$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: 6jzQjG0v1NVRpbzR0penNS53bEtUUzBq6T22jB2D2P4= Subject key identifier: 30:D8:BD:51:27:EC:0C:55:BF:67:22:48:0D:07:E0:ED:50:3A:A9:27 Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4 Certificate serial: 022592AAE228BAFF3B857CFC3076A471E3309BE4 Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS16509.roa Signing time: Thu 04 Sep 2025 10:12:46 +0000 ROA not before: Thu 04 Sep 2025 10:07:46 +0000 ROA not after: Thu 03 Sep 2026 10:12:46 +0000 asID: 16509 IP address blocks: 64.202.96.0/24 maxlen: 24 66.225.239.0/24 maxlen: 24 204.93.164.0/24 maxlen: 24 204.93.186.0/24 maxlen: 24 204.93.201.0/24 maxlen: 24 205.234.156.0/23 maxlen: 24 205.234.204.0/24 maxlen: 24 205.234.244.0/24 maxlen: 24 216.246.3.0/24 maxlen: 24 216.246.96.0/24 maxlen: 24 216.246.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 13:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:25:92:aa:e2:28:ba:ff:3b:85:7c:fc:30:76:a4:71:e3:30:9b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4 Validity Not Before: Sep 4 10:07:46 2025 GMT Not After : Sep 3 10:12:46 2026 GMT Subject: CN=30D8BD5127EC0C55BF6722480D07E0ED503AA927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:97:7e:e4:90:fb:12:2f:bf:88:94:06:d7:02: 68:88:28:c3:7a:88:27:88:85:b9:b3:49:a3:d4:a2: 41:36:95:e2:35:03:c9:f1:85:5b:29:cd:0d:20:c6: 16:c7:08:dc:34:de:7d:44:75:b6:e4:a6:6a:9f:23: cf:e0:e6:a9:f9:a0:06:d3:01:39:31:e8:4a:6e:17: 34:af:6b:06:27:e7:e0:a6:e2:d4:29:bf:42:fc:69: 46:bb:a2:59:35:49:0d:9a:78:82:ad:dd:f2:c5:a0: 71:cb:ab:15:2c:42:60:e6:aa:c6:ee:11:ff:e2:df: 56:d7:0d:9b:f2:5e:2c:00:ca:74:04:95:e4:cf:be: 03:d6:44:78:51:31:70:aa:eb:5a:f5:46:e1:d6:75: c1:24:d6:f7:ac:da:10:c1:a5:52:4e:d3:38:88:e2: d7:4a:4c:72:40:b3:dc:1f:53:61:7a:ac:3f:7a:3c: 71:8a:84:ed:a7:99:e2:84:c2:32:87:19:46:16:0e: 2f:da:6a:a5:eb:62:7a:85:50:6c:4d:0a:24:c7:91: 22:09:85:61:8e:49:d6:14:14:20:6f:41:12:94:80: 79:52:e5:04:98:60:6d:fa:e1:d8:e1:3d:14:eb:83: e9:6d:59:d9:be:a0:42:57:27:d7:87:dd:dc:19:b8: 46:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D8:BD:51:27:EC:0C:55:BF:67:22:48:0D:07:E0:ED:50:3A:A9:27 X509v3 Authority Key Identifier: keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.202.96.0/24 66.225.239.0/24 204.93.164.0/24 204.93.186.0/24 204.93.201.0/24 205.234.156.0/23 205.234.204.0/24 205.234.244.0/24 216.246.3.0/24 216.246.96.0/24 216.246.99.0/24 Signature Algorithm: sha256WithRSAEncryption 09:58:d3:28:92:b7:d6:80:e7:cb:d1:39:e7:4c:ae:d2:99:a3: b5:5c:fe:12:7f:c7:b8:e9:78:57:04:5f:c4:05:04:a3:77:9b: 44:b2:a9:c2:b0:6e:70:f9:01:6b:a0:f0:de:8f:50:ab:60:16: f4:0b:80:f0:df:e6:96:90:46:7f:a1:94:84:f0:9e:f0:39:5c: f2:85:e6:d7:3a:97:2e:b1:f3:1f:cb:88:a6:ef:1d:eb:c7:15: bf:50:fe:58:cd:1a:36:ad:1a:39:d5:62:3b:d3:0a:87:f5:cb: 86:79:c1:99:52:ef:e6:78:2d:d1:ef:79:04:7f:d1:54:f9:1e: cf:69:03:8e:48:6c:83:ea:c5:1c:44:ab:bc:cb:03:bc:f3:3e: de:c4:62:e0:e8:1f:96:8f:3a:c8:cc:72:c6:63:8a:7e:ea:71: f1:f9:b8:1d:91:fb:8f:f4:cb:8c:9a:32:01:ea:d2:a0:08:03: aa:5e:d6:3f:52:3c:a1:c3:0b:c5:bb:8b:a4:a6:23:3b:84:51: 82:5f:79:61:3a:26:56:ef:94:de:7d:77:f3:ee:9e:bb:18:43: 36:18:28:57:75:2e:85:06:0d:b5:e6:ba:e8:56:ed:41:e3:c0: 6a:b8:7d:8b:e2:4f:1b:80:5b:b3:5e:15:66:9d:e5:3d:8c:86: c7:8e:13:92 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIUAiWSquIouv87hXz8MHakceMwm+QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjUwOTA0MTAwNzQ2WhcNMjYwOTAzMTAxMjQ2 WjAzMTEwLwYDVQQDEygzMEQ4QkQ1MTI3RUMwQzU1QkY2NzIyNDgwRDA3RTBFRDUw M0FBOTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJd+5JD7Ei+/ iJQG1wJoiCjDeogniIW5s0mj1KJBNpXiNQPJ8YVbKc0NIMYWxwjcNN59RHW25KZq nyPP4Oap+aAG0wE5MehKbhc0r2sGJ+fgpuLUKb9C/GlGu6JZNUkNmniCrd3yxaBx y6sVLEJg5qrG7hH/4t9W1w2b8l4sAMp0BJXkz74D1kR4UTFwquta9Ubh1nXBJNb3 rNoQwaVSTtM4iOLXSkxyQLPcH1Nheqw/ejxxioTtp5nihMIyhxlGFg4v2mql62J6 hVBsTQokx5EiCYVhjknWFBQgb0ESlIB5UuUEmGBt+uHY4T0U64PpbVnZvqBCVyfX h93cGbhGxQIDAQABo4ICujCCArYwHQYDVR0OBBYEFDDYvVEn7AxVv2ciSA0H4O1Q OqknMB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi MzQ2MmEvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsG CCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAQMpgAwQAQuHvAwQAzF2kAwQAzF26 AwQAzF3JAwQBzeqcAwQAzerMAwQAzer0AwQA2PYDAwQA2PZgAwQA2PZjMA0GCSqG SIb3DQEBCwUAA4IBAQAJWNMokrfWgOfL0TnnTK7SmaO1XP4Sf8e46XhXBF/EBQSj d5tEsqnCsG5w+QFroPDej1CrYBb0C4Dw3+aWkEZ/oZSE8J7wOVzyhebXOpcusfMf y4im7x3rxxW/UP5YzRo2rRo51WI70wqH9cuGecGZUu/meC3R73kEf9FU+R7PaQOO SGyD6sUcRKu8ywO88z7exGLg6B+WjzrIzHLGY4p+6nHx+bgdkfuP9MuMmjIB6tKg CAOqXtY/UjyhwwvFu4ukpiM7hFGCX3lhOiZW75TefXfz7p67GEM2GChXdS6FBg21 5rroVu1B48BquH2L4k8bgFuzXhVmneU9jIbHjhOS -----END CERTIFICATE-----Generated at Wed Nov 5 00:08:46 2025 by rpki-client