$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: KBRFRgM9wQIyoTY3TuTGXKgJTuXJ0yQ+sp9iZC01rMI= Subject key identifier: A1:3D:E1:E6:14:92:B4:54:2D:A2:0B:AF:DA:6E:C8:65:25:10:4A:C9 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 34BF7E1F4CCAA2A285F7EBD39CF7712675E5D582 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa Signing time: Sat 02 Aug 2025 17:52:04 +0000 ROA not before: Sat 02 Aug 2025 17:47:04 +0000 ROA not after: Sat 01 Aug 2026 17:52:04 +0000 asID: 16509 IP address blocks: 157.254.2.0/23 maxlen: 24 157.254.10.0/24 maxlen: 24 157.254.200.0/22 maxlen: 22 157.254.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 15:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:bf:7e:1f:4c:ca:a2:a2:85:f7:eb:d3:9c:f7:71:26:75:e5:d5:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Aug 2 17:47:04 2025 GMT Not After : Aug 1 17:52:04 2026 GMT Subject: CN=A13DE1E61492B4542DA20BAFDA6EC86525104AC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c0:10:a9:9e:94:ee:fd:58:54:b5:4a:38:e9: 5b:b5:68:44:a3:c3:0d:7e:bf:a6:2e:7d:a5:e7:a1: 8d:da:e7:31:2e:1c:ff:35:f4:10:19:e9:4e:be:40: c2:c5:19:0a:12:11:46:2c:a3:7c:55:8f:9a:aa:58: 27:63:35:43:1f:95:b4:d0:98:95:d1:d6:fe:2b:55: 9a:bf:40:df:36:c7:d5:7b:5f:9b:77:32:af:40:35: da:c1:23:26:7f:01:32:7c:8f:56:21:ac:de:ad:f4: 75:88:7a:69:24:bb:58:58:dc:32:89:c3:8c:fc:61: ff:d3:c2:51:8b:31:db:60:dc:98:55:61:e9:d7:ea: 6a:83:13:5c:36:6c:a1:2c:88:f1:6a:d1:cd:8d:3d: 59:74:09:43:51:33:02:8c:dc:61:2b:62:a3:f9:42: 64:ce:76:7e:8f:d0:e6:b6:81:4a:06:46:1a:67:b8: 5d:d0:cc:f0:b8:c0:11:97:bb:15:ff:7a:73:e6:97: 2d:20:0a:03:3d:46:13:2f:09:48:74:59:c6:3c:4a: 4e:e6:b7:9c:3e:ab:c7:0a:aa:ee:b2:83:b9:b2:ef: 2f:b4:99:e2:c2:b9:12:28:32:38:19:ff:34:75:37: 70:3c:a5:2f:22:31:24:e3:88:ae:89:81:40:fa:79: a1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3D:E1:E6:14:92:B4:54:2D:A2:0B:AF:DA:6E:C8:65:25:10:4A:C9 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.2.0/23 157.254.10.0/24 157.254.200.0/22 157.254.217.0/24 Signature Algorithm: sha256WithRSAEncryption 98:18:c7:07:b2:a8:ae:3f:c7:9d:57:bb:2b:a3:01:6c:29:76: c9:d3:83:f8:70:c0:6e:04:46:51:6c:0e:6d:38:11:d3:68:64: 2b:89:8d:9c:a4:21:e0:66:53:97:89:5e:72:46:e1:c5:9b:ee: a0:5f:bd:42:2c:2c:33:cb:76:1d:38:30:07:4d:03:2d:d5:81: 08:0a:0b:5b:73:23:7e:ae:fa:12:75:e6:a6:e8:46:8c:a3:a0: 87:ac:ea:61:dd:7b:24:c7:fd:7f:ea:ff:8e:80:57:6e:74:81: c7:28:65:a8:8e:52:fe:44:cd:6e:35:f3:e0:ed:d2:2c:56:7e: 3f:d6:ba:3d:9f:2e:7d:ac:05:23:7e:ff:07:a1:11:e8:e9:0c: d2:d8:20:c1:15:08:c6:9d:83:9e:4d:55:d5:6f:72:b8:31:0d: 71:22:09:c8:c9:47:14:ae:07:fe:fa:d1:97:7a:27:06:ff:cd: 22:93:2a:b0:bb:81:38:30:09:d9:89:b8:72:69:30:68:43:30: 20:17:c6:7c:66:f8:60:98:36:68:77:4a:85:12:39:71:9a:d3: a5:07:78:16:fb:c8:e5:e9:5b:a6:6a:11:f0:90:ed:7f:a8:cf: f1:9b:b4:ba:ce:88:0f:76:b0:a8:78:63:29:1a:bf:81:66:9d: 16:41:89:45 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIUNL9+H0zKoqKF9+vTnPdxJnXl1YIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwODAyMTc0NzA0WhcNMjYwODAxMTc1MjA0 WjAzMTEwLwYDVQQDEyhBMTNERTFFNjE0OTJCNDU0MkRBMjBCQUZEQTZFQzg2NTI1 MTA0QUM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsAQqZ6U7v1Y VLVKOOlbtWhEo8MNfr+mLn2l56GN2ucxLhz/NfQQGelOvkDCxRkKEhFGLKN8VY+a qlgnYzVDH5W00JiV0db+K1Wav0DfNsfVe1+bdzKvQDXawSMmfwEyfI9WIazerfR1 iHppJLtYWNwyicOM/GH/08JRizHbYNyYVWHp1+pqgxNcNmyhLIjxatHNjT1ZdAlD UTMCjNxhK2Kj+UJkznZ+j9DmtoFKBkYaZ7hd0MzwuMARl7sV/3pz5pctIAoDPUYT LwlIdFnGPEpO5recPqvHCqrusoO5su8vtJniwrkSKDI4Gf80dTdwPKUvIjEk44iu iYFA+nmhEQIDAQABo4ICkDCCAowwHQYDVR0OBBYEFKE94eYUkrRULaILr9puyGUl EErJMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBnf4CAwQAnf4KAwQCnf7IAwQAnf7Z MA0GCSqGSIb3DQEBCwUAA4IBAQCYGMcHsqiuP8edV7srowFsKXbJ04P4cMBuBEZR bA5tOBHTaGQriY2cpCHgZlOXiV5yRuHFm+6gX71CLCwzy3YdODAHTQMt1YEICgtb cyN+rvoSdeam6EaMo6CHrOph3Xskx/1/6v+OgFdudIHHKGWojlL+RM1uNfPg7dIs Vn4/1ro9ny59rAUjfv8HoRHo6QzS2CDBFQjGnYOeTVXVb3K4MQ1xIgnIyUcUrgf+ +tGXeicG/80ikyqwu4E4MAnZibhyaTBoQzAgF8Z8ZvhgmDZod0qFEjlxmtOlB3gW +8jl6VumahHwkO1/qM/xm7S6zogPdrCoeGMpGr+BZp0WQYlF -----END CERTIFICATE-----Generated at Tue Aug 5 21:36:37 2025 by rpki-client