$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: Q9OXXftf64RtgHev6WTeUNoj2Fsmsrtq7TSrAuyl5Ao= Subject key identifier: 17:8B:2C:98:67:F8:5E:6C:D0:CD:F5:C7:6E:EB:8B:6E:A7:6A:04:98 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 79B3F7AE4FC23B84A28685A33FD3312DB641D1BE Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa Signing time: Mon 04 May 2026 07:07:43 +0000 ROA not before: Mon 04 May 2026 07:02:43 +0000 ROA not after: Mon 03 May 2027 07:07:43 +0000 asID: 16509 IP address blocks: 157.254.2.0/23 maxlen: 24 157.254.141.0/24 maxlen: 24 157.254.169.0/24 maxlen: 24 157.254.200.0/22 maxlen: 22 157.254.215.0/24 maxlen: 24 157.254.217.0/24 maxlen: 24 157.254.224.0/24 maxlen: 24 157.254.239.0/24 maxlen: 24 192.231.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 14:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b3:f7:ae:4f:c2:3b:84:a2:86:85:a3:3f:d3:31:2d:b6:41:d1:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: May 4 07:02:43 2026 GMT Not After : May 3 07:07:43 2027 GMT Subject: CN=178B2C9867F85E6CD0CDF5C76EEB8B6EA76A0498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2e:72:7f:8c:9e:b9:1f:52:af:bd:4a:d9:50: ec:21:80:06:59:75:5d:40:7f:06:de:96:e1:09:ca: 6a:54:0f:c0:e1:d3:97:b5:8d:fe:ec:5d:44:86:18: 20:46:e9:d4:87:22:c9:23:3c:8a:25:8e:a2:9d:5d: ef:90:0c:67:3d:b6:ff:09:6d:67:4b:98:19:10:04: b0:0d:c8:42:9b:fc:a2:e0:10:82:24:fb:29:20:34: b6:5a:eb:5d:3b:af:80:98:d2:cf:e1:2f:69:b2:84: 19:df:7e:b1:82:ff:60:43:1f:89:2d:99:29:18:9f: c5:df:e2:b7:a9:70:91:a7:fc:22:a3:df:60:9e:7c: 93:cf:49:24:b8:62:9d:ba:fb:81:30:e2:2d:ff:7d: 3c:18:8f:0d:91:96:ee:4f:94:6c:60:4d:13:0c:20: 86:d9:01:bd:c5:cf:80:64:d8:ed:47:cd:28:25:51: 74:67:87:5e:f7:68:6d:f6:e6:e6:12:cd:df:23:ca: 8d:97:d9:85:d9:8a:55:c0:ba:18:da:5f:ff:dc:c7: 1f:e8:03:7b:70:3c:93:1e:c3:a0:e6:e9:67:8a:05: 62:03:57:83:5a:5d:82:05:ae:95:50:7f:26:e1:21: 5c:15:82:8a:61:4d:28:28:10:56:02:ea:f9:89:6e: 09:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8B:2C:98:67:F8:5E:6C:D0:CD:F5:C7:6E:EB:8B:6E:A7:6A:04:98 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.2.0/23 157.254.141.0/24 157.254.169.0/24 157.254.200.0/22 157.254.215.0/24 157.254.217.0/24 157.254.224.0/24 157.254.239.0/24 192.231.16.0/24 Signature Algorithm: sha256WithRSAEncryption bc:69:9a:fa:81:c0:aa:ad:cc:f1:9b:ab:eb:8e:d8:26:04:ab: d2:86:89:f8:3a:11:64:3f:42:78:32:c4:e3:24:5d:fd:a8:1d: d9:3b:f5:7d:6d:2e:96:3f:82:37:ae:cc:a8:45:d0:ce:88:1b: 5b:1b:c6:3e:a4:f2:4c:f6:c3:f5:7c:d0:c2:f3:40:ed:cb:25: 20:87:4e:09:65:84:ee:69:99:34:42:bc:c8:da:fa:63:d6:03: 06:d5:33:c9:41:2e:fc:85:3b:13:b3:7e:3a:19:56:53:67:58: 0e:0e:87:b4:de:a4:67:e9:fd:6f:fc:81:c7:9f:dc:21:51:c6: 19:08:fc:a0:f9:75:5a:91:b0:5f:cf:1a:c7:39:7b:f8:97:4a: ce:ec:e9:e9:3a:b3:07:27:f7:be:9b:44:eb:9f:4c:be:05:d9: 59:4a:49:23:ec:43:3b:2a:d3:69:64:cc:2b:6b:b6:c4:00:fd: 54:7e:a6:20:8f:ab:be:10:69:1a:cf:09:f9:c6:cf:e5:34:7a: d9:31:07:a9:ac:06:5e:fd:b8:f5:34:e3:3e:76:fd:f3:f4:63: b7:6d:b1:74:bb:d4:41:a2:c1:8c:e3:fd:bc:92:ef:4f:00:61: db:bb:ab:ae:14:07:48:6a:97:8f:d4:39:25:36:cb:09:9d:40: 03:ea:e0:f8 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgIUebP3rk/CO4SihoWjP9MxLbZB0b4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNTA0MDcwMjQzWhcNMjcwNTAzMDcwNzQz WjAzMTEwLwYDVQQDEygxNzhCMkM5ODY3Rjg1RTZDRDBDREY1Qzc2RUVCOEI2RUE3 NkEwNDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3C5yf4yeuR9S r71K2VDsIYAGWXVdQH8G3pbhCcpqVA/A4dOXtY3+7F1EhhggRunUhyLJIzyKJY6i nV3vkAxnPbb/CW1nS5gZEASwDchCm/yi4BCCJPspIDS2WutdO6+AmNLP4S9psoQZ 336xgv9gQx+JLZkpGJ/F3+K3qXCRp/wio99gnnyTz0kkuGKduvuBMOIt/308GI8N kZbuT5RsYE0TDCCG2QG9xc+AZNjtR80oJVF0Z4de92ht9ubmEs3fI8qNl9mF2YpV wLoY2l//3Mcf6AN7cDyTHsOg5ulnigViA1eDWl2CBa6VUH8m4SFcFYKKYU0oKBBW Aur5iW4JXwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFBeLLJhn+F5s0M31x27ri26n agSYMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME8G CCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBnf4CAwQAnf6NAwQAnf6pAwQCnf7I AwQAnf7XAwQAnf7ZAwQAnf7gAwQAnf7vAwQAwOcQMA0GCSqGSIb3DQEBCwUAA4IB AQC8aZr6gcCqrczxm6vrjtgmBKvShon4OhFkP0J4MsTjJF39qB3ZO/V9bS6WP4I3 rsyoRdDOiBtbG8Y+pPJM9sP1fNDC80DtyyUgh04JZYTuaZk0QrzI2vpj1gMG1TPJ QS78hTsTs346GVZTZ1gODoe03qRn6f1v/IHHn9whUcYZCPyg+XVakbBfzxrHOXv4 l0rO7OnpOrMHJ/e+m0Trn0y+BdlZSkkj7EM7KtNpZMwra7bEAP1UfqYgj6u+EGka zwn5xs/lNHrZMQeprAZe/bj1NOM+dv3z9GO3bbF0u9RBosGM4/28ku9PAGHbu6uu FAdIapeP1DklNssJnUAD6uD4 -----END CERTIFICATE-----Generated at Tue May 12 23:01:56 2026 by rpki-client