$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: xBE6/VUs7uRR3Vj7lJ4NmO262GlBcOr4FN3r52Rsj6Y= Subject key identifier: BB:11:44:BB:F9:B4:F6:B4:99:A0:E0:BA:72:EF:36:76:F9:EE:23:B8 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 2E7665ED472302B1FF0A172DC10E3E8D43B51119 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa Signing time: Mon 02 Nov 2026 09:56:59 +0000 ROA not before: Mon 02 Nov 2026 09:51:59 +0000 ROA not after: Mon 01 Nov 2027 09:56:59 +0000 asID: 16509 IP address blocks: 157.254.1.0/24 maxlen: 24 157.254.141.0/24 maxlen: 24 157.254.169.0/24 maxlen: 24 157.254.200.0/22 maxlen: 22 157.254.217.0/24 maxlen: 24 157.254.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 12:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:76:65:ed:47:23:02:b1:ff:0a:17:2d:c1:0e:3e:8d:43:b5:11:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Nov 2 09:51:59 2026 GMT Not After : Nov 1 09:56:59 2027 GMT Subject: CN=BB1144BBF9B4F6B499A0E0BA72EF3676F9EE23B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:52:ff:14:79:8b:88:94:d6:f8:28:29:86:ea: 62:17:5c:39:50:9f:81:17:f2:1f:bd:aa:f5:60:d9: 57:0f:a9:ba:45:96:4d:4f:a1:13:22:09:c2:27:f7: c7:26:18:74:de:00:06:d0:02:86:3e:d9:60:f4:b3: b8:5c:3d:fc:16:a6:a3:2a:c4:d9:82:ba:81:4b:e3: 94:b3:ce:99:c5:00:40:08:d1:3d:e6:96:e3:c8:21: 84:88:95:27:09:65:4e:22:f4:19:0c:81:ea:54:92: 7d:e3:e8:18:ab:02:db:8b:3d:14:a2:a2:a9:1b:80: 1c:4f:3c:63:ee:59:76:21:5f:8f:86:f0:78:86:b7: b6:9b:50:f9:7e:d6:63:ff:65:8e:de:19:a5:69:a7: 09:a6:f9:2c:ec:73:66:7c:46:30:fd:56:e6:d6:00: fc:db:5f:f7:ee:07:79:ea:98:a6:82:20:c9:8c:6c: bd:ac:e0:8d:f0:43:7a:ef:f9:6f:f4:2e:92:28:a1: c9:01:64:0d:0e:73:fd:7c:ef:c7:99:c2:e2:96:87: 9b:dd:08:6d:bb:de:db:60:5f:fc:97:b7:f4:92:09: ee:3d:23:58:11:c6:f0:7f:ae:f8:6a:ce:e3:5b:6a: 43:23:e7:3d:d5:f7:35:6e:60:33:6c:98:ad:88:55: 6c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:11:44:BB:F9:B4:F6:B4:99:A0:E0:BA:72:EF:36:76:F9:EE:23:B8 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.1.0/24 157.254.141.0/24 157.254.169.0/24 157.254.200.0/22 157.254.217.0/24 157.254.239.0/24 Signature Algorithm: sha256WithRSAEncryption 52:4c:f1:64:e4:01:7a:a8:e3:fb:c4:05:0e:b5:04:64:cb:07: 72:eb:63:ea:80:be:07:b7:c3:3f:8e:55:ef:10:bd:d8:2c:95: ba:ee:1a:71:a0:2f:6d:6d:e0:19:f6:d7:75:15:b7:bd:c3:16: 76:be:15:1f:fb:42:a6:fe:44:e2:37:5e:e3:19:f3:2d:4f:c2: d0:be:49:57:a4:71:83:18:bd:e1:3a:a2:1a:7e:f3:cb:11:78: 6d:a3:87:da:53:4f:5a:25:f4:d2:19:0a:2f:15:ce:2d:bf:e3: bb:36:3a:3f:36:c6:73:98:bc:78:7a:7d:58:18:5b:2b:81:2f: cb:7a:cc:ec:2d:6c:e2:75:b2:0b:a5:59:40:8a:b4:c7:aa:8e: ab:31:e8:93:c4:34:09:e8:76:92:36:0a:68:6a:0f:d3:d0:37: 70:b3:c3:92:62:cf:9b:9c:c4:86:f7:30:d6:64:c9:40:44:72: fd:65:5d:ee:7c:5b:e5:7f:84:ac:95:d4:32:66:ce:0c:b2:34: 58:35:bb:53:46:30:a4:49:d8:b7:ff:55:c0:47:d8:d1:e8:f6: 7b:9c:28:35:21:1c:07:17:be:1f:49:56:73:29:06:bf:56:e3: 1a:07:4b:de:7b:6a:42:b8:84:c7:9a:06:e8:81:c7:a2:d4:b6: 33:39:4d:41 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIULnZl7UcjArH/ChctwQ4+jUO1ERkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYxMTAyMDk1MTU5WhcNMjcxMTAxMDk1NjU5 WjAzMTEwLwYDVQQDEyhCQjExNDRCQkY5QjRGNkI0OTlBMEUwQkE3MkVGMzY3NkY5 RUUyM0I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FL/FHmLiJTW +CgphupiF1w5UJ+BF/Ifvar1YNlXD6m6RZZNT6ETIgnCJ/fHJhh03gAG0AKGPtlg 9LO4XD38FqajKsTZgrqBS+OUs86ZxQBACNE95pbjyCGEiJUnCWVOIvQZDIHqVJJ9 4+gYqwLbiz0UoqKpG4AcTzxj7ll2IV+PhvB4hre2m1D5ftZj/2WO3hmlaacJpvks 7HNmfEYw/Vbm1gD821/37gd56pimgiDJjGy9rOCN8EN67/lv9C6SKKHJAWQNDnP9 fO/HmcLiloeb3Qhtu97bYF/8l7f0kgnuPSNYEcbwf674as7jW2pDI+c91fc1bmAz bJitiFVs3wIDAQABo4ICnDCCApgwHQYDVR0OBBYEFLsRRLv5tPa0maDgunLvNnb5 7iO4MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0G CCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAnf4BAwQAnf6NAwQAnf6pAwQCnf7I AwQAnf7ZAwQAnf7vMA0GCSqGSIb3DQEBCwUAA4IBAQBSTPFk5AF6qOP7xAUOtQRk ywdy62PqgL4Ht8M/jlXvEL3YLJW67hpxoC9tbeAZ9td1Fbe9wxZ2vhUf+0Km/kTi N17jGfMtT8LQvklXpHGDGL3hOqIafvPLEXhto4faU09aJfTSGQovFc4tv+O7Njo/ NsZzmLx4en1YGFsrgS/LeszsLWzidbILpVlAirTHqo6rMeiTxDQJ6HaSNgpoag/T 0Ddws8OSYs+bnMSG9zDWZMlARHL9ZV3ufFvlf4SsldQyZs4MsjRYNbtTRjCkSdi3 /1XAR9jR6PZ7nCg1IRwHF74fSVZzKQa/VuMaB0vee2pCuITHmgbogcei1LYzOU1B -----END CERTIFICATE-----Generated at Thu Nov 5 05:03:37 2026 by rpki-client