$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa File: AS16276.roa (raw, json) Hash identifier: XU6lKh/X2ohXZEh+pyooiGQ7PTGLeZYZ7Yvcq9GR0jM= Subject key identifier: D7:69:A4:AB:D5:24:CE:9A:C2:39:6B:E5:9C:2F:AD:25:69:48:0E:8B Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 712B3EFAE86ECB23CCD869292FA47BD56FE35860 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa Signing time: Fri 01 Aug 2025 06:32:38 +0000 ROA not before: Fri 01 Aug 2025 06:27:38 +0000 ROA not after: Fri 31 Jul 2026 06:32:38 +0000 asID: 16276 IP address blocks: 23.95.142.0/24 maxlen: 24 67.210.103.0/24 maxlen: 24 192.228.116.0/24 maxlen: 24 216.97.226.0/24 maxlen: 24 216.97.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:2b:3e:fa:e8:6e:cb:23:cc:d8:69:29:2f:a4:7b:d5:6f:e3:58:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Aug 1 06:27:38 2025 GMT Not After : Jul 31 06:32:38 2026 GMT Subject: CN=D769A4ABD524CE9AC2396BE59C2FAD2569480E8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fd:23:df:5b:09:fb:f6:0c:fd:c3:e4:66:3c: 1c:b0:e1:ba:d2:43:d2:4a:3e:40:7b:2d:8a:f1:97: a0:83:9e:f6:6a:fe:1d:75:85:11:b0:ed:e5:3f:02: 79:87:7a:65:f1:95:ae:25:ad:fd:01:5e:6d:0b:91: 25:62:66:cc:5f:13:fc:a7:04:4f:08:f0:6b:4f:5c: 71:63:af:9f:12:ad:6c:d9:04:cb:79:46:f0:e7:0a: 1e:91:5a:9c:f0:5e:2d:50:b4:ef:3a:71:69:14:d7: 0f:a6:de:ee:9a:88:c8:d8:2f:01:0e:fe:48:35:4e: f2:da:3f:e4:74:8d:5e:40:b9:ee:2c:6d:0b:c9:23: bd:17:55:00:9f:9d:4c:46:14:9a:bc:e1:a2:ee:72: 4d:65:80:12:81:b3:06:48:ca:12:91:6b:3e:2b:8d: 57:26:b1:47:bc:1e:74:91:81:d0:cd:12:24:93:c5: fb:d7:c1:81:b8:65:04:e2:32:1e:35:93:7d:da:d6: cc:6c:72:3e:03:de:4d:75:71:6a:7a:44:9c:e4:72: 9e:c9:0d:18:25:fa:5a:0f:6b:bf:f8:62:af:de:02: dd:04:66:d5:20:10:fd:d1:09:81:d6:4d:8c:8b:c2: 3a:18:cc:3f:d2:ab:d5:6e:50:cc:33:43:cb:94:c4: 7e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:69:A4:AB:D5:24:CE:9A:C2:39:6B:E5:9C:2F:AD:25:69:48:0E:8B X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.142.0/24 67.210.103.0/24 192.228.116.0/24 216.97.226.0/23 Signature Algorithm: sha256WithRSAEncryption 61:22:77:00:1a:8e:16:e3:50:44:e9:19:a7:48:0c:d7:c0:1d: 93:94:ef:90:34:31:03:8a:c1:8c:91:a1:39:43:23:b0:08:27: 5a:ca:98:87:22:47:62:5d:64:48:c6:cf:2f:88:b6:1c:f2:89: 45:32:c2:ef:2b:6c:8e:38:0a:db:d2:5c:58:ac:fb:f7:6f:bb: aa:03:50:42:1e:1e:e9:2e:be:28:68:c4:36:02:f1:a9:50:3d: bd:a9:2f:ae:bf:99:c5:8d:8a:19:e2:22:84:43:89:fc:ed:f5: 72:1a:7b:e4:18:87:af:a8:49:9a:3c:4a:0d:60:f9:24:c1:02: 44:9f:67:9a:77:5f:6b:d9:db:90:aa:aa:90:4f:7c:ca:a2:4e: 4f:bd:92:8d:20:00:36:e9:fb:b3:d1:5e:07:dd:e6:08:98:d2: 59:0d:dc:93:90:48:6d:7c:5d:b7:7b:24:b1:f9:6c:df:41:4a: f8:cb:bc:98:ad:cf:dd:14:d4:a7:bd:3c:85:22:22:74:89:05: 92:29:03:da:78:9d:96:86:a7:53:c9:c4:ac:23:42:9f:10:d4: c5:09:13:aa:42:bc:e0:d8:b9:bd:92:56:f9:25:15:f3:4d:d8: c0:cc:75:aa:bb:fc:f6:51:b0:a5:bf:7e:8d:90:14:5a:32:9f: 49:dd:14:9a -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIUcSs++uhuyyPM2GkpL6R71W/jWGAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwODAxMDYyNzM4WhcNMjYwNzMxMDYzMjM4 WjAzMTEwLwYDVQQDEyhENzY5QTRBQkQ1MjRDRTlBQzIzOTZCRTU5QzJGQUQyNTY5 NDgwRThCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P0j31sJ+/YM /cPkZjwcsOG60kPSSj5Aey2K8Zegg572av4ddYURsO3lPwJ5h3pl8ZWuJa39AV5t C5ElYmbMXxP8pwRPCPBrT1xxY6+fEq1s2QTLeUbw5woekVqc8F4tULTvOnFpFNcP pt7umojI2C8BDv5INU7y2j/kdI1eQLnuLG0LySO9F1UAn51MRhSavOGi7nJNZYAS gbMGSMoSkWs+K41XJrFHvB50kYHQzRIkk8X718GBuGUE4jIeNZN92tbMbHI+A95N dXFqekSc5HKeyQ0YJfpaD2u/+GKv3gLdBGbVIBD90QmB1k2Mi8I6GMw/0qvVblDM M0PLlMR+nQIDAQABo4ICkDCCAowwHQYDVR0OBBYEFNdppKvVJM6awjlr5ZwvrSVp SA6LMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzE2Mjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAF1+OAwQAQ9JnAwQAwOR0AwQB2GHi MA0GCSqGSIb3DQEBCwUAA4IBAQBhIncAGo4W41BE6RmnSAzXwB2TlO+QNDEDisGM kaE5QyOwCCdaypiHIkdiXWRIxs8viLYc8olFMsLvK2yOOArb0lxYrPv3b7uqA1BC Hh7pLr4oaMQ2AvGpUD29qS+uv5nFjYoZ4iKEQ4n87fVyGnvkGIevqEmaPEoNYPkk wQJEn2ead19r2duQqqqQT3zKok5PvZKNIAA26fuz0V4H3eYImNJZDdyTkEhtfF23 eySx+WzfQUr4y7yYrc/dFNSnvTyFIiJ0iQWSKQPaeJ2WhqdTycSsI0KfENTFCROq Qrzg2Lm9klb5JRXzTdjAzHWqu/z2UbClv36NkBRaMp9J3RSa -----END CERTIFICATE-----Generated at Mon Aug 4 18:20:56 2025 by rpki-client