$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: +YFeZEBb9bh0B1aZ8EyPqwydjeIj1nFTs9WJK672wZ0= Subject key identifier: 0A:77:23:38:F5:FF:42:30:98:4B:0B:25:86:B5:E3:30:4A:DB:90:0E Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 35106814912059144D48182BEA26788D791FE978 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa Signing time: Thu 07 Aug 2025 18:15:25 +0000 ROA not before: Thu 07 Aug 2025 18:10:25 +0000 ROA not after: Thu 06 Aug 2026 18:15:25 +0000 asID: 16509 IP address blocks: 23.95.142.0/24 maxlen: 24 64.50.161.0/24 maxlen: 24 67.210.104.0/24 maxlen: 24 74.50.0.0/24 maxlen: 24 209.200.231.0/24 maxlen: 24 209.200.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 06:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:10:68:14:91:20:59:14:4d:48:18:2b:ea:26:78:8d:79:1f:e9:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Aug 7 18:10:25 2025 GMT Not After : Aug 6 18:15:25 2026 GMT Subject: CN=0A772338F5FF4230984B0B2586B5E3304ADB900E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a4:e9:ea:50:80:4b:1a:98:3e:0a:95:7b:8f: cf:0d:bf:5d:36:a9:07:4a:27:5c:76:02:f5:d4:27: 40:9b:02:20:c6:87:72:66:b8:6b:36:b6:fb:d1:c1: 38:88:2c:ca:39:fc:c8:36:f9:75:53:c8:2f:5d:d5: b5:a2:83:7f:c3:b5:e2:10:6a:ac:8f:ac:30:31:d5: bf:7a:7a:e5:6a:ed:d0:5c:58:91:c0:9a:05:c2:5f: 1d:61:25:09:4b:16:9b:57:21:a1:24:df:4b:21:5e: 60:96:51:e1:3e:8e:41:25:a5:b1:88:e0:0a:46:aa: d1:77:ab:be:61:d1:31:b0:85:e8:e8:d8:94:36:e2: 84:be:6b:fa:86:ed:6b:c4:8b:ec:34:d9:b5:45:de: 99:3a:a7:d7:5a:61:7f:99:50:17:fc:ac:a5:9d:0f: 8c:2b:1b:38:79:f0:d1:fb:06:a6:9e:fc:20:18:0b: 22:28:da:6f:2c:99:60:56:12:4e:26:c1:ea:8c:73: 7a:ac:b9:cc:08:e6:86:7d:6e:21:e1:d0:e7:96:04: d3:8a:d2:00:9b:bf:d4:93:3b:34:95:43:84:ad:18: 01:7f:5f:5d:c0:e3:78:2f:94:be:80:c9:b8:66:2d: 2f:1d:a7:0e:20:9b:af:c9:70:84:18:83:9c:8f:8f: 40:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:77:23:38:F5:FF:42:30:98:4B:0B:25:86:B5:E3:30:4A:DB:90:0E X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.142.0/24 64.50.161.0/24 67.210.104.0/24 74.50.0.0/24 209.200.231.0/24 209.200.241.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:36:96:5a:07:68:9f:9c:1d:cf:3a:40:cc:a3:40:b2:bc:fe: 52:dd:80:33:1d:1b:3c:66:35:d6:f5:c3:03:ce:0e:84:4a:f9: a8:33:6f:8e:21:3b:9c:5b:3b:d1:ce:9f:e7:82:ce:b1:4f:47: 3d:eb:5d:e6:be:e3:b3:e7:42:d0:d0:07:e0:16:cf:2b:1f:f9: 20:f9:28:53:ba:7e:f2:d7:3c:8c:b7:83:49:de:f7:3d:74:33: 2e:c8:61:a5:42:89:96:91:21:aa:b4:74:4f:48:56:35:50:c2: d2:2f:6a:53:b2:08:99:01:49:cf:dd:31:90:db:c9:34:cd:8d: e3:26:75:e2:5e:92:e9:90:42:af:40:29:e0:ac:8b:43:b8:85: 2d:69:40:89:66:57:7d:0a:cd:fd:73:bc:ef:3b:b0:11:04:e4: 1d:a2:c7:74:1b:c8:a2:6c:f2:c4:cf:0c:11:5a:6f:ee:57:07: 9a:93:34:1e:49:a6:8e:b4:b3:19:da:19:6a:1c:03:55:92:ab: 85:80:52:cc:a0:1c:13:8b:af:b6:c8:1a:69:78:88:e0:89:06: b0:e7:db:9f:f2:28:ee:ea:10:bc:31:3e:06:35:9c:3a:28:d1: 96:de:00:87:06:86:8e:d7:b0:6e:fb:1b:1d:3c:0a:e5:b8:67: 6a:13:06:cc -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUNRBoFJEgWRRNSBgr6iZ4jXkf6XgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwODA3MTgxMDI1WhcNMjYwODA2MTgxNTI1 WjAzMTEwLwYDVQQDEygwQTc3MjMzOEY1RkY0MjMwOTg0QjBCMjU4NkI1RTMzMDRB REI5MDBFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KTp6lCASxqY PgqVe4/PDb9dNqkHSidcdgL11CdAmwIgxodyZrhrNrb70cE4iCzKOfzINvl1U8gv XdW1ooN/w7XiEGqsj6wwMdW/enrlau3QXFiRwJoFwl8dYSUJSxabVyGhJN9LIV5g llHhPo5BJaWxiOAKRqrRd6u+YdExsIXo6NiUNuKEvmv6hu1rxIvsNNm1Rd6ZOqfX WmF/mVAX/KylnQ+MKxs4efDR+wamnvwgGAsiKNpvLJlgVhJOJsHqjHN6rLnMCOaG fW4h4dDnlgTTitIAm7/Ukzs0lUOErRgBf19dwON4L5S+gMm4Zi0vHacOIJuvyXCE GIOcj49AAQIDAQABo4ICnDCCApgwHQYDVR0OBBYEFAp3Izj1/0IwmEsLJYa14zBK 25AOMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0G CCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAF1+OAwQAQDKhAwQAQ9JoAwQASjIA AwQA0cjnAwQA0cjxMA0GCSqGSIb3DQEBCwUAA4IBAQA+NpZaB2ifnB3POkDMo0Cy vP5S3YAzHRs8ZjXW9cMDzg6ESvmoM2+OITucWzvRzp/ngs6xT0c9613mvuOz50LQ 0AfgFs8rH/kg+ShTun7y1zyMt4NJ3vc9dDMuyGGlQomWkSGqtHRPSFY1UMLSL2pT sgiZAUnP3TGQ28k0zY3jJnXiXpLpkEKvQCngrItDuIUtaUCJZld9Cs39c7zvO7AR BOQdosd0G8iibPLEzwwRWm/uVweakzQeSaaOtLMZ2hlqHANVkquFgFLMoBwTi6+2 yBppeIjgiQaw59uf8iju6hC8MT4GNZw6KNGW3gCHBoaO17Bu+xsdPArluGdqEwbM -----END CERTIFICATE-----Generated at Sat Aug 23 10:10:33 2025 by rpki-client