$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: txEXF/V2qCXdQT1ge6hZwg2CCIETfQiB5B7KxeoucVo= Subject key identifier: D9:5F:85:54:59:55:69:BE:A1:E7:FE:8E:4D:FD:09:56:CD:91:CF:CB Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 129BC6F13B339920A6B2F000AE84E3A8623669A7 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa Signing time: Sat 26 Apr 2025 06:23:02 +0000 ROA not before: Sat 26 Apr 2025 06:18:02 +0000 ROA not after: Sat 25 Apr 2026 06:23:02 +0000 asID: 16509 IP address blocks: 23.95.142.0/24 maxlen: 24 64.50.161.0/24 maxlen: 24 209.200.231.0/24 maxlen: 24 209.200.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 09:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:9b:c6:f1:3b:33:99:20:a6:b2:f0:00:ae:84:e3:a8:62:36:69:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Apr 26 06:18:02 2025 GMT Not After : Apr 25 06:23:02 2026 GMT Subject: CN=D95F8554595569BEA1E7FE8E4DFD0956CD91CFCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f8:6b:d7:7b:fb:86:36:40:7e:c6:a9:7f:04: 79:a1:08:67:f4:8f:d2:79:a6:3e:0d:b0:32:4e:18: 21:73:0c:8e:07:d2:51:05:fb:ba:6a:7f:9f:be:92: da:d1:85:bf:bd:bb:3b:f2:6b:68:79:e5:9c:ef:bd: 57:5b:77:34:50:56:9d:8a:df:db:09:7b:8c:ca:d2: c9:37:41:66:73:a2:91:fc:62:a6:df:75:de:89:16: 98:b5:8e:39:17:4c:5e:8d:1f:b0:29:ff:2f:94:e3: 80:c7:ad:30:38:08:80:10:3a:0d:41:f1:68:d7:10: 86:5a:81:fa:d2:38:a6:12:98:e6:ff:7a:3d:21:51: 07:3e:16:54:ee:f9:b0:62:0f:ae:18:e6:52:c1:a9: f6:91:74:01:8d:f0:1a:d4:05:8d:f2:a0:15:65:01: 36:81:50:66:42:18:42:79:5c:47:3b:b6:77:b1:bd: 6f:9c:34:4f:aa:bc:93:97:c7:70:b0:bd:a7:cd:73: 93:8c:7a:4c:9c:d3:65:0e:0c:f5:41:41:94:ef:a1: 60:1e:99:05:42:1d:14:3c:fb:84:53:5c:b6:26:ae: cb:3c:6c:c1:00:21:0f:4f:0b:6e:b7:43:e7:c8:10: a6:5f:d1:7d:f0:4e:67:1c:b7:4a:92:90:bd:64:99: c0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5F:85:54:59:55:69:BE:A1:E7:FE:8E:4D:FD:09:56:CD:91:CF:CB X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.142.0/24 64.50.161.0/24 209.200.231.0/24 209.200.241.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:73:e1:1b:7f:37:7c:a0:4c:48:ed:70:c2:38:62:c9:ad:02: d1:b3:6a:3d:bb:35:3c:36:08:6f:09:86:a5:b7:1d:0d:b7:6a: ca:66:7a:96:84:27:02:a1:a2:d6:9d:f8:9f:12:1c:b0:48:13: 5e:dd:ca:94:dd:38:0f:d8:fb:cf:fd:07:53:57:c8:0b:23:64: 5d:b7:26:97:40:74:27:d4:4b:c4:e6:aa:75:fb:15:5e:1a:cb: 9b:f2:65:d2:a1:03:54:13:52:27:b9:4d:62:d5:6b:c3:19:df: 91:2b:de:49:e8:a2:7e:24:48:69:97:1d:d0:1f:50:b0:b2:31: 0d:61:02:fe:51:72:67:0d:ce:88:6a:65:d9:9e:6d:c0:f6:d0: 79:22:d3:f5:bf:b5:a7:69:96:de:0f:95:d2:20:6e:5b:b6:77: b5:8e:8f:8c:df:ba:89:43:9d:7e:fd:b0:c2:71:6b:e8:b9:22: 51:27:01:69:c8:72:e2:3e:b9:34:c3:e7:62:b5:5a:02:5a:ea: e0:bf:b0:dd:07:c3:1a:dd:df:c8:d0:72:64:36:b1:f8:a5:b7: 0d:91:b5:01:48:59:81:5b:04:20:0b:60:b8:c1:c5:77:8b:f6: f1:c5:da:22:1c:a5:cf:19:5a:de:01:a8:98:3f:71:d9:34:5c: f5:7d:af:89 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIUEpvG8TszmSCmsvAAroTjqGI2aacwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNDI2MDYxODAyWhcNMjYwNDI1MDYyMzAy WjAzMTEwLwYDVQQDEyhEOTVGODU1NDU5NTU2OUJFQTFFN0ZFOEU0REZEMDk1NkNE OTFDRkNCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfhr13v7hjZA fsapfwR5oQhn9I/SeaY+DbAyThghcwyOB9JRBfu6an+fvpLa0YW/vbs78mtoeeWc 771XW3c0UFadit/bCXuMytLJN0Fmc6KR/GKm33XeiRaYtY45F0xejR+wKf8vlOOA x60wOAiAEDoNQfFo1xCGWoH60jimEpjm/3o9IVEHPhZU7vmwYg+uGOZSwan2kXQB jfAa1AWN8qAVZQE2gVBmQhhCeVxHO7Z3sb1vnDRPqryTl8dwsL2nzXOTjHpMnNNl Dgz1QUGU76FgHpkFQh0UPPuEU1y2Jq7LPGzBACEPTwtut0PnyBCmX9F98E5nHLdK kpC9ZJnA+QIDAQABo4ICkDCCAowwHQYDVR0OBBYEFNlfhVRZVWm+oef+jk39CVbN kc/LMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAF1+OAwQAQDKhAwQA0cjnAwQA0cjx MA0GCSqGSIb3DQEBCwUAA4IBAQCcc+Ebfzd8oExI7XDCOGLJrQLRs2o9uzU8Nghv CYaltx0Nt2rKZnqWhCcCoaLWnfifEhywSBNe3cqU3TgP2PvP/QdTV8gLI2RdtyaX QHQn1EvE5qp1+xVeGsub8mXSoQNUE1InuU1i1WvDGd+RK95J6KJ+JEhplx3QH1Cw sjENYQL+UXJnDc6IamXZnm3A9tB5ItP1v7WnaZbeD5XSIG5btne1jo+M37qJQ51+ /bDCcWvouSJRJwFpyHLiPrk0w+ditVoCWurgv7DdB8Ma3d/I0HJkNrH4pbcNkbUB SFmBWwQgC2C4wcV3i/bxxdoiHKXPGVreAaiYP3HZNFz1fa+J -----END CERTIFICATE-----Generated at Mon May 5 11:18:14 2025 by rpki-client