$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: ln34YsvfSggzq4qqQZ4P2xDPtiS2+kGGE1E8zeZ564E= Subject key identifier: E6:2B:5A:C9:3A:D1:55:A7:F1:74:D1:9D:2A:67:41:3C:3A:96:8E:2E Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 4200E0714CB603D65BC6C6851E975C1FA590F993 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa Signing time: Tue 03 Nov 2026 16:46:18 +0000 ROA not before: Tue 03 Nov 2026 16:41:18 +0000 ROA not after: Tue 02 Nov 2027 16:46:18 +0000 asID: 16509 IP address blocks: 40.27.16.0/23 maxlen: 24 40.27.159.0/24 maxlen: 24 40.183.0.0/18 maxlen: 24 40.183.80.0/22 maxlen: 24 40.183.100.0/24 maxlen: 24 40.223.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 07:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:00:e0:71:4c:b6:03:d6:5b:c6:c6:85:1e:97:5c:1f:a5:90:f9:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Nov 3 16:41:18 2026 GMT Not After : Nov 2 16:46:18 2027 GMT Subject: CN=E62B5AC93AD155A7F174D19D2A67413C3A968E2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:93:b3:d9:cd:ff:5a:b1:d9:50:ed:73:4b:88: d9:0a:67:2e:66:b7:a1:9d:d4:9d:46:6c:5b:08:56: 1c:65:1e:18:03:ad:90:f8:53:8d:48:8f:09:d8:d6: 91:ff:d0:92:c3:9a:5f:f0:14:fd:f9:e0:6d:25:28: 8f:99:a8:72:a4:49:21:e4:19:3f:2e:c3:54:f4:76: 11:20:b5:b9:e2:a2:73:0e:b2:1e:5f:9c:d4:2e:34: 01:b9:01:ca:2f:3b:b5:b5:f3:66:7a:57:0e:3f:4c: 66:ee:b1:b3:95:92:55:f6:80:d9:b9:a2:6d:8b:1a: 70:7e:59:34:5a:fd:1a:73:99:19:a3:a4:99:fb:4d: 14:38:9c:c8:1c:3d:cb:3f:36:6e:97:15:da:9e:49: ce:4a:25:cb:1d:d2:22:11:cb:92:73:8c:62:19:37: 04:32:1b:0f:95:e0:a3:8c:a9:c8:fa:d7:c2:93:b0: 4f:f0:e1:71:c4:f1:30:f6:9f:1c:27:d7:af:f2:4c: 07:d1:a8:ec:40:2a:cc:9e:48:34:56:4c:8f:b0:37: 84:a2:d7:ac:1c:a7:ea:fa:a9:62:bb:f1:13:67:c6: 6e:c5:46:ca:a2:03:a8:4a:b3:4e:ad:4a:4d:d4:7b: 15:5f:61:db:70:eb:67:58:de:16:77:a1:ed:dd:fd: a9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2B:5A:C9:3A:D1:55:A7:F1:74:D1:9D:2A:67:41:3C:3A:96:8E:2E X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.16.0/23 40.27.159.0/24 40.183.0.0/18 40.183.80.0/22 40.183.100.0/24 40.223.23.0/24 Signature Algorithm: sha256WithRSAEncryption 76:80:54:79:f8:e8:db:3e:de:96:62:e7:29:66:7e:b6:ad:7b: 8d:51:58:ad:8e:49:a2:76:48:51:0e:bb:50:90:fe:d6:d3:b0: f5:eb:05:bf:6e:57:c2:30:7e:9f:5d:92:35:b5:c8:e3:b6:ac: 89:62:cf:f9:4e:45:3e:33:94:b3:af:9b:cf:24:53:20:db:92: 16:51:58:d7:52:e9:6a:19:da:f9:bc:88:40:07:cc:91:37:84: 9f:95:79:5a:86:70:9d:98:b2:9b:a8:15:a0:c8:4f:43:68:27: de:7b:82:a6:83:4e:e5:d0:8d:a6:37:ca:f5:28:bc:f0:3f:69: c5:22:f6:72:56:7e:86:79:57:d8:01:f3:ca:7a:d9:23:67:ed: 5e:8c:94:6f:65:7f:c2:2f:d8:64:f4:92:0d:eb:b4:94:0c:12: 5d:b6:cc:8d:32:52:e6:0d:97:3e:85:bf:30:bd:b8:f1:c3:26: e3:0f:eb:42:28:4a:e5:0c:ab:9c:af:9a:96:d1:a6:fc:bd:45: 91:82:1d:c3:15:b2:b6:62:74:c4:d7:38:31:49:7b:d5:ed:d4: 34:51:b8:3e:70:52:00:d5:88:c5:0d:54:a7:4c:a1:ed:06:b4: c4:04:30:86:4e:9b:7a:a4:e0:b3:17:6c:61:ab:b0:58:50:af: b4:b5:03:78 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUQgDgcUy2A9ZbxsaFHpdcH6WQ+ZMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYxMTAzMTY0MTE4WhcNMjcxMTAyMTY0NjE4 WjAzMTEwLwYDVQQDEyhFNjJCNUFDOTNBRDE1NUE3RjE3NEQxOUQyQTY3NDEzQzNB OTY4RTJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJOz2c3/WrHZ UO1zS4jZCmcuZrehndSdRmxbCFYcZR4YA62Q+FONSI8J2NaR/9CSw5pf8BT9+eBt JSiPmahypEkh5Bk/LsNU9HYRILW54qJzDrIeX5zULjQBuQHKLzu1tfNmelcOP0xm 7rGzlZJV9oDZuaJtixpwflk0Wv0ac5kZo6SZ+00UOJzIHD3LPzZulxXanknOSiXL HdIiEcuSc4xiGTcEMhsPleCjjKnI+tfCk7BP8OFxxPEw9p8cJ9ev8kwH0ajsQCrM nkg0VkyPsDeEotesHKfq+qliu/ETZ8ZuxUbKogOoSrNOrUpN1HsVX2HbcOtnWN4W d6Ht3f2ppQIDAQABo4ICnDCCApgwHQYDVR0OBBYEFOYrWsk60VWn8XTRnSpnQTw6 lo4uMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0G CCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBKBsQAwQAKBufAwQGKLcAAwQCKLdQ AwQAKLdkAwQAKN8XMA0GCSqGSIb3DQEBCwUAA4IBAQB2gFR5+OjbPt6WYucpZn62 rXuNUVitjkmidkhRDrtQkP7W07D16wW/blfCMH6fXZI1tcjjtqyJYs/5TkU+M5Sz r5vPJFMg25IWUVjXUulqGdr5vIhAB8yRN4SflXlahnCdmLKbqBWgyE9DaCfee4Km g07l0I2mN8r1KLzwP2nFIvZyVn6GeVfYAfPKetkjZ+1ejJRvZX/CL9hk9JIN67SU DBJdtsyNMlLmDZc+hb8wvbjxwybjD+tCKErlDKucr5qW0ab8vUWRgh3DFbK2YnTE 1zgxSXvV7dQ0Ubg+cFIA1YjFDVSnTKHtBrTEBDCGTpt6pOCzF2xhq7BYUK+0tQN4 -----END CERTIFICATE-----Generated at Wed Nov 11 11:35:14 2026 by rpki-client