$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: QkPjwBATxTTLLeYr2fWgfaGXtVqRD3UVXk1fZQQ205s= Subject key identifier: C7:0F:E1:E0:F1:21:8D:E2:99:BF:FC:B5:FB:49:F6:C6:E6:16:39:B0 Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Certificate serial: 171320C8C2E07661F5D00885CE9CA16D634EE8FE Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS16509.roa Signing time: Tue 31 Dec 2024 01:01:12 +0000 ROA not before: Tue 31 Dec 2024 00:56:12 +0000 ROA not after: Tue 30 Dec 2025 01:01:12 +0000 asID: 16509 IP address blocks: 157.53.253.0/24 maxlen: 24 157.53.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Apr 2025 22:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:13:20:c8:c2:e0:76:61:f5:d0:08:85:ce:9c:a1:6d:63:4e:e8:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Validity Not Before: Dec 31 00:56:12 2024 GMT Not After : Dec 30 01:01:12 2025 GMT Subject: CN=C70FE1E0F1218DE299BFFCB5FB49F6C6E61639B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:38:99:2e:ed:86:9f:1e:2f:67:d2:a9:81:79: c4:63:9a:23:fd:49:2a:de:80:9f:07:97:3d:10:43: e4:a6:1a:e9:87:59:23:75:03:03:b0:37:68:50:97: ec:75:e7:34:ab:35:84:34:19:22:68:3b:7e:97:05: b1:47:de:15:c0:e6:92:05:94:25:53:67:59:ec:c8: 7e:33:a2:99:d9:71:65:98:93:8a:52:b9:a0:9b:3f: 49:e6:90:43:36:cd:ee:84:9a:fd:7c:3b:25:0c:c6: ce:ed:a9:36:5b:ab:a2:e9:10:5d:a9:3f:d4:3e:5a: 3d:51:34:66:44:74:6b:ff:e0:09:ae:aa:f2:cc:e5: 7b:93:0f:9c:db:ef:2b:5d:24:5b:37:c2:ab:13:5c: ff:b6:93:01:f3:7d:3f:2f:02:09:32:4a:a8:4d:5d: 73:b6:8f:96:ee:64:d1:cc:77:f0:a6:f2:fa:ef:67: 06:b8:f0:47:ad:88:10:2b:62:40:f6:b9:68:bf:61: 5e:02:2d:6c:fc:cd:b6:68:cb:e8:1c:c5:28:ab:7a: 5d:56:6a:ec:8d:2a:7e:6a:8d:91:3a:93:cb:3a:98: b5:43:9c:ea:31:d4:cd:b6:e0:a2:c2:02:d3:ca:97: a9:b9:03:21:05:20:d5:cd:d9:4a:4a:cf:70:e6:cb: 1f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0F:E1:E0:F1:21:8D:E2:99:BF:FC:B5:FB:49:F6:C6:E6:16:39:B0 X509v3 Authority Key Identifier: keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.53.253.0-157.53.255.255 Signature Algorithm: sha256WithRSAEncryption 77:33:5f:6e:57:55:61:44:28:e5:f5:58:a1:93:01:9d:14:99: 2a:98:e7:7c:c4:94:ba:ea:6a:e2:3f:8b:15:82:3a:69:9e:05: c4:2a:89:ac:55:0c:05:4e:5c:20:52:3d:86:5c:b6:9e:78:73: c6:9e:48:22:98:16:05:db:07:1c:e2:78:db:9f:cf:67:ff:49: a0:fc:d1:5e:47:d2:e0:89:be:9c:4c:5c:ff:65:6a:c9:ce:e5: 7f:02:e3:b1:4a:2a:ab:54:41:dd:59:c0:e2:95:a2:91:24:f1: 1e:c8:d7:e8:4b:c3:5e:a6:02:ba:dd:d6:80:4a:28:2c:ba:fb: 63:65:60:6a:60:bb:6a:2a:80:da:b4:e9:af:b4:47:37:88:18: a7:2a:3b:53:a4:1f:31:2b:07:81:b2:3b:92:38:16:df:7b:ad: 15:7f:e8:42:25:42:c6:e6:59:1a:a2:a5:18:60:9c:2e:6a:df: e7:39:e6:96:70:6e:7f:6b:06:b3:07:16:3e:2d:d6:b2:ce:74: 37:1b:5a:83:d8:93:3f:6f:ee:e2:56:e9:4c:89:d8:2c:b7:c7: 35:67:7e:47:ed:b0:26:82:e4:ec:d2:f3:d5:84:4e:2a:75:aa: 92:e3:c3:8a:2d:ed:ac:0d:e5:e4:13:dd:cf:d6:24:25:e4:e6: 66:03:72:34 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUFxMgyMLgdmH10AiFzpyhbWNO6P4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjQxMjMxMDA1NjEyWhcNMjUxMjMwMDEwMTEy WjAzMTEwLwYDVQQDEyhDNzBGRTFFMEYxMjE4REUyOTlCRkZDQjVGQjQ5RjZDNkU2 MTYzOUIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDiZLu2Gnx4v Z9KpgXnEY5oj/Ukq3oCfB5c9EEPkphrph1kjdQMDsDdoUJfsdec0qzWENBkiaDt+ lwWxR94VwOaSBZQlU2dZ7Mh+M6KZ2XFlmJOKUrmgmz9J5pBDNs3uhJr9fDslDMbO 7ak2W6ui6RBdqT/UPlo9UTRmRHRr/+AJrqryzOV7kw+c2+8rXSRbN8KrE1z/tpMB 830/LwIJMkqoTV1zto+W7mTRzHfwpvL672cGuPBHrYgQK2JA9rlov2FeAi1s/M22 aMvoHMUoq3pdVmrsjSp+ao2ROpPLOpi1Q5zqMdTNtuCiwgLTypepuQMhBSDVzdlK Ss9w5ssfXwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFMcP4eDxIY3imb/8tftJ9sbm FjmwMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0 ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw ODRiODYvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCYG CCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBACdNf0DAwGdNDANBgkqhkiG9w0B AQsFAAOCAQEAdzNfbldVYUQo5fVYoZMBnRSZKpjnfMSUuupq4j+LFYI6aZ4FxCqJ rFUMBU5cIFI9hly2nnhzxp5IIpgWBdsHHOJ425/PZ/9JoPzRXkfS4Im+nExc/2Vq yc7lfwLjsUoqq1RB3VnA4pWikSTxHsjX6EvDXqYCut3WgEooLLr7Y2VgamC7aiqA 2rTpr7RHN4gYpyo7U6QfMSsHgbI7kjgW33utFX/oQiVCxuZZGqKlGGCcLmrf5znm lnBuf2sGswcWPi3Wss50Nxtag9iTP2/u4lbpTInYLLfHNWd+R+2wJoLk7NLz1YRO KnWqkuPDii3trA3l5BPdz9YkJeTmZgNyNA== -----END CERTIFICATE-----Generated at Sat Apr 26 16:04:18 2025 by rpki-client