$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: CBSDssgBW6+PR/OQ/HzAWSHiEW9mZuSW3zLtm1PzWpk= Subject key identifier: 52:7A:80:80:D8:D2:69:13:84:F8:BB:60:45:3E:51:EF:C4:8B:95:97 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 720058BB3052AD3324494B764D40BC0463FAA748 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa Signing time: Wed 12 Aug 2026 04:20:55 +0000 ROA not before: Wed 12 Aug 2026 04:15:55 +0000 ROA not after: Wed 11 Aug 2027 04:20:55 +0000 asID: 16509 IP address blocks: 40.27.5.0/24 maxlen: 24 40.27.16.0/23 maxlen: 24 40.183.0.0/18 maxlen: 24 40.183.80.0/22 maxlen: 24 40.183.100.0/24 maxlen: 24 40.223.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 10:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:00:58:bb:30:52:ad:33:24:49:4b:76:4d:40:bc:04:63:fa:a7:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Aug 12 04:15:55 2026 GMT Not After : Aug 11 04:20:55 2027 GMT Subject: CN=527A8080D8D2691384F8BB60453E51EFC48B9597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f7:f7:b4:f5:99:92:c3:e7:00:99:2f:ea:e2: da:d1:89:55:68:b3:38:31:65:e9:eb:e6:04:f3:6a: 0f:b4:52:f6:67:3e:06:0f:92:8e:f3:38:d7:90:b0: 87:85:7a:86:2d:68:17:0e:28:70:0c:48:76:d3:7e: 3e:7a:cb:3a:65:23:26:78:9d:00:75:3f:23:0d:b2: 45:78:f2:9c:bc:0f:5e:f0:4c:de:b5:7c:9b:41:ce: cd:4f:a2:d8:06:f6:0a:73:8f:f2:e8:57:33:7b:9b: a5:99:34:fb:26:29:9d:b0:53:54:54:96:cf:85:ab: e5:67:40:63:d0:c4:57:5c:b4:97:38:26:fb:8d:3d: 2c:9b:1e:1f:35:94:1d:0f:96:5a:ca:59:83:e8:15: f3:74:e7:bc:4f:ef:2f:1a:66:54:12:5b:05:dd:42: 43:7b:f1:59:41:9c:0b:c4:6c:c6:81:7f:9b:0d:1a: d0:ae:5d:ae:46:fc:4f:34:a4:77:d9:27:5b:ef:4b: 27:dd:09:c4:5e:cd:d1:60:66:d0:e0:d9:8d:c5:6f: ca:23:3a:e1:f3:1e:67:83:58:70:4c:09:2f:db:c1: 1a:85:cd:ec:de:5a:9e:5d:77:28:cd:85:ac:81:15: 50:f4:e8:7a:f2:68:10:e4:29:12:3d:26:f5:d7:7a: 40:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7A:80:80:D8:D2:69:13:84:F8:BB:60:45:3E:51:EF:C4:8B:95:97 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.5.0/24 40.27.16.0/23 40.183.0.0/18 40.183.80.0/22 40.183.100.0/24 40.223.23.0/24 Signature Algorithm: sha256WithRSAEncryption 06:8f:b3:db:16:bf:89:e5:0a:3d:b4:b6:51:a0:1c:f8:3a:10: 62:b4:23:d7:fa:7e:41:55:1e:6f:4b:0c:7c:bf:08:2c:30:eb: 6c:ab:04:98:fb:0b:71:35:6d:d3:65:fd:17:83:61:a7:cf:cf: 55:bf:a9:1f:0a:e0:92:19:a6:e6:ca:59:30:49:72:85:32:6b: 28:10:fe:9b:b1:fa:d3:b0:16:97:13:93:be:95:07:6a:f0:ba: 33:45:cc:04:2f:e3:7a:d4:a5:3e:2d:56:cb:1e:7c:cb:36:fa: f0:df:af:f2:55:58:3b:cd:44:3c:8e:a0:fa:53:12:b1:eb:8d: 49:5d:67:4b:aa:b7:af:79:9b:2d:16:a6:b0:73:87:5f:67:52: 56:0a:7f:40:be:0a:5a:a2:0d:33:7e:d9:a0:41:1b:36:d5:c5: 7c:d1:b3:ba:c3:cc:71:17:11:10:18:0b:15:90:d5:c8:43:4e: e6:ab:fc:1f:5f:34:80:42:22:8e:f7:fe:2a:e3:b7:80:37:90: 23:f7:fc:04:9a:e3:45:05:aa:52:25:7c:18:df:a2:79:45:85: a3:7f:69:af:5a:fe:e8:ec:92:2c:49:50:42:63:c7:71:a5:7f: 83:48:5f:6f:f1:7e:c7:ce:93:73:93:85:ae:01:6b:13:06:3f: 3a:60:b0:cd -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUcgBYuzBSrTMkSUt2TUC8BGP6p0gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwODEyMDQxNTU1WhcNMjcwODExMDQyMDU1 WjAzMTEwLwYDVQQDEyg1MjdBODA4MEQ4RDI2OTEzODRGOEJCNjA0NTNFNTFFRkM0 OEI5NTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPf3tPWZksPn AJkv6uLa0YlVaLM4MWXp6+YE82oPtFL2Zz4GD5KO8zjXkLCHhXqGLWgXDihwDEh2 034+ess6ZSMmeJ0AdT8jDbJFePKcvA9e8EzetXybQc7NT6LYBvYKc4/y6Fcze5ul mTT7JimdsFNUVJbPhavlZ0Bj0MRXXLSXOCb7jT0smx4fNZQdD5ZaylmD6BXzdOe8 T+8vGmZUElsF3UJDe/FZQZwLxGzGgX+bDRrQrl2uRvxPNKR32Sdb70sn3QnEXs3R YGbQ4NmNxW/KIzrh8x5ng1hwTAkv28Eahc3s3lqeXXcozYWsgRVQ9Oh68mgQ5CkS PSb113pA6wIDAQABo4ICnDCCApgwHQYDVR0OBBYEFFJ6gIDY0mkThPi7YEU+Ue/E i5WXMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0G CCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAKBsFAwQBKBsQAwQGKLcAAwQCKLdQ AwQAKLdkAwQAKN8XMA0GCSqGSIb3DQEBCwUAA4IBAQAGj7PbFr+J5Qo9tLZRoBz4 OhBitCPX+n5BVR5vSwx8vwgsMOtsqwSY+wtxNW3TZf0Xg2Gnz89Vv6kfCuCSGabm ylkwSXKFMmsoEP6bsfrTsBaXE5O+lQdq8LozRcwEL+N61KU+LVbLHnzLNvrw36/y VVg7zUQ8jqD6UxKx641JXWdLqreveZstFqawc4dfZ1JWCn9Avgpaog0zftmgQRs2 1cV80bO6w8xxFxEQGAsVkNXIQ07mq/wfXzSAQiKO9/4q47eAN5Aj9/wEmuNFBapS JXwY36J5RYWjf2mvWv7o7JIsSVBCY8dxpX+DSF9v8X7HzpNzk4WuAWsTBj86YLDN -----END CERTIFICATE-----Generated at Fri Sep 4 20:59:21 2026 by rpki-client