:a0:d2:2a:9e:fc:a6:db:83:6e:f2:64:f7:4c:6d:13:55:01: 8c:56:cf:a1:fd:5e:53:d8:53:b7:f7:ce:e5:53:c0:99:0a:7a: d2:2a:db:4b:a9:7f:39:e0:d6:69:ad:c4:38:a5:51:8f:a4:d3: a0:6b:2e:fa:48:4f:80:ca:8f:12:34:86:4d:a8:6f:ec:44:57: a2:d3:1e:22:1f:70:47:d9:97:7b:fa:8c:60:86:4d:73:1a:65: 80:3c:a6:bc:49:f8:7f:6a:4d:63:4b:00:44:eb:22:78:ab:90: 7f:12:be:7c:c3:b6:1c:b9:7e:c1:1a:d9:ae:53:88:da:bc:0f: 6a:93:99:3b -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUTHmXIdK2vQsJezxZH0Jka3kP/aowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUwNzA4MDAyNDQ0WhcNMjYwNzA3MDAyOTQ0 WjAzMTEwLwYDVQQDEyg4OThBNEVBQ0ZGRTdDNTNBNzM2MTE2ODkxMkQ1NTQ0NUQ4 REZGMzdEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/Wm2gPg5fWz 1SQIoCPsfesdBKY1oVAp6xoW8Dwca0xA6LiPNduACq5BuIoWbQ0fBzm2rvwM1aat x9UBGmOtTG8zObzWmN7yV42KsBpT5rCMCgDsCfO+1HNMIWsHmAvM1B9kvB72/qpc XPm6I/QTcuE0+qPsGoF5F3JKASmjVyoX1NMkmg/UXjWUVmx/dNtdrgGO+4ATNd1z PQfv2e7tFcyCbJIzYpq0twG85WofDKsOQWwySFTwj8bLCkRXDFj3PkLDveX3JL68 b8CVQAAm4hq8P89bQwZGvs1xws8ElGtNu/D4/bdt8uLzdyA3OVmY6X/XwV0Z+MyX Majecx8MmQIDAQABo4ICwDCCArwwHQYDVR0OBBYEFImKTqz/58U6c2EWiRLVVEXY 3/N9MB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGEG CCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAjGMMMAwDBAGMYzIDBAGMYzgDBACM Yz0wDAMEAIxjPwMEAoxjQDAMAwQBjGNGAwQAjGNMAwQAjGPdAwQAjGPoAwQBjGPq MA0GCSqGSIb3DQEBCwUAA4IBAQCxsy8Zvh4OgvKzx8GLlpqWRnRC9msea11rPs7J RJpHhFr0UYUBy47XWtV6b9LUTPVKcOGcbHdfeOiToFyx8eXTuB5UhD6mZv/uwSex 8Rqyg+lAL9EY9qAGx7M0x5SM5e3BzZxdTlLS2Xs+mB6kCGMDnDvPQOWdwaFpmkNd 1Y78oNIqnvym24Nu8mT3TG0TVQGMVs+h/V5T2FO3987lU8CZCnrSKttLqX854NZp rcQ4pVGPpNOgay76SE+Ayo8SNIZNqG/sRFei0x4iH3BH2Zd7+oxghk1zGmWAPKa8 Sfh/ak1jSwBE6yJ4q5B/Er58w7YcuX7BGtmuU4javA9qk5k7 -----END CERTIFICATE-----Generated at Tue Aug 5 08:17:15 2025 by rpki-client