$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: abZJDuvGkxvZajXk0pVrIaRvFiX6LfO4ucHgYx5p29o= Subject key identifier: 5C:BC:45:3A:FB:64:76:23:B0:24:43:CD:32:02:29:60:1A:64:1A:EC Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 261628ACBFC0F390F7624AF11C362731649FA760 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa Signing time: Sun 17 May 2026 19:01:39 +0000 ROA not before: Sun 17 May 2026 18:56:39 +0000 ROA not after: Sun 16 May 2027 19:01:39 +0000 asID: 16509 IP address blocks: 104.234.13.0/24 maxlen: 24 104.234.60.0/23 maxlen: 24 104.234.70.0/23 maxlen: 24 104.234.137.0/24 maxlen: 24 104.234.141.0/24 maxlen: 24 104.234.143.0/24 maxlen: 24 104.234.160.0/24 maxlen: 24 104.234.175.0/24 maxlen: 24 104.234.187.0/24 maxlen: 24 104.234.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 07:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:16:28:ac:bf:c0:f3:90:f7:62:4a:f1:1c:36:27:31:64:9f:a7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: May 17 18:56:39 2026 GMT Not After : May 16 19:01:39 2027 GMT Subject: CN=5CBC453AFB647623B02443CD320229601A641AEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:aa:5e:d3:9c:8c:85:e4:bb:69:b8:97:0d:8b: f7:fc:c5:b6:74:d3:43:20:f2:6f:16:d9:da:57:51: 92:e1:34:a1:71:dd:eb:25:5e:28:7f:2c:52:7c:8f: 26:3b:dc:a2:57:7d:39:44:41:d8:6b:24:a0:04:59: ba:2b:e0:fc:23:41:95:ee:ce:6e:86:68:a1:93:4e: 5d:00:e4:98:e5:d9:47:80:27:ea:9c:21:41:8c:70: bb:1c:60:02:18:c0:8f:e1:5b:4e:5c:9d:58:71:9b: 63:b2:48:04:5b:fa:aa:14:14:f9:23:dc:6b:34:7f: 37:b3:3b:f6:d8:99:d9:5d:52:78:ef:48:06:7f:ae: b7:36:94:b9:71:33:b6:d2:e5:6e:5b:3b:f7:05:26: 1f:ee:af:f2:b5:70:88:82:79:81:5d:90:c0:0a:7f: 3d:ff:84:9e:8f:b1:0b:7d:f4:d1:ba:97:71:e7:a0: 47:96:64:ac:a9:ec:9e:32:5a:3d:a8:52:20:ed:26: 5e:cf:cd:12:5c:5a:f5:20:2c:7a:08:e1:c7:36:26: 08:4b:a6:5e:88:62:87:c7:97:bb:97:5a:cd:52:fd: b8:be:66:91:bb:c9:5a:4e:0f:4f:ba:88:d9:97:8d: 60:bf:df:61:82:ca:b3:ea:33:2d:1d:e1:eb:cb:56: d1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BC:45:3A:FB:64:76:23:B0:24:43:CD:32:02:29:60:1A:64:1A:EC X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.13.0/24 104.234.60.0/23 104.234.70.0/23 104.234.137.0/24 104.234.141.0/24 104.234.143.0/24 104.234.160.0/24 104.234.175.0/24 104.234.187.0/24 104.234.245.0/24 Signature Algorithm: sha256WithRSAEncryption 04:b2:e8:23:15:12:79:ff:4b:b3:3f:42:ef:da:83:43:5a:f7: 35:df:c8:ad:3d:ec:cd:31:f3:57:19:d6:81:08:62:20:62:b7: 19:4f:b2:8c:e6:77:24:68:00:a4:44:f2:06:97:1c:b3:22:04: a6:f1:98:18:71:cf:e5:eb:44:37:a9:56:35:4b:d8:95:45:1b: 36:a0:7a:87:76:97:b7:ea:1d:b6:fd:b5:7e:bb:bc:5d:93:cf: 5b:bb:53:64:9f:99:4a:77:c4:20:14:84:14:b1:30:9f:39:12: 33:af:7f:d1:e8:b5:90:4b:bd:cc:33:80:a5:ee:9a:84:d1:6b: b8:4e:46:03:6d:64:dd:40:75:88:f1:9d:6a:86:ff:a1:43:0e: 83:95:3a:dd:69:c9:70:d1:5a:50:3c:61:c9:b7:4f:88:cc:9c: 67:06:b2:8f:9a:cc:f2:cb:ad:ec:57:35:ff:d3:3c:23:b6:24: c3:45:b0:99:a2:d8:b1:bf:b4:5b:a5:9e:d4:ae:52:78:7d:97: 7a:01:03:9c:5c:31:e1:4d:af:79:db:d4:6d:87:32:d7:37:45: 7e:0f:d0:f6:c0:72:47:63:6b:9d:64:e0:2a:e4:f3:1c:07:75: a6:1b:fb:7e:76:9c:7a:a5:c7:38:4b:6c:20:b7:de:64:2d:3b: ee:f2:e2:5d -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIUJhYorL/A85D3YkrxHDYnMWSfp2AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwNTE3MTg1NjM5WhcNMjcwNTE2MTkwMTM5 WjAzMTEwLwYDVQQDEyg1Q0JDNDUzQUZCNjQ3NjIzQjAyNDQzQ0QzMjAyMjk2MDFB NjQxQUVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qpe05yMheS7 abiXDYv3/MW2dNNDIPJvFtnaV1GS4TShcd3rJV4ofyxSfI8mO9yiV305REHYaySg BFm6K+D8I0GV7s5uhmihk05dAOSY5dlHgCfqnCFBjHC7HGACGMCP4VtOXJ1YcZtj skgEW/qqFBT5I9xrNH83szv22JnZXVJ470gGf663NpS5cTO20uVuWzv3BSYf7q/y tXCIgnmBXZDACn89/4Sej7ELffTRupdx56BHlmSsqeyeMlo9qFIg7SZez80SXFr1 ICx6COHHNiYIS6ZeiGKHx5e7l1rNUv24vmaRu8laTg9PuojZl41gv99hgsqz6jMt HeHry1bRPwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFFy8RTr7ZHYjsCRDzTICKWAa ZBrsMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFUG CCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAaOoNAwQBaOo8AwQBaOpGAwQAaOqJ AwQAaOqNAwQAaOqPAwQAaOqgAwQAaOqvAwQAaOq7AwQAaOr1MA0GCSqGSIb3DQEB CwUAA4IBAQAEsugjFRJ5/0uzP0Lv2oNDWvc138itPezNMfNXGdaBCGIgYrcZT7KM 5nckaACkRPIGlxyzIgSm8ZgYcc/l60Q3qVY1S9iVRRs2oHqHdpe36h22/bV+u7xd k89bu1Nkn5lKd8QgFIQUsTCfORIzr3/R6LWQS73MM4Cl7pqE0Wu4TkYDbWTdQHWI 8Z1qhv+hQw6DlTrdaclw0VpQPGHJt0+IzJxnBrKPmszyy63sVzX/0zwjtiTDRbCZ otixv7RbpZ7UrlJ4fZd6AQOcXDHhTa9529RthzLXN0V+D9D2wHJHY2udZOAq5PMc B3WmG/t+dpx6pcc4S2wgt95kLTvu8uJd -----END CERTIFICATE-----Generated at Sat Jun 13 07:58:26 2026 by rpki-client