$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: jnYijxdHYVc0kvjvCh95YnJVI8FySzmKOfzkKbjjrxw= Subject key identifier: 1D:D6:70:E9:2F:96:3E:F8:E8:7F:85:B2:66:F6:3F:61:B7:BE:95:D2 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 62230105590BAA95313D1779124B30268A5CC54D Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa Signing time: Tue 07 Oct 2025 00:10:04 +0000 ROA not before: Tue 07 Oct 2025 00:05:04 +0000 ROA not after: Tue 06 Oct 2026 00:10:04 +0000 asID: 16509 IP address blocks: 23.95.142.0/24 maxlen: 24 64.50.161.0/24 maxlen: 24 64.50.183.0/24 maxlen: 24 67.210.104.0/24 maxlen: 24 209.200.231.0/24 maxlen: 24 209.200.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 15:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:23:01:05:59:0b:aa:95:31:3d:17:79:12:4b:30:26:8a:5c:c5:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Oct 7 00:05:04 2025 GMT Not After : Oct 6 00:10:04 2026 GMT Subject: CN=1DD670E92F963EF8E87F85B266F63F61B7BE95D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:12:7f:2e:fb:8c:fe:85:32:31:35:c2:15:ad: f1:58:60:34:b6:de:1a:5c:64:89:31:20:3a:01:05: 91:5c:dc:a5:11:87:dd:68:ce:c6:fa:26:83:9f:c2: fe:24:56:4b:fc:17:4a:51:c9:4f:87:b7:df:b0:13: 08:f7:3d:2a:49:3f:67:55:d1:ed:fe:20:72:01:c0: 1e:1a:15:de:9e:bc:53:fd:85:8f:f3:eb:9b:88:68: 48:ac:21:eb:2e:a0:85:91:f1:8e:51:f5:3b:9b:5a: 6c:0e:27:8a:3c:14:37:77:8b:bf:d5:13:fe:c5:c8: eb:a7:30:90:5d:87:c7:08:57:de:fd:85:85:2a:c1: 6f:e0:dc:1b:4e:9d:f3:83:4f:cb:b0:ac:a0:63:a9: d0:2e:d3:38:37:28:64:2c:38:39:8e:89:b5:7f:1b: 0e:46:fc:09:c6:6b:ab:2d:7c:f1:46:aa:22:fe:75: ec:2b:be:49:3c:1a:b7:88:7f:cd:5b:21:21:67:fc: a2:de:5c:44:00:b0:8e:f9:4d:62:08:97:66:07:4b: 83:f8:b4:42:fb:c6:c3:a1:6d:38:1b:01:b6:84:0c: 87:c4:f7:48:47:ad:e3:cc:bd:38:c2:09:8c:47:5e: 57:99:01:81:a3:b7:c7:ec:8e:95:e7:37:2c:b9:05: 68:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D6:70:E9:2F:96:3E:F8:E8:7F:85:B2:66:F6:3F:61:B7:BE:95:D2 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.142.0/24 64.50.161.0/24 64.50.183.0/24 67.210.104.0/24 209.200.231.0/24 209.200.241.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:36:e3:cc:38:3c:c5:b5:eb:d2:06:af:d9:27:d1:d4:2f:83: e9:b5:cd:e8:3f:a8:10:ef:21:cf:7a:ff:eb:1f:c0:54:cf:11: 73:99:59:ec:dd:07:2e:f0:15:63:df:d0:d2:5f:4c:d5:3f:d3: 53:69:e9:41:96:74:68:06:12:09:5e:d4:37:e5:52:45:c7:ee: 4e:85:52:77:ed:11:d8:3e:7c:06:66:a6:b5:3c:a8:cd:1e:1b: ac:03:cb:37:dd:ff:e4:f0:a6:a4:82:d4:05:a6:9f:f0:53:22: 57:b1:63:84:87:f5:48:49:f2:d4:73:50:49:da:cc:dd:a7:8a: d7:c2:64:06:7b:d6:01:5e:ab:6b:ba:76:1e:86:60:ab:1f:69: 5d:9a:4a:a1:40:75:ee:8a:48:89:86:8a:2b:bb:5f:1c:9a:db: e0:cd:59:07:f9:05:50:7e:01:74:09:c2:40:19:12:dc:d8:38: 75:6b:8a:da:9f:a6:02:3d:09:9c:94:92:82:14:d6:d0:57:4b: 07:dd:79:45:70:6b:59:fb:0a:ee:30:7b:07:0e:8a:3d:00:2b: 58:6a:38:e0:ab:40:b9:a8:36:83:8a:11:0d:15:2d:4f:0e:ec: a4:99:b8:4d:b5:d7:04:ab:b7:ff:6f:b9:8e:f9:a4:58:f8:39: 59:06:92:4c -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUYiMBBVkLqpUxPRd5EkswJopcxU0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUxMDA3MDAwNTA0WhcNMjYxMDA2MDAxMDA0 WjAzMTEwLwYDVQQDEygxREQ2NzBFOTJGOTYzRUY4RTg3Rjg1QjI2NkY2M0Y2MUI3 QkU5NUQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhJ/LvuM/oUy MTXCFa3xWGA0tt4aXGSJMSA6AQWRXNylEYfdaM7G+iaDn8L+JFZL/BdKUclPh7ff sBMI9z0qST9nVdHt/iByAcAeGhXenrxT/YWP8+ubiGhIrCHrLqCFkfGOUfU7m1ps DieKPBQ3d4u/1RP+xcjrpzCQXYfHCFfe/YWFKsFv4NwbTp3zg0/LsKygY6nQLtM4 NyhkLDg5jom1fxsORvwJxmurLXzxRqoi/nXsK75JPBq3iH/NWyEhZ/yi3lxEALCO +U1iCJdmB0uD+LRC+8bDoW04GwG2hAyHxPdIR63jzL04wgmMR15XmQGBo7fH7I6V 5zcsuQVoVQIDAQABo4ICnDCCApgwHQYDVR0OBBYEFB3WcOkvlj746H+Fsmb2P2G3 vpXSMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0G CCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAF1+OAwQAQDKhAwQAQDK3AwQAQ9Jo AwQA0cjnAwQA0cjxMA0GCSqGSIb3DQEBCwUAA4IBAQBeNuPMODzFtevSBq/ZJ9HU L4Pptc3oP6gQ7yHPev/rH8BUzxFzmVns3Qcu8BVj39DSX0zVP9NTaelBlnRoBhIJ XtQ35VJFx+5OhVJ37RHYPnwGZqa1PKjNHhusA8s33f/k8KakgtQFpp/wUyJXsWOE h/VISfLUc1BJ2szdp4rXwmQGe9YBXqtrunYehmCrH2ldmkqhQHXuikiJhooru18c mtvgzVkH+QVQfgF0CcJAGRLc2Dh1a4ran6YCPQmclJKCFNbQV0sH3XlFcGtZ+wru MHsHDoo9ACtYajjgq0C5qDaDihENFS1PDuykmbhNtdcEq7f/b7mO+aRY+DlZBpJM -----END CERTIFICATE-----Generated at Sun Oct 19 22:32:05 2025 by rpki-client