$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa File: AS16276.roa (raw, json) Hash identifier: 0qDsvA78bDUhoka5MMtnM6pHjfXr0R+hmVFuWxGyN8k= Subject key identifier: 34:DE:42:70:92:BF:7D:07:B9:51:01:55:47:3E:F5:CF:1A:80:CB:A7 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 4BBEEC2A0C8865547D71775C6B084D0093F0EDEC Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa Signing time: Thu 17 Apr 2025 04:20:35 +0000 ROA not before: Thu 17 Apr 2025 04:15:35 +0000 ROA not after: Thu 16 Apr 2026 04:20:35 +0000 asID: 16276 IP address blocks: 23.95.142.0/24 maxlen: 24 64.50.162.0/23 maxlen: 24 192.228.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 16:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:be:ec:2a:0c:88:65:54:7d:71:77:5c:6b:08:4d:00:93:f0:ed:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Apr 17 04:15:35 2025 GMT Not After : Apr 16 04:20:35 2026 GMT Subject: CN=34DE427092BF7D07B9510155473EF5CF1A80CBA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:86:fb:44:c4:27:07:e2:16:e7:9d:67:d9:16: 9f:71:4f:14:50:cd:6a:a7:d1:38:f3:36:3f:19:9d: 7b:b4:b2:33:6c:64:82:d4:e5:f6:a0:b4:61:f0:33: c7:22:6b:a5:3a:31:11:5a:da:41:7c:37:81:5c:d8: 73:1b:75:92:5b:c7:c0:56:dd:22:26:05:d7:87:bf: 32:99:4b:5e:09:32:b4:41:a8:62:33:78:c3:63:43: 6c:8f:bb:b5:4e:22:03:ea:31:f2:05:57:41:04:e8: ec:67:bd:db:07:ff:f0:c5:76:ec:f3:7d:e6:3f:a9: ee:85:b4:13:94:9f:a6:ac:1f:6d:5d:dc:96:3a:2f: be:b0:ce:79:60:19:4e:fc:3c:25:62:c8:70:3c:91: 2f:16:e0:98:d6:3b:0d:85:2d:fc:02:f1:a5:fa:cc: ad:44:21:7a:10:11:64:33:79:6e:ae:fb:e0:34:29: 73:99:d5:a3:da:4a:28:8e:e1:90:92:22:c0:02:0d: 30:98:fe:cd:ed:a3:bd:17:ae:0b:c9:ce:2b:8d:44: 08:40:1b:5f:9b:e6:b4:28:37:3d:50:0c:b8:78:6e: 1b:05:d9:18:71:1e:bf:22:a7:3b:53:51:5c:1e:9f: bf:43:d8:34:92:98:30:c3:82:9d:fa:38:73:19:07: c5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DE:42:70:92:BF:7D:07:B9:51:01:55:47:3E:F5:CF:1A:80:CB:A7 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.142.0/24 64.50.162.0/23 192.228.116.0/24 Signature Algorithm: sha256WithRSAEncryption b4:a4:56:cb:d4:39:8b:af:d5:eb:24:2e:b3:9d:a8:94:fe:c7: 42:42:07:3a:56:0b:5a:5f:99:6d:0d:6d:d4:53:77:ca:3e:cf: a1:19:96:7d:87:cb:27:f5:33:41:29:ab:4f:92:ed:e1:d1:ec: f8:c8:7f:49:3e:2f:27:11:50:c7:27:eb:e7:cd:a2:ab:06:06: 59:e8:a1:12:ca:a8:b1:9f:b2:2b:37:cd:8c:6b:09:31:61:1f: 62:50:f2:a3:27:c8:67:96:c6:b5:9b:90:88:7c:b6:c4:52:34: 01:aa:b2:23:b6:43:af:ea:89:ff:a3:3a:98:03:f9:5a:d1:a5: 01:3b:62:a5:19:93:be:f2:90:ba:e4:d2:83:ce:10:99:d6:7a: ef:c9:37:06:09:34:64:98:07:33:5c:87:bc:85:1b:c2:80:51: 55:28:91:6c:33:1c:ed:78:d4:cd:0b:e3:ce:88:34:aa:2b:5f: fc:c3:36:a8:28:12:37:86:83:41:ba:5f:9d:f8:0e:c0:2b:19: 32:e6:37:1c:45:3b:a0:32:b9:e7:92:e1:33:7b:14:1f:88:e0: ba:be:01:68:b2:b3:89:fe:95:5a:fd:ee:f8:c9:32:cd:eb:34: 21:be:3e:ad:84:7e:c7:d7:09:c6:01:a5:3f:fc:e6:4d:5d:77: 97:29:bb:f6 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUS77sKgyIZVR9cXdcawhNAJPw7ewwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNDE3MDQxNTM1WhcNMjYwNDE2MDQyMDM1 WjAzMTEwLwYDVQQDEygzNERFNDI3MDkyQkY3RDA3Qjk1MTAxNTU0NzNFRjVDRjFB ODBDQkE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIb7RMQnB+IW 551n2RafcU8UUM1qp9E48zY/GZ17tLIzbGSC1OX2oLRh8DPHImulOjERWtpBfDeB XNhzG3WSW8fAVt0iJgXXh78ymUteCTK0QahiM3jDY0Nsj7u1TiID6jHyBVdBBOjs Z73bB//wxXbs833mP6nuhbQTlJ+mrB9tXdyWOi++sM55YBlO/DwlYshwPJEvFuCY 1jsNhS38AvGl+sytRCF6EBFkM3lurvvgNClzmdWj2koojuGQkiLAAg0wmP7N7aO9 F64Lyc4rjUQIQBtfm+a0KDc9UAy4eG4bBdkYcR6/Iqc7U1FcHp+/Q9g0kpgww4Kd +jhzGQfF2wIDAQABo4ICijCCAoYwHQYDVR0OBBYEFDTeQnCSv30HuVEBVUc+9c8a gMunMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzE2Mjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAF1+OAwQBQDKiAwQAwOR0MA0GCSqG SIb3DQEBCwUAA4IBAQC0pFbL1DmLr9XrJC6znaiU/sdCQgc6VgtaX5ltDW3UU3fK Ps+hGZZ9h8sn9TNBKatPku3h0ez4yH9JPi8nEVDHJ+vnzaKrBgZZ6KESyqixn7Ir N82MawkxYR9iUPKjJ8hnlsa1m5CIfLbEUjQBqrIjtkOv6on/ozqYA/la0aUBO2Kl GZO+8pC65NKDzhCZ1nrvyTcGCTRkmAczXIe8hRvCgFFVKJFsMxzteNTNC+POiDSq K1/8wzaoKBI3hoNBul+d+A7AKxky5jccRTugMrnnkuEzexQfiOC6vgFosrOJ/pVa /e74yTLN6zQhvj6thH7H1wnGAaU//OZNXXeXKbv2 -----END CERTIFICATE-----Generated at Mon Apr 28 05:32:52 2025 by rpki-client