$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: OZ4+xxvWfUnGwnRmQVWbEXEFk/H+SZQrk2SMt0K2/5s= Subject key identifier: 65:58:B1:C6:43:63:A2:F3:D1:67:F9:B5:7E:06:28:48:15:D5:CF:BB Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Certificate serial: 69EA434B281E913D58324036A934B6CA98C6EC1D Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS16509.roa Signing time: Tue 03 Nov 2026 01:29:19 +0000 ROA not before: Tue 03 Nov 2026 01:24:19 +0000 ROA not after: Tue 02 Nov 2027 01:29:19 +0000 asID: 16509 IP address blocks: 157.53.253.0/24 maxlen: 24 157.53.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 05:16:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ea:43:4b:28:1e:91:3d:58:32:40:36:a9:34:b6:ca:98:c6:ec:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Validity Not Before: Nov 3 01:24:19 2026 GMT Not After : Nov 2 01:29:19 2027 GMT Subject: CN=6558B1C64363A2F3D167F9B57E06284815D5CFBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1f:9f:94:15:25:1f:ae:76:2d:00:25:ce:ea: 45:0b:f7:b2:7b:93:9c:1f:92:b0:2a:ff:b5:d7:02: 3a:6b:04:c1:53:6b:21:4b:8f:5f:4c:46:41:b3:79: 31:62:2c:67:f3:a9:01:64:58:20:46:f8:bd:ea:99: 1b:95:5d:0b:3b:ea:d9:f0:c8:e5:63:a2:b7:3d:b9: b5:14:c5:79:dc:c0:2b:95:59:88:a9:38:ba:b3:4d: bd:01:99:f2:2c:ac:e5:a7:c0:19:d2:d6:9b:60:9f: 4f:29:2d:0f:1f:16:b5:50:17:74:28:7a:06:ef:42: 18:11:a4:4e:76:24:6d:2e:d9:79:39:98:a3:71:86: 95:30:f3:c6:c5:dc:b2:60:ee:f3:b5:87:8d:0a:6a: 32:fc:3c:51:ff:7a:db:68:6f:9e:01:42:9d:82:5c: b3:65:99:7d:91:4d:9c:d7:1d:ed:8f:1b:e2:99:f3: bb:27:80:c7:e6:dc:99:4b:f8:9f:e3:9c:25:a6:90: 1a:65:29:72:82:59:c1:29:41:e7:f0:e2:e9:6b:e6: 00:d9:d8:dd:26:48:9b:ba:3b:91:4e:0d:b1:a1:c1: 27:55:3a:7a:74:ae:4e:83:7d:a2:df:f2:07:b9:7a: 72:fc:c3:3a:2c:fe:c6:2d:10:6c:21:15:55:9a:0c: e9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:58:B1:C6:43:63:A2:F3:D1:67:F9:B5:7E:06:28:48:15:D5:CF:BB X509v3 Authority Key Identifier: keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.53.253.0-157.53.255.255 Signature Algorithm: sha256WithRSAEncryption 1b:82:b4:2f:4e:96:b7:f0:fd:8f:c9:37:66:f3:2c:f7:45:0c: 36:97:f0:a7:3e:7b:f1:b6:9e:17:28:8d:4e:13:72:43:87:b3: 4d:7b:88:c7:db:90:6d:a8:06:21:25:db:0d:08:7a:f1:53:dc: cc:a1:d2:41:32:0e:0a:82:cb:8a:b6:86:d7:a2:80:f7:0b:1a: 86:46:bb:60:5e:00:bd:d7:90:b2:53:46:6e:d1:81:ab:91:88: e0:8a:31:2d:83:00:96:ef:ac:05:63:48:f0:01:70:fc:0b:63: f2:4f:77:c7:18:a5:fe:f1:2d:5a:9c:f9:19:c5:e0:5e:a4:9c: 9a:35:e8:90:82:86:f8:eb:80:c6:37:cd:cb:b4:65:fc:72:13: ca:46:2b:4c:ef:a9:0d:2d:9f:f1:31:c8:0f:17:6d:b0:0a:24: 64:2c:ce:4f:70:90:90:92:d6:05:0c:e9:a8:ac:19:bf:7e:5b: d9:8f:11:14:59:b5:b9:8a:c7:98:e4:07:be:60:2d:65:b0:20: 9d:a0:e6:c3:1e:2c:14:b4:10:6b:d3:fc:d8:96:02:30:de:bd: d8:90:7d:e3:85:46:84:d7:2a:07:fc:30:34:01:37:3f:11:d5: 8c:88:1a:8b:0e:6d:d7:3c:1a:50:55:55:04:23:98:00:c1:a8: a7:ed:99:8e -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUaepDSygekT1YMkA2qTS2ypjG7B0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjYxMTAzMDEyNDE5WhcNMjcxMTAyMDEyOTE5 WjAzMTEwLwYDVQQDEyg2NTU4QjFDNjQzNjNBMkYzRDE2N0Y5QjU3RTA2Mjg0ODE1 RDVDRkJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR+flBUlH652 LQAlzupFC/eye5OcH5KwKv+11wI6awTBU2shS49fTEZBs3kxYixn86kBZFggRvi9 6pkblV0LO+rZ8MjlY6K3Pbm1FMV53MArlVmIqTi6s029AZnyLKzlp8AZ0tabYJ9P KS0PHxa1UBd0KHoG70IYEaROdiRtLtl5OZijcYaVMPPGxdyyYO7ztYeNCmoy/DxR /3rbaG+eAUKdglyzZZl9kU2c1x3tjxvimfO7J4DH5tyZS/if45wlppAaZSlyglnB KUHn8OLpa+YA2djdJkibujuRTg2xocEnVTp6dK5Og32i3/IHuXpy/MM6LP7GLRBs IRVVmgzpxQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFGVYscZDY6Lz0Wf5tX4GKEgV 1c+7MB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0 ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw ODRiODYvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCYG CCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBACdNf0DAwGdNDANBgkqhkiG9w0B AQsFAAOCAQEAG4K0L06Wt/D9j8k3ZvMs90UMNpfwpz578baeFyiNThNyQ4ezTXuI x9uQbagGISXbDQh68VPczKHSQTIOCoLLiraG16KA9wsahka7YF4AvdeQslNGbtGB q5GI4IoxLYMAlu+sBWNI8AFw/Atj8k93xxil/vEtWpz5GcXgXqScmjXokIKG+OuA xjfNy7Rl/HITykYrTO+pDS2f8THIDxdtsAokZCzOT3CQkJLWBQzpqKwZv35b2Y8R FFm1uYrHmOQHvmAtZbAgnaDmwx4sFLQQa9P82JYCMN692JB944VGhNcqB/wwNAE3 PxHVjIgaiw5t1zwaUFVVBCOYAMGop+2Zjg== -----END CERTIFICATE-----Generated at Thu Nov 5 07:20:33 2026 by rpki-client