$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: aMGErv5yNnkLt36tr/vGO/oOLlVNrZYz5/SEY1Fvpss= Subject key identifier: 82:F2:87:EE:54:B8:C3:FC:39:5A:BC:93:9A:CD:80:91:66:45:41:7D Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 1F370BA4A0162CABCC5A635659EDF47D5F99AC5F Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa Signing time: Tue 27 Jan 2026 12:28:59 +0000 ROA not before: Tue 27 Jan 2026 12:23:59 +0000 ROA not after: Tue 26 Jan 2027 12:28:59 +0000 asID: 16509 IP address blocks: 157.254.2.0/23 maxlen: 24 157.254.141.0/24 maxlen: 24 157.254.200.0/22 maxlen: 22 157.254.217.0/24 maxlen: 24 157.254.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 02:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:37:0b:a4:a0:16:2c:ab:cc:5a:63:56:59:ed:f4:7d:5f:99:ac:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jan 27 12:23:59 2026 GMT Not After : Jan 26 12:28:59 2027 GMT Subject: CN=82F287EE54B8C3FC395ABC939ACD80916645417D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:88:da:47:83:aa:d1:32:c1:bd:96:68:d9:c9: 5c:53:e3:8f:0b:59:d3:26:e8:ca:cb:c7:41:a0:3f: b6:b4:3b:99:af:b4:65:2c:13:31:ba:12:33:b1:0d: 54:78:1c:ae:6e:90:09:64:c0:45:3a:3b:8f:a2:92: 9a:8c:40:4d:fd:51:1a:81:f5:f1:ec:d9:bc:60:7f: ee:57:1a:54:90:19:d6:a0:87:de:bb:42:49:96:af: 89:bd:ad:ca:74:ba:60:f2:92:f9:2e:90:f7:5b:55: 45:57:b6:63:50:0b:dc:56:cf:01:46:bf:91:58:b5: b4:b1:6e:de:0f:e5:08:83:c5:c4:86:95:bf:1d:0b: ef:54:45:ed:17:60:87:03:8b:06:d8:9f:68:5f:7c: 85:9e:15:95:9d:5d:0c:fb:29:2f:f7:b7:3e:a2:1d: 2d:d2:45:2b:1a:76:7f:46:f3:cb:34:96:6b:aa:1c: 50:6e:bc:58:30:20:b1:05:44:f3:ba:77:1f:36:b2: 58:dd:64:07:d9:7a:80:b5:96:44:0c:a5:9d:c4:38: 93:53:e1:fe:42:92:f9:c9:5b:f8:05:90:8a:4a:ad: 02:fd:f6:ba:2a:73:c5:b7:37:38:70:68:3e:57:dd: 71:3c:ce:ee:07:95:f4:d0:6b:79:e3:14:cf:d3:85: 2a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F2:87:EE:54:B8:C3:FC:39:5A:BC:93:9A:CD:80:91:66:45:41:7D X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.2.0/23 157.254.141.0/24 157.254.200.0/22 157.254.217.0/24 157.254.239.0/24 Signature Algorithm: sha256WithRSAEncryption 03:31:01:fb:1a:97:43:cf:ab:e4:bd:18:83:72:70:ca:43:c8: eb:6f:e5:d0:0d:1e:2a:d2:2a:f3:0f:01:39:49:70:03:9e:77: 87:6b:58:78:c5:46:fa:fc:36:b1:cb:4d:ef:69:c3:5f:01:5f: 3a:d2:01:b3:ab:28:2e:d4:ad:50:11:61:44:ce:e2:73:4a:72: 4f:e8:7f:88:58:94:bf:68:d3:33:a6:e2:7f:b9:98:95:6c:74: 7d:b0:52:73:5e:4b:b3:e5:fc:b1:9f:83:9e:db:d4:85:02:6e: 3e:53:43:29:e6:07:f8:18:49:e3:5f:66:28:3f:13:27:96:56: 23:9a:c6:bd:5f:f0:e6:31:0b:3e:02:e0:75:8c:0a:37:4c:ef: df:20:3d:8a:8d:61:2f:c9:cd:0d:10:6f:31:4d:c6:c2:90:b4: 32:73:46:43:d0:2e:95:d3:cb:77:f0:e8:97:fc:9a:5c:49:18: 46:2b:0a:e7:8a:df:e9:25:5c:4b:72:e9:c5:d0:f5:89:64:c2: 65:a8:8f:b1:04:e2:46:60:23:1b:cb:7a:46:07:63:d1:a3:28: d7:b0:31:49:a0:ca:22:cc:66:ee:34:d5:c6:68:0f:57:38:50: 51:ff:3e:2b:13:16:d0:63:8c:18:57:21:ab:31:54:1f:33:aa: 4e:3e:dd:7e -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUHzcLpKAWLKvMWmNWWe30fV+ZrF8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwMTI3MTIyMzU5WhcNMjcwMTI2MTIyODU5 WjAzMTEwLwYDVQQDEyg4MkYyODdFRTU0QjhDM0ZDMzk1QUJDOTM5QUNEODA5MTY2 NDU0MTdEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4jaR4Oq0TLB vZZo2clcU+OPC1nTJujKy8dBoD+2tDuZr7RlLBMxuhIzsQ1UeByubpAJZMBFOjuP opKajEBN/VEagfXx7Nm8YH/uVxpUkBnWoIfeu0JJlq+Jva3KdLpg8pL5LpD3W1VF V7ZjUAvcVs8BRr+RWLW0sW7eD+UIg8XEhpW/HQvvVEXtF2CHA4sG2J9oX3yFnhWV nV0M+ykv97c+oh0t0kUrGnZ/RvPLNJZrqhxQbrxYMCCxBUTzuncfNrJY3WQH2XqA tZZEDKWdxDiTU+H+QpL5yVv4BZCKSq0C/fa6KnPFtzc4cGg+V91xPM7uB5X00Gt5 4xTP04Uq8QIDAQABo4ICljCCApIwHQYDVR0OBBYEFILyh+5UuMP8OVq8k5rNgJFm RUF9MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBnf4CAwQAnf6NAwQCnf7IAwQAnf7Z AwQAnf7vMA0GCSqGSIb3DQEBCwUAA4IBAQADMQH7GpdDz6vkvRiDcnDKQ8jrb+XQ DR4q0irzDwE5SXADnneHa1h4xUb6/Daxy03vacNfAV860gGzqygu1K1QEWFEzuJz SnJP6H+IWJS/aNMzpuJ/uZiVbHR9sFJzXkuz5fyxn4Oe29SFAm4+U0Mp5gf4GEnj X2YoPxMnllYjmsa9X/DmMQs+AuB1jAo3TO/fID2KjWEvyc0NEG8xTcbCkLQyc0ZD 0C6V08t38OiX/JpcSRhGKwrnit/pJVxLcunF0PWJZMJlqI+xBOJGYCMby3pGB2PR oyjXsDFJoMoizGbuNNXGaA9XOFBR/z4rExbQY4wYVyGrMVQfM6pOPt1+ -----END CERTIFICATE-----Generated at Mon Mar 2 04:26:39 2026 by rpki-client