$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: VlMapSnaY0mKklWG+vRbEQH98PpxuHh4jGZf9wDgqCw= Subject key identifier: 8C:2C:FA:45:6A:9A:39:D7:61:06:12:D3:95:F0:EA:B0:74:C5:75:C2 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 214E67C8864D68F15990AF4CBBFA7BD2A9780F48 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa Signing time: Mon 25 Aug 2025 03:25:49 +0000 ROA not before: Mon 25 Aug 2025 03:20:49 +0000 ROA not after: Mon 24 Aug 2026 03:25:49 +0000 asID: 16509 IP address blocks: 40.183.0.0/18 maxlen: 24 40.183.80.0/22 maxlen: 24 40.183.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 08:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:4e:67:c8:86:4d:68:f1:59:90:af:4c:bb:fa:7b:d2:a9:78:0f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Aug 25 03:20:49 2025 GMT Not After : Aug 24 03:25:49 2026 GMT Subject: CN=8C2CFA456A9A39D7610612D395F0EAB074C575C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2b:2a:88:86:c8:9b:4a:37:94:3b:c3:4c:93: 6a:8b:6e:ed:87:8d:cb:2f:fb:50:37:e6:69:87:5b: 17:1c:fd:82:ae:0e:c6:55:d3:bc:50:19:26:6e:c6: c9:d6:7c:9d:09:d6:79:f8:86:33:5e:ee:21:63:97: 83:1a:a9:6d:1b:cd:5d:82:ff:f5:1e:8a:e3:34:bf: 70:68:ab:8b:47:42:0a:68:cf:fa:3c:6d:48:1f:c2: 45:f3:4b:94:12:c8:1c:c1:03:b0:b9:f0:68:1c:d0: 4c:4f:c3:58:fb:c5:0d:13:69:c7:8f:d3:9b:55:3c: 43:1e:54:87:22:3b:c4:a5:fc:34:be:87:62:b9:14: dd:04:5c:c6:45:a0:dc:5e:e4:03:45:94:25:e7:f1: e2:bb:21:04:20:e5:f8:b2:13:91:5a:3f:d3:ad:5e: ac:35:52:cc:21:27:1d:d1:19:30:88:6a:57:99:0a: ab:74:1d:72:cd:f8:32:6a:c4:b3:ba:06:a5:18:dd: 85:42:67:3f:54:4c:92:8e:e3:a8:a1:4a:35:9e:49: bb:c9:b3:f4:29:a6:ae:14:72:16:4a:82:10:7c:52: c1:b8:95:7c:06:51:31:a9:51:05:72:21:35:ad:05: 89:b8:0d:b9:d7:27:f7:f8:e2:ab:f4:e6:1f:bf:25: dd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2C:FA:45:6A:9A:39:D7:61:06:12:D3:95:F0:EA:B0:74:C5:75:C2 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.183.0.0/18 40.183.80.0/22 40.183.100.0/24 Signature Algorithm: sha256WithRSAEncryption 15:72:41:45:32:7f:d8:f2:48:bd:bc:ec:76:1d:10:1c:b1:e7: 00:04:21:21:74:83:ed:33:79:bb:86:c5:70:69:5b:f1:a0:e8: 7a:dd:fe:de:fc:43:cc:fc:7c:55:f9:5a:2a:bd:99:47:44:ee: fa:9e:dc:90:14:48:aa:1d:d0:b0:61:b6:33:cf:c2:e8:a8:aa: fe:17:fd:1a:0f:86:6e:5c:78:8e:ca:e7:d4:7d:f4:aa:32:f2: 6f:7e:6d:5e:2d:4d:01:4f:fe:4c:1e:9b:a9:a9:2b:a5:f6:3d: d7:77:8c:af:59:14:a6:c9:37:cb:11:60:cd:3a:1e:39:77:1e: 8d:14:d1:4b:39:44:ec:44:99:d3:ac:94:c2:40:66:09:73:4c: d1:c2:58:56:9b:b4:05:98:8f:c8:2a:f1:7b:9c:40:ec:79:bb: 11:a7:52:25:3d:3b:eb:d2:a0:45:d2:3b:0c:c1:b0:16:25:92: 79:e9:2f:2a:12:4b:07:75:fc:75:e4:5e:7b:aa:35:79:e3:07: 0d:e0:3a:8f:15:35:a5:ca:b1:a8:d6:cd:08:8a:8c:f5:ac:dd: 6d:b9:04:29:57:30:f9:58:22:d9:4d:52:e3:be:a7:7f:6c:2c: 67:ab:1b:ce:a9:7f:00:52:c6:d4:cf:b1:9e:8f:4b:bc:22:b6: 05:8a:c8:76 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUIU5nyIZNaPFZkK9Mu/p70ql4D0gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwODI1MDMyMDQ5WhcNMjYwODI0MDMyNTQ5 WjAzMTEwLwYDVQQDEyg4QzJDRkE0NTZBOUEzOUQ3NjEwNjEyRDM5NUYwRUFCMDc0 QzU3NUMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CsqiIbIm0o3 lDvDTJNqi27th43LL/tQN+Zph1sXHP2Crg7GVdO8UBkmbsbJ1nydCdZ5+IYzXu4h Y5eDGqltG81dgv/1HorjNL9waKuLR0IKaM/6PG1IH8JF80uUEsgcwQOwufBoHNBM T8NY+8UNE2nHj9ObVTxDHlSHIjvEpfw0vodiuRTdBFzGRaDcXuQDRZQl5/HiuyEE IOX4shORWj/TrV6sNVLMIScd0RkwiGpXmQqrdB1yzfgyasSzugalGN2FQmc/VEyS juOooUo1nkm7ybP0KaauFHIWSoIQfFLBuJV8BlExqVEFciE1rQWJuA251yf3+OKr 9OYfvyXdIwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFIws+kVqmjnXYQYS05Xw6rB0 xXXCMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQGKLcAAwQCKLdQAwQAKLdkMA0GCSqG SIb3DQEBCwUAA4IBAQAVckFFMn/Y8ki9vOx2HRAcsecABCEhdIPtM3m7hsVwaVvx oOh63f7e/EPM/HxV+VoqvZlHRO76ntyQFEiqHdCwYbYzz8LoqKr+F/0aD4ZuXHiO yufUffSqMvJvfm1eLU0BT/5MHpupqSul9j3Xd4yvWRSmyTfLEWDNOh45dx6NFNFL OUTsRJnTrJTCQGYJc0zRwlhWm7QFmI/IKvF7nEDsebsRp1IlPTvr0qBF0jsMwbAW JZJ56S8qEksHdfx15F57qjV54wcN4DqPFTWlyrGo1s0Iioz1rN1tuQQpVzD5WCLZ TVLjvqd/bCxnqxvOqX8AUsbUz7Gej0u8IrYFish2 -----END CERTIFICATE-----Generated at Mon Oct 20 13:44:13 2025 by rpki-client