$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: FBjRuXll/5YEQAha4dcwA7912wQjmABJKnAnWvR+hDk= Subject key identifier: B8:6E:6E:74:B9:7A:3D:6E:15:A2:9E:73:FA:21:95:C4:29:FD:45:AC Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 1FDFBEB6A8B5A38D3B096A7883F3B465162F5BB4 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa Signing time: Tue 24 Mar 2026 02:25:19 +0000 ROA not before: Tue 24 Mar 2026 02:20:19 +0000 ROA not after: Tue 23 Mar 2027 02:25:19 +0000 asID: 16509 IP address blocks: 157.254.2.0/23 maxlen: 24 157.254.141.0/24 maxlen: 24 157.254.169.0/24 maxlen: 24 157.254.200.0/22 maxlen: 22 157.254.215.0/24 maxlen: 24 157.254.217.0/24 maxlen: 24 157.254.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 07:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:df:be:b6:a8:b5:a3:8d:3b:09:6a:78:83:f3:b4:65:16:2f:5b:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Mar 24 02:20:19 2026 GMT Not After : Mar 23 02:25:19 2027 GMT Subject: CN=B86E6E74B97A3D6E15A29E73FA2195C429FD45AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3f:a2:9b:10:89:76:ab:6b:99:eb:82:2e:5a: a5:48:b0:08:17:d1:6f:78:44:6d:35:74:61:8c:cc: 2c:9b:5f:f6:5f:8e:b1:e5:c1:6d:f5:c2:3c:d5:1d: f9:22:a2:87:a3:6d:4b:ee:89:09:61:f6:97:e4:20: 8b:9d:c6:07:5b:66:8b:17:4a:ae:26:81:a0:50:9e: 27:bf:00:ba:10:c3:ba:9c:b0:17:20:1b:26:d2:12: 87:d8:85:cb:0b:1b:0c:e7:82:bc:20:c2:a0:0d:43: 63:05:96:9e:2d:0c:f7:86:5f:61:f5:13:ba:70:52: 7b:86:62:33:a8:5c:73:0d:8a:33:df:08:4c:36:2d: ff:07:7c:19:f3:76:dd:3b:d6:72:cf:7f:49:ce:fb: f3:ca:45:ee:5c:cf:10:e1:7e:4f:e2:bc:ce:e5:e3: 9d:ad:78:79:5f:96:30:af:23:0c:04:4e:ae:eb:9c: b3:dd:2c:80:94:16:c8:76:c7:cc:6c:d0:9b:a0:bb: eb:b0:3b:4b:3e:60:53:35:75:86:09:4a:1d:46:1c: 0e:0f:f7:a1:49:9c:35:10:0d:9b:94:8a:18:27:eb: 81:52:47:e5:2d:9b:21:8a:bf:35:4e:29:f4:92:4c: 73:5d:95:c5:27:c4:ca:9a:b6:8b:61:57:e2:c1:f2: 8d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6E:6E:74:B9:7A:3D:6E:15:A2:9E:73:FA:21:95:C4:29:FD:45:AC X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.2.0/23 157.254.141.0/24 157.254.169.0/24 157.254.200.0/22 157.254.215.0/24 157.254.217.0/24 157.254.239.0/24 Signature Algorithm: sha256WithRSAEncryption 85:28:05:90:6e:f7:13:92:3d:81:62:fb:4a:f1:93:f4:15:b8: 5a:74:75:6c:ce:e9:04:b2:c2:9c:18:de:46:30:10:e9:46:65: 14:22:dd:3b:88:31:72:8f:3e:ba:7a:84:f8:4d:73:9e:eb:11: 0f:74:39:44:49:c8:09:08:e7:b3:28:2c:26:5d:66:ad:09:4a: 84:ec:18:3c:19:f5:d6:9c:f1:1f:09:da:96:f5:b5:8d:88:ff: d7:12:4e:fe:58:83:ed:38:d7:9a:8d:8a:b3:aa:26:86:11:b5: 6e:81:bf:20:03:d3:d5:28:04:4f:16:2c:92:e6:07:5a:4d:09: a8:f2:3d:2d:bb:ae:47:ca:10:f2:8c:d0:e8:c7:76:2c:fa:4f: b2:03:c2:fd:e5:d2:a4:55:a0:1f:d3:7f:19:7a:7a:cd:68:a6: 14:94:88:bc:d7:91:4e:6a:5a:50:21:18:42:10:ef:98:3f:7a: 7a:80:e1:9c:d4:cc:6d:e9:13:7b:1b:42:d6:4e:05:f9:e8:d6: 34:21:ee:60:72:b3:ad:7e:2f:c4:e0:c5:3d:02:d7:ab:ef:6c: 85:cd:ef:ba:6b:04:df:e7:bd:a5:86:23:82:a8:8f:0e:41:4e: f5:10:f4:b1:87:8a:aa:62:4f:61:15:2d:69:57:a2:d0:fe:3c: 06:e4:27:b8 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIUH9++tqi1o407CWp4g/O0ZRYvW7QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwMzI0MDIyMDE5WhcNMjcwMzIzMDIyNTE5 WjAzMTEwLwYDVQQDEyhCODZFNkU3NEI5N0EzRDZFMTVBMjlFNzNGQTIxOTVDNDI5 RkQ0NUFDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT+imxCJdqtr meuCLlqlSLAIF9FveERtNXRhjMwsm1/2X46x5cFt9cI81R35IqKHo21L7okJYfaX 5CCLncYHW2aLF0quJoGgUJ4nvwC6EMO6nLAXIBsm0hKH2IXLCxsM54K8IMKgDUNj BZaeLQz3hl9h9RO6cFJ7hmIzqFxzDYoz3whMNi3/B3wZ83bdO9Zyz39JzvvzykXu XM8Q4X5P4rzO5eOdrXh5X5YwryMMBE6u65yz3SyAlBbIdsfMbNCboLvrsDtLPmBT NXWGCUodRhwOD/ehSZw1EA2blIoYJ+uBUkflLZshir81Tin0kkxzXZXFJ8TKmraL YVfiwfKN7wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLhubnS5ej1uFaKec/ohlcQp /UWsMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMG CCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBnf4CAwQAnf6NAwQAnf6pAwQCnf7I AwQAnf7XAwQAnf7ZAwQAnf7vMA0GCSqGSIb3DQEBCwUAA4IBAQCFKAWQbvcTkj2B YvtK8ZP0FbhadHVszukEssKcGN5GMBDpRmUUIt07iDFyjz66eoT4TXOe6xEPdDlE ScgJCOezKCwmXWatCUqE7Bg8GfXWnPEfCdqW9bWNiP/XEk7+WIPtONeajYqzqiaG EbVugb8gA9PVKARPFiyS5gdaTQmo8j0tu65HyhDyjNDox3Ys+k+yA8L95dKkVaAf 038ZenrNaKYUlIi815FOalpQIRhCEO+YP3p6gOGc1Mxt6RN7G0LWTgX56NY0Ie5g crOtfi/E4MU9Ater72yFze+6awTf572lhiOCqI8OQU71EPSxh4qqYk9hFS1pV6LQ /jwG5Ce4 -----END CERTIFICATE-----Generated at Thu Mar 26 10:24:24 2026 by rpki-client