$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: 415EQoXleiENZwCxdc3GaVJvYMfwmEJLSj6p0mU0Usw= Subject key identifier: CB:E2:6E:04:56:80:4F:E9:79:BC:E0:DF:58:5D:BF:25:5A:F6:CF:EC Certificate issuer: /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683 Certificate serial: 2A4EB40CCE2251FAD8E4F5EDE5493CC83CA58898 Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer Subject info access: rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS16509.roa Signing time: Thu 16 Jul 2026 16:03:57 +0000 ROA not before: Thu 16 Jul 2026 15:58:57 +0000 ROA not after: Thu 15 Jul 2027 16:03:57 +0000 asID: 16509 IP address blocks: 207.180.22.0/24 maxlen: 24 207.180.27.0/24 maxlen: 24 216.75.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 01:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:4e:b4:0c:ce:22:51:fa:d8:e4:f5:ed:e5:49:3c:c8:3c:a5:88:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683 Validity Not Before: Jul 16 15:58:57 2026 GMT Not After : Jul 15 16:03:57 2027 GMT Subject: CN=CBE26E0456804FE979BCE0DF585DBF255AF6CFEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:36:ae:33:8e:cb:70:dd:8c:4e:4b:3c:67:d8: cf:4a:28:87:45:8b:5f:39:eb:c6:3d:c3:28:f7:49: 06:93:25:c2:a8:3f:57:8c:d7:0f:94:da:c8:4d:20: 57:ce:dd:5b:9b:eb:3e:9c:2d:0a:05:48:60:2f:03: 69:49:ad:1b:e3:5a:ce:bf:29:79:70:e1:4e:99:f3: 18:9b:36:86:9e:e4:c4:24:fa:8f:77:bb:51:f3:0b: ec:ff:a7:1c:04:df:d0:f5:77:1d:07:93:98:06:67: ec:50:5d:26:53:aa:0c:84:a6:15:7f:bf:2e:5b:8a: c2:d1:37:de:41:72:d8:e1:61:03:69:f5:31:57:b9: fa:92:6e:8a:a9:04:22:0f:56:f1:29:07:40:81:e1: b0:97:96:c4:ca:85:fa:29:bd:93:d7:d6:92:d0:da: 4d:28:05:a4:c9:f1:20:17:22:ce:45:ce:fb:67:db: e2:38:04:af:d8:64:8a:c8:a0:22:e6:da:80:12:83: 24:d7:39:c0:77:53:39:9f:b3:7c:ae:95:79:85:c2: fa:ef:b9:81:74:f9:16:58:1f:c7:a4:55:b3:c1:a3: c5:e7:d8:30:a7:82:43:f4:2e:6e:5e:06:41:8c:17: 16:61:de:17:ed:b5:cb:d1:8a:bd:dc:a8:31:29:ae: 06:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E2:6E:04:56:80:4F:E9:79:BC:E0:DF:58:5D:BF:25:5A:F6:CF:EC X509v3 Authority Key Identifier: keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.180.22.0/24 207.180.27.0/24 216.75.135.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:51:db:a6:32:f7:89:49:ff:b1:6a:58:c7:de:f1:07:57:04: 21:34:cd:55:29:f8:08:ca:3c:cb:b4:20:f2:38:fb:dc:86:00: 01:50:35:ee:9f:b0:90:0e:20:f1:db:96:da:0d:c9:16:ef:c1: 6e:62:c6:c2:28:42:7f:85:39:3a:00:a8:14:d7:cc:d8:e5:f4: b4:9f:28:b2:0a:82:a0:81:2c:4d:0f:06:56:ee:0f:9a:d5:38: 77:ef:64:02:0c:78:1d:7c:4d:03:66:b8:29:80:d1:60:a5:0c: 83:7f:43:be:5a:99:67:a8:09:84:2e:1f:c8:46:0a:cf:67:d5: ac:13:89:3a:81:f4:7c:56:3a:92:fe:9d:69:59:33:ca:d0:8b: 7c:6a:bb:d7:bf:37:91:f2:50:45:52:1a:5c:0e:50:dc:f4:0e: c1:bb:fd:85:ee:c7:3a:8b:36:34:04:38:04:90:0b:38:9c:33: 6d:4d:3a:52:64:24:20:93:2a:49:9c:96:84:c3:ca:9b:bd:2d: d5:68:bd:fb:9b:97:f7:94:cf:38:08:8c:12:67:8a:31:bd:2b: 54:a1:fe:b7:dd:a8:94:c3:31:fe:65:61:23:d5:af:a3:52:d7: 2e:44:c0:4d:4e:40:f8:f2:fa:29:06:88:4d:73:14:2a:9c:52: 7a:e7:35:78 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUKk60DM4iUfrY5PXt5Uk8yDyliJgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYwNzE2MTU1ODU3WhcNMjcwNzE1MTYwMzU3 WjAzMTEwLwYDVQQDEyhDQkUyNkUwNDU2ODA0RkU5NzlCQ0UwREY1ODVEQkYyNTVB RjZDRkVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjauM47LcN2M Tks8Z9jPSiiHRYtfOevGPcMo90kGkyXCqD9XjNcPlNrITSBXzt1bm+s+nC0KBUhg LwNpSa0b41rOvyl5cOFOmfMYmzaGnuTEJPqPd7tR8wvs/6ccBN/Q9XcdB5OYBmfs UF0mU6oMhKYVf78uW4rC0TfeQXLY4WEDafUxV7n6km6KqQQiD1bxKQdAgeGwl5bE yoX6Kb2T19aS0NpNKAWkyfEgFyLORc77Z9viOASv2GSKyKAi5tqAEoMk1znAd1M5 n7N8rpV5hcL677mBdPkWWB/HpFWzwaPF59gwp4JD9C5uXgZBjBcWYd4X7bXL0Yq9 3KgxKa4GNwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFMvibgRWgE/pebzg31hdvyVa 9s/sMB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4 NmRkM2YvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAz7QWAwQAz7QbAwQA2EuHMA0GCSqG SIb3DQEBCwUAA4IBAQB7UdumMveJSf+xaljH3vEHVwQhNM1VKfgIyjzLtCDyOPvc hgABUDXun7CQDiDx25baDckW78FuYsbCKEJ/hTk6AKgU18zY5fS0nyiyCoKggSxN DwZW7g+a1Th372QCDHgdfE0DZrgpgNFgpQyDf0O+WplnqAmELh/IRgrPZ9WsE4k6 gfR8VjqS/p1pWTPK0It8arvXvzeR8lBFUhpcDlDc9A7Bu/2F7sc6izY0BDgEkAs4 nDNtTTpSZCQgkypJnJaEw8qbvS3VaL37m5f3lM84CIwSZ4oxvStUof633aiUwzH+ ZWEj1a+jUtcuRMBNTkD48vopBohNcxQqnFJ65zV4 -----END CERTIFICATE-----Generated at Fri Jul 24 03:34:50 2026 by rpki-client