$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: g64JrsxPIP84/qNKgDEDCj6HHmJ+sNHLBv6fcfFikSw= Subject key identifier: 75:36:F2:0D:A8:60:96:86:C6:30:03:9D:A2:9B:CA:C1:3F:34:DA:DC Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4 Certificate serial: 4A95AD65945C43B4BCE817ED781005C600893B97 Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS16509.roa Signing time: Sat 23 Aug 2025 00:03:21 +0000 ROA not before: Fri 22 Aug 2025 23:58:21 +0000 ROA not after: Sat 22 Aug 2026 00:03:21 +0000 asID: 16509 IP address blocks: 64.202.96.0/24 maxlen: 24 66.225.239.0/24 maxlen: 24 204.93.164.0/24 maxlen: 24 204.93.186.0/24 maxlen: 24 204.93.201.0/24 maxlen: 24 205.234.156.0/23 maxlen: 24 205.234.204.0/24 maxlen: 24 205.234.244.0/24 maxlen: 24 216.246.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 02:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:95:ad:65:94:5c:43:b4:bc:e8:17:ed:78:10:05:c6:00:89:3b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4 Validity Not Before: Aug 22 23:58:21 2025 GMT Not After : Aug 22 00:03:21 2026 GMT Subject: CN=7536F20DA8609686C630039DA29BCAC13F34DADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3e:9b:4d:b5:3a:90:69:fc:ca:3b:f8:a5:b8: 53:f5:88:33:2f:d7:7b:95:fe:09:ce:95:a6:8b:a4: 46:52:e0:74:72:17:b3:64:a4:0b:6e:2d:5a:d3:8d: 33:4d:86:ee:0e:7e:0d:79:9e:ea:78:8c:3d:7a:b5: 8e:b8:8c:6b:e3:87:8f:f6:6f:40:07:fb:de:69:a1: a4:73:52:02:e8:52:12:ab:02:a3:b2:bc:56:ba:b7: af:82:b6:f7:7a:46:66:4f:a1:b1:f8:2f:3a:dc:18: 0b:ba:41:f9:b8:ff:36:ca:34:b4:9f:80:c4:73:f6: 5e:c5:4b:6c:6d:ba:86:5b:f7:ae:54:8a:fd:bf:3d: 08:ed:6b:13:50:1f:a1:7f:4c:bb:18:f2:c7:73:cb: 6d:de:c9:0d:2c:d8:71:f9:1b:da:ad:44:d3:e1:a7: b2:99:7a:c5:3b:c6:2c:9a:b7:19:58:51:07:d3:2c: a5:00:5a:49:aa:6a:93:51:19:4b:29:31:e1:e8:05: 59:5e:ef:72:a3:71:c1:eb:8d:46:29:8b:4c:f2:03: 99:d2:9a:42:ac:f1:39:38:5a:9a:58:bf:e3:66:51: 2d:89:5c:26:9a:19:80:ea:c5:7f:fc:bd:a6:82:ce: 93:21:2f:06:46:5e:85:6f:70:8c:c7:00:41:ff:db: 96:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:36:F2:0D:A8:60:96:86:C6:30:03:9D:A2:9B:CA:C1:3F:34:DA:DC X509v3 Authority Key Identifier: keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.202.96.0/24 66.225.239.0/24 204.93.164.0/24 204.93.186.0/24 204.93.201.0/24 205.234.156.0/23 205.234.204.0/24 205.234.244.0/24 216.246.96.0/24 Signature Algorithm: sha256WithRSAEncryption 99:fd:cb:0d:32:a2:e4:35:39:52:d7:db:8d:f6:20:a4:cc:25: c3:0f:b0:31:51:b1:a8:7c:6d:4c:03:85:f9:84:ce:09:a1:79: 82:42:16:02:e0:f5:e5:23:97:e4:ab:d9:f5:12:e2:83:5c:df: 0f:c7:cc:6f:32:7a:8f:a3:36:35:0c:bc:9b:6d:5c:70:c6:e2: 0e:43:0d:6a:67:66:64:f5:8a:f0:cf:7b:58:d0:df:ea:d1:ba: 94:a7:70:6e:6a:ae:d1:ad:72:6b:e5:68:24:54:ab:a0:69:d7: 67:b2:9a:8b:80:e7:fd:1a:79:b5:6e:46:a7:fc:76:a2:8f:8c: 99:40:cc:6a:0d:22:85:f8:f6:7d:c7:5c:f8:cd:15:7f:a5:a8: 8b:04:0f:53:4c:06:51:e2:b9:6e:28:c7:ab:00:ed:72:6f:af: ea:cf:3c:8e:31:74:1c:e4:b5:5a:aa:11:65:1f:3c:8a:79:86: 58:d4:a1:55:11:af:4b:31:55:52:21:fe:0f:88:2e:be:4a:00: 1b:30:f6:08:ad:75:6e:31:76:96:f2:ce:0a:ad:e6:94:f1:fa: cd:0e:1e:ec:09:f4:27:7f:a2:36:75:92:f0:17:13:24:7c:c4: 86:e0:c7:f7:0c:63:b4:d1:c9:46:37:d5:1e:31:ef:b2:de:98: d8:f5:32:5b -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgIUSpWtZZRcQ7S86BfteBAFxgCJO5cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjUwODIyMjM1ODIxWhcNMjYwODIyMDAwMzIx WjAzMTEwLwYDVQQDEyg3NTM2RjIwREE4NjA5Njg2QzYzMDAzOURBMjlCQ0FDMTNG MzREQURDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj6bTbU6kGn8 yjv4pbhT9YgzL9d7lf4JzpWmi6RGUuB0chezZKQLbi1a040zTYbuDn4NeZ7qeIw9 erWOuIxr44eP9m9AB/veaaGkc1IC6FISqwKjsrxWurevgrb3ekZmT6Gx+C863BgL ukH5uP82yjS0n4DEc/ZexUtsbbqGW/euVIr9vz0I7WsTUB+hf0y7GPLHc8tt3skN LNhx+RvarUTT4aeymXrFO8YsmrcZWFEH0yylAFpJqmqTURlLKTHh6AVZXu9yo3HB 641GKYtM8gOZ0ppCrPE5OFqaWL/jZlEtiVwmmhmA6sV//L2mgs6TIS8GRl6Fb3CM xwBB/9uWBQIDAQABo4ICrjCCAqowHQYDVR0OBBYEFHU28g2oYJaGxjADnaKbysE/ NNrcMB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi MzQ2MmEvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME8G CCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAQMpgAwQAQuHvAwQAzF2kAwQAzF26 AwQAzF3JAwQBzeqcAwQAzerMAwQAzer0AwQA2PZgMA0GCSqGSIb3DQEBCwUAA4IB AQCZ/csNMqLkNTlS19uN9iCkzCXDD7AxUbGofG1MA4X5hM4JoXmCQhYC4PXlI5fk q9n1EuKDXN8Px8xvMnqPozY1DLybbVxwxuIOQw1qZ2Zk9Yrwz3tY0N/q0bqUp3Bu aq7RrXJr5WgkVKugaddnspqLgOf9Gnm1bkan/Haij4yZQMxqDSKF+PZ9x1z4zRV/ paiLBA9TTAZR4rluKMerAO1yb6/qzzyOMXQc5LVaqhFlHzyKeYZY1KFVEa9LMVVS If4PiC6+SgAbMPYIrXVuMXaW8s4KreaU8frNDh7sCfQnf6I2dZLwFxMkfMSG4Mf3 DGO00clGN9UeMe+y3pjY9TJb -----END CERTIFICATE-----Generated at Sat Aug 23 06:45:44 2025 by rpki-client