$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: zoaqyHcQHZAgMAiZbgJrneW1EXRdlvs2ufj0kgervUI= Subject key identifier: AE:6D:2D:F4:65:E4:3E:F5:6C:C6:32:0B:03:08:9C:C0:31:84:20:9D Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 0ED5B17C168F5929D3690482A47D0F51D19DD0DD Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa Signing time: Sun 05 Jul 2026 21:32:33 +0000 ROA not before: Sun 05 Jul 2026 21:27:33 +0000 ROA not after: Sun 04 Jul 2027 21:32:33 +0000 asID: 16509 IP address blocks: 104.234.13.0/24 maxlen: 24 104.234.137.0/24 maxlen: 24 104.234.141.0/24 maxlen: 24 104.234.143.0/24 maxlen: 24 104.234.160.0/24 maxlen: 24 104.234.175.0/24 maxlen: 24 104.234.187.0/24 maxlen: 24 104.234.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 23:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:d5:b1:7c:16:8f:59:29:d3:69:04:82:a4:7d:0f:51:d1:9d:d0:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jul 5 21:27:33 2026 GMT Not After : Jul 4 21:32:33 2027 GMT Subject: CN=AE6D2DF465E43EF56CC6320B03089CC03184209D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c9:7d:12:02:bc:ca:13:2f:1b:aa:48:fd:ef: cb:37:f0:d4:01:79:a2:e1:da:67:38:bd:26:55:38: fe:54:6f:0c:64:a1:d0:a8:b8:06:01:3b:a2:89:ab: 3d:a4:29:ea:44:1b:77:ed:e5:09:f1:50:c4:d6:ad: ec:81:5d:44:95:1c:37:63:34:ec:8e:b0:80:02:bf: 55:e5:3d:f7:05:f9:53:25:75:54:02:ab:d0:07:be: 36:4d:01:1c:ae:b8:fd:4e:f3:e5:20:9d:1c:79:c7: e9:35:a7:b3:13:dc:4f:2c:6d:c9:12:fa:bf:b9:53: b3:b5:18:5a:f6:b0:6a:2f:a2:0b:3c:97:6a:34:cf: 1a:02:09:70:26:10:ca:e9:de:e6:b0:39:c7:a6:22: cf:bd:27:2d:44:9f:2b:7b:f8:58:e0:a5:da:16:17: a8:40:54:8e:09:7c:fb:c8:c0:9d:b0:b9:84:50:04: 0d:21:41:af:1e:be:ac:8e:73:f9:03:05:35:fd:57: d8:d3:bd:e5:87:c6:57:3d:66:1a:fe:71:8b:aa:61: 35:da:60:9e:63:57:3a:4a:50:b5:c6:f0:ea:78:0c: 0f:5e:6d:b1:38:b2:28:0c:3c:70:b4:d7:19:07:61: b3:ed:75:b5:4d:4c:bb:a4:db:d5:21:e6:a6:83:e9: 5f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:6D:2D:F4:65:E4:3E:F5:6C:C6:32:0B:03:08:9C:C0:31:84:20:9D X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.13.0/24 104.234.137.0/24 104.234.141.0/24 104.234.143.0/24 104.234.160.0/24 104.234.175.0/24 104.234.187.0/24 104.234.245.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:80:24:0a:f0:69:de:a0:fa:5d:fd:f0:c0:e8:e7:73:98:37: 1c:b8:aa:82:f9:f6:86:90:93:2e:5d:d5:67:3b:f2:b5:c4:77: f6:d7:46:7c:89:0b:2a:d9:da:be:33:70:b5:7d:57:40:0e:25: 71:44:87:f2:99:a2:5f:0b:20:92:eb:50:20:67:fd:55:e9:32: ac:68:76:8f:5b:15:95:48:36:bc:31:53:14:86:be:24:f5:f7: 37:d5:52:08:cf:0a:a8:c1:e3:93:d3:6d:26:f0:03:15:da:48: 3b:d2:84:48:b9:15:43:4d:44:f2:9c:06:9a:5a:64:f1:19:90: 00:b0:f9:1f:54:7c:4f:be:4e:59:0f:9f:71:b5:55:95:b2:7f: 50:e7:f0:7c:3f:e3:04:d7:75:28:41:72:b8:c6:01:70:17:fc: 33:c3:c3:83:8a:85:cb:20:59:9f:9a:be:9f:47:71:ef:06:98: 9a:94:af:ec:8e:41:c6:f7:85:d1:36:5e:73:6b:03:a4:0b:b0: 07:b7:4a:a8:13:41:5f:2f:51:e1:6d:80:6f:0f:7a:98:0d:d4: 29:bc:62:ae:bc:b7:b0:9a:cd:dc:65:7a:94:4d:8f:8d:36:69: 01:b7:e7:f1:c6:20:9e:f3:7f:bf:c4:13:3d:2e:83:88:c3:b5: c4:80:86:e3 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUDtWxfBaPWSnTaQSCpH0PUdGd0N0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwNzA1MjEyNzMzWhcNMjcwNzA0MjEzMjMz WjAzMTEwLwYDVQQDEyhBRTZEMkRGNDY1RTQzRUY1NkNDNjMyMEIwMzA4OUNDMDMx ODQyMDlEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncl9EgK8yhMv G6pI/e/LN/DUAXmi4dpnOL0mVTj+VG8MZKHQqLgGATuiias9pCnqRBt37eUJ8VDE 1q3sgV1ElRw3YzTsjrCAAr9V5T33BflTJXVUAqvQB742TQEcrrj9TvPlIJ0cecfp NaezE9xPLG3JEvq/uVOztRha9rBqL6ILPJdqNM8aAglwJhDK6d7msDnHpiLPvSct RJ8re/hY4KXaFheoQFSOCXz7yMCdsLmEUAQNIUGvHr6sjnP5AwU1/VfY073lh8ZX PWYa/nGLqmE12mCeY1c6SlC1xvDqeAwPXm2xOLIoDDxwtNcZB2Gz7XW1TUy7pNvV Ieamg+lfOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5tLfRl5D71bMYyCwMInMAx hCCdMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkG CCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAaOoNAwQAaOqJAwQAaOqNAwQAaOqP AwQAaOqgAwQAaOqvAwQAaOq7AwQAaOr1MA0GCSqGSIb3DQEBCwUAA4IBAQBOgCQK 8GneoPpd/fDA6OdzmDccuKqC+faGkJMuXdVnO/K1xHf210Z8iQsq2dq+M3C1fVdA DiVxRIfymaJfCyCS61AgZ/1V6TKsaHaPWxWVSDa8MVMUhr4k9fc31VIIzwqoweOT 020m8AMV2kg70oRIuRVDTUTynAaaWmTxGZAAsPkfVHxPvk5ZD59xtVWVsn9Q5/B8 P+ME13UoQXK4xgFwF/wzw8ODioXLIFmfmr6fR3HvBpialK/sjkHG94XRNl5zawOk C7AHt0qoE0FfL1HhbYBvD3qYDdQpvGKuvLewms3cZXqUTY+NNmkBt+fxxiCe83+/ xBM9LoOIw7XEgIbj -----END CERTIFICATE-----Generated at Thu Jul 23 23:41:43 2026 by rpki-client