$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: ZDwbYULxtb5I9daJMrlGHJXVkCIAlmydRXIx8iBjm4w= Subject key identifier: 6A:D1:0E:EC:2D:B6:FB:68:D1:4A:11:E4:9E:20:60:47:9E:03:58:DC Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 172D07E532790512DCFAD7AA76AD27276C60AE07 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa Signing time: Mon 12 Oct 2026 00:07:02 +0000 ROA not before: Mon 12 Oct 2026 00:02:02 +0000 ROA not after: Mon 11 Oct 2027 00:07:02 +0000 asID: 16509 IP address blocks: 40.27.16.0/23 maxlen: 24 40.183.0.0/18 maxlen: 24 40.183.80.0/22 maxlen: 24 40.183.100.0/24 maxlen: 24 40.223.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:2d:07:e5:32:79:05:12:dc:fa:d7:aa:76:ad:27:27:6c:60:ae:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Oct 12 00:02:02 2026 GMT Not After : Oct 11 00:07:02 2027 GMT Subject: CN=6AD10EEC2DB6FB68D14A11E49E2060479E0358DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3b:93:54:91:b4:0a:d2:20:04:b4:2a:8a:9d: 1a:62:57:1d:a5:d8:e0:98:63:9e:cc:41:71:a9:1b: 52:30:26:e6:c0:3e:ce:26:60:9b:59:71:1e:41:f9: 2a:94:59:d8:0d:b0:c0:e9:cd:fa:c6:b5:b7:47:a1: 77:f4:ec:b8:92:95:d1:a9:65:e8:b5:2c:75:15:21: 41:0f:f9:c5:1e:c4:9a:a0:f8:20:c1:1a:8b:2b:0d: 63:a0:7d:f1:df:6b:93:90:79:09:bb:66:ed:54:b6: 5c:de:73:d3:d3:18:5b:1c:43:8a:7b:41:fc:95:d0: a9:27:32:c6:17:f9:ad:0d:7f:6b:65:a2:bf:21:dd: 23:f2:15:a2:7f:12:43:ad:cf:67:a6:0e:5d:4d:e9: a1:4a:74:2f:d0:78:b1:cc:6b:7d:a0:72:85:5e:7d: df:75:5a:cc:4b:d8:c4:b7:bd:af:15:92:d7:2f:e7: e0:e7:c5:78:35:f7:16:cc:d0:f7:e6:b8:a6:9c:14: 9a:4b:c3:8e:e2:73:94:f0:41:06:89:a1:82:14:a6: 7c:08:d0:fc:ea:1b:05:68:3d:82:a7:18:5f:9a:c0: 73:25:56:58:3a:dc:72:22:f6:9e:8a:02:df:a4:ed: 2b:28:e5:53:86:4c:bc:46:a0:bc:18:28:a2:90:54: 35:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D1:0E:EC:2D:B6:FB:68:D1:4A:11:E4:9E:20:60:47:9E:03:58:DC X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.16.0/23 40.183.0.0/18 40.183.80.0/22 40.183.100.0/24 40.223.23.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:50:2f:20:96:95:e2:0b:dc:3c:0f:97:2e:b6:07:0c:eb:f4: b3:a5:13:c8:e9:fe:8f:09:be:90:4e:f3:b2:87:81:d8:84:c0: 5a:21:2e:0d:bd:ae:0b:ba:96:bf:7c:0b:b3:c0:c4:81:ed:92: 4e:90:fa:8a:db:e8:6e:91:0d:c0:40:a7:54:41:92:e9:5d:47: 51:1a:87:d7:f1:25:38:30:8c:09:c5:76:42:cb:67:3d:4c:20: 34:7d:1c:5a:70:aa:da:17:3e:ea:de:ff:3c:66:ba:b5:df:5e: d9:da:93:7c:0f:d0:79:8a:a7:b8:e4:a0:f6:89:68:8f:2f:07: c4:e6:b3:31:4c:55:48:0e:86:7d:80:54:6c:ef:70:27:e3:e0: a3:c4:5e:b8:56:e5:b0:9f:fa:da:99:c3:89:d3:bb:71:f5:a3: 10:dd:af:27:c2:fe:a6:87:b8:2d:fc:d6:eb:f8:65:29:4a:4c: 2d:a2:56:67:7f:1b:ae:0c:4c:9a:47:41:14:11:92:39:f7:76: bc:72:be:7d:0f:e5:07:35:da:a5:cc:ef:ba:5f:87:da:ea:cd: 70:fb:ef:e1:db:e3:41:91:94:4b:80:35:42:b9:a9:14:aa:f4: f8:96:d0:be:df:5f:75:55:29:9a:ab:1d:79:2a:bf:35:87:ff: ab:35:b3:00 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUFy0H5TJ5BRLc+teqdq0nJ2xgrgcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYxMDEyMDAwMjAyWhcNMjcxMDExMDAwNzAy WjAzMTEwLwYDVQQDEyg2QUQxMEVFQzJEQjZGQjY4RDE0QTExRTQ5RTIwNjA0NzlF MDM1OERDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TuTVJG0CtIg BLQqip0aYlcdpdjgmGOezEFxqRtSMCbmwD7OJmCbWXEeQfkqlFnYDbDA6c36xrW3 R6F39Oy4kpXRqWXotSx1FSFBD/nFHsSaoPggwRqLKw1joH3x32uTkHkJu2btVLZc 3nPT0xhbHEOKe0H8ldCpJzLGF/mtDX9rZaK/Id0j8hWifxJDrc9npg5dTemhSnQv 0HixzGt9oHKFXn3fdVrMS9jEt72vFZLXL+fg58V4NfcWzND35rimnBSaS8OO4nOU 8EEGiaGCFKZ8CND86hsFaD2CpxhfmsBzJVZYOtxyIvaeigLfpO0rKOVThky8RqC8 GCiikFQ1nwIDAQABo4ICljCCApIwHQYDVR0OBBYEFGrRDuwttvto0UoR5J4gYEee A1jcMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBKBsQAwQGKLcAAwQCKLdQAwQAKLdk AwQAKN8XMA0GCSqGSIb3DQEBCwUAA4IBAQBaUC8glpXiC9w8D5cutgcM6/SzpRPI 6f6PCb6QTvOyh4HYhMBaIS4Nva4Lupa/fAuzwMSB7ZJOkPqK2+hukQ3AQKdUQZLp XUdRGofX8SU4MIwJxXZCy2c9TCA0fRxacKraFz7q3v88Zrq1317Z2pN8D9B5iqe4 5KD2iWiPLwfE5rMxTFVIDoZ9gFRs73An4+CjxF64VuWwn/ramcOJ07tx9aMQ3a8n wv6mh7gt/Nbr+GUpSkwtolZnfxuuDEyaR0EUEZI593a8cr59D+UHNdqlzO+6X4fa 6s1w++/h2+NBkZRLgDVCuakUqvT4ltC+3191VSmaqx15Kr81h/+rNbMA -----END CERTIFICATE-----Generated at Tue Oct 20 06:34:24 2026 by rpki-client