$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: hqTna5I+WhRd0vd4x6s1Svlmnkh2o8fYpCMXcCQcir4= Subject key identifier: 55:84:4A:5B:25:96:36:BF:55:97:48:74:91:B2:70:DD:16:F9:AA:BD Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 1902CF8156196B483E004CFD1FD9A62549AFA2FE Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa Signing time: Sun 08 Jun 2025 00:29:20 +0000 ROA not before: Sun 08 Jun 2025 00:24:20 +0000 ROA not after: Sun 07 Jun 2026 00:29:20 +0000 asID: 16509 IP address blocks: 157.254.2.0/23 maxlen: 24 157.254.200.0/22 maxlen: 22 157.254.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Jun 2025 16:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:02:cf:81:56:19:6b:48:3e:00:4c:fd:1f:d9:a6:25:49:af:a2:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jun 8 00:24:20 2025 GMT Not After : Jun 7 00:29:20 2026 GMT Subject: CN=55844A5B259636BF5597487491B270DD16F9AABD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3b:ac:85:36:a8:42:7e:c0:1a:19:f2:aa:5c: 12:0b:4f:a9:93:ef:be:c9:d7:57:b6:11:40:20:43: 9f:4f:10:f4:90:29:a9:81:f4:98:7a:b7:c0:9a:77: 38:5e:c8:7a:dc:b4:1e:7d:45:f8:28:4e:28:bc:18: 8c:4d:85:bd:b1:70:5b:ee:d9:03:4a:aa:33:b9:98: 33:cd:9e:41:1e:41:c3:21:5a:32:96:9c:4c:ce:75: f8:15:08:2f:d6:7c:e3:86:e7:29:d9:82:45:dd:cc: 23:2f:a2:ea:34:ab:1f:0c:03:09:48:00:a6:2f:1b: d9:2f:1c:c7:d6:46:34:0a:bb:4a:68:5a:1c:69:be: 32:65:52:28:fe:ce:44:c3:54:2c:79:20:29:32:17: 3d:56:b5:0b:a1:91:8a:5f:69:2e:ae:79:53:9e:4e: f1:9d:8e:74:92:21:9e:3a:19:37:e4:91:cf:15:62: 05:73:40:14:7b:1a:6f:5b:7e:2f:05:50:ce:15:f9: 50:12:f0:cb:5d:03:46:b7:e6:ab:f9:3a:9d:d3:93: 1e:e4:bf:6c:ec:6b:66:9b:92:d0:52:dc:52:8b:40: 61:ff:f2:1b:39:c3:35:5a:40:6f:47:03:ba:f3:1d: 9f:d7:5e:b3:d7:49:61:36:27:11:c9:a2:53:96:11: 13:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:84:4A:5B:25:96:36:BF:55:97:48:74:91:B2:70:DD:16:F9:AA:BD X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.2.0/23 157.254.200.0/22 157.254.217.0/24 Signature Algorithm: sha256WithRSAEncryption 69:db:1f:42:94:04:9b:54:5a:0f:60:35:6f:a4:f2:36:6a:0a: dd:41:57:57:59:77:8b:01:04:58:b0:7c:2e:50:b2:f1:59:5a: ce:0c:ca:fd:9e:a4:82:71:4d:1a:5e:89:03:32:90:f2:2c:f8: ea:78:ba:f7:73:9c:7d:3a:b7:17:dc:95:c5:4a:fd:29:16:72: 5b:f5:4e:44:5a:04:2c:ed:cb:fd:68:46:e1:d3:23:c1:0f:e9: a0:0e:01:1b:52:3a:45:f0:cf:44:d8:41:25:48:6c:bc:1f:d5: 45:e3:13:7a:46:ad:db:c6:6d:86:a1:98:f3:a8:2e:45:c9:c7: 93:8d:94:7c:a0:81:62:a7:ab:ce:b3:f2:ab:43:3a:32:d1:bd: af:89:75:4e:06:4b:2a:af:d3:60:39:3c:df:12:31:f3:1a:46: 85:03:a2:51:72:f5:13:00:2f:9b:de:f1:2b:50:fb:43:96:81: d9:21:8e:1c:fb:d8:c2:27:07:0d:07:b6:55:04:06:05:12:8d: 0c:fd:e2:ad:98:c6:04:23:d1:c5:16:0f:87:2d:01:2e:1c:6a: 2d:93:8c:30:ce:a5:f1:75:ba:69:fe:d6:ca:44:df:6c:02:4c: 97:ba:ad:e4:e6:cc:7d:33:ad:34:5e:67:bd:0b:ab:22:b1:43: 20:79:cf:ef -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUGQLPgVYZa0g+AEz9H9mmJUmvov4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwNjA4MDAyNDIwWhcNMjYwNjA3MDAyOTIw WjAzMTEwLwYDVQQDEyg1NTg0NEE1QjI1OTYzNkJGNTU5NzQ4NzQ5MUIyNzBERDE2 RjlBQUJEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozushTaoQn7A GhnyqlwSC0+pk+++yddXthFAIEOfTxD0kCmpgfSYerfAmnc4Xsh63LQefUX4KE4o vBiMTYW9sXBb7tkDSqozuZgzzZ5BHkHDIVoylpxMznX4FQgv1nzjhucp2YJF3cwj L6LqNKsfDAMJSACmLxvZLxzH1kY0CrtKaFocab4yZVIo/s5Ew1QseSApMhc9VrUL oZGKX2kurnlTnk7xnY50kiGeOhk35JHPFWIFc0AUexpvW34vBVDOFflQEvDLXQNG t+ar+Tqd05Me5L9s7Gtmm5LQUtxSi0Bh//IbOcM1WkBvRwO68x2f116z10lhNicR yaJTlhETSwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFFWESlsllja/VZdIdJGycN0W +aq9MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnf4CAwQCnf7IAwQAnf7ZMA0GCSqG SIb3DQEBCwUAA4IBAQBp2x9ClASbVFoPYDVvpPI2agrdQVdXWXeLAQRYsHwuULLx WVrODMr9nqSCcU0aXokDMpDyLPjqeLr3c5x9OrcX3JXFSv0pFnJb9U5EWgQs7cv9 aEbh0yPBD+mgDgEbUjpF8M9E2EElSGy8H9VF4xN6Rq3bxm2GoZjzqC5FyceTjZR8 oIFip6vOs/KrQzoy0b2viXVOBksqr9NgOTzfEjHzGkaFA6JRcvUTAC+b3vErUPtD loHZIY4c+9jCJwcNB7ZVBAYFEo0M/eKtmMYEI9HFFg+HLQEuHGotk4wwzqXxdbpp /tbKRN9sAkyXuq3k5sx9M600Xme9C6sisUMgec/v -----END CERTIFICATE-----Generated at Sat Jun 14 06:05:17 2025 by rpki-client