$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: R/jywDdUfpnzrsoD0Y5XM+/uwXYiI/vzLoi7agBInbc= Subject key identifier: 3E:7F:49:E1:B7:58:FE:A7:D1:DB:B7:A3:0D:C3:B9:43:6D:63:59:E4 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 18DA2DF75F72D4676F8C7A3B5A86ADDA87CB2F0A Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa Signing time: Thu 23 Jul 2026 15:03:06 +0000 ROA not before: Thu 23 Jul 2026 14:58:06 +0000 ROA not after: Thu 22 Jul 2027 15:03:06 +0000 asID: 16509 IP address blocks: 40.27.16.0/23 maxlen: 24 40.183.0.0/18 maxlen: 24 40.183.80.0/22 maxlen: 24 40.183.100.0/24 maxlen: 24 40.223.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 16:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:da:2d:f7:5f:72:d4:67:6f:8c:7a:3b:5a:86:ad:da:87:cb:2f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Jul 23 14:58:06 2026 GMT Not After : Jul 22 15:03:06 2027 GMT Subject: CN=3E7F49E1B758FEA7D1DBB7A30DC3B9436D6359E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f2:2a:35:29:ea:b1:ab:35:06:d4:85:7f:53: 96:96:dd:b4:1e:40:21:ff:73:a0:db:a1:b2:b4:b8: 05:9d:ce:da:4d:c0:01:f3:dc:29:3f:27:06:33:cd: 2c:18:c6:60:e8:38:b1:d6:6b:14:39:23:42:08:d2: fe:8a:f1:33:ab:ff:d8:08:2a:f1:27:5c:35:08:52: ba:75:c6:bf:d2:2a:ce:5a:6a:5c:3f:fa:a7:28:08: 7c:a3:72:e8:c0:25:c0:21:fa:a5:4f:8b:08:65:35: df:da:7a:8c:99:b5:d6:2f:2a:1f:56:61:b3:81:fa: 1b:bc:5f:9c:97:73:41:22:64:ee:ad:47:0f:5b:e7: 17:34:57:9e:b3:16:f5:ed:59:39:b6:23:69:fe:16: ad:ec:73:d0:62:83:84:cd:62:0c:90:da:11:0b:ac: 1e:2e:2a:25:6e:33:4a:84:a7:45:ca:89:9f:9d:3c: e5:76:2a:fa:23:e5:cf:20:df:c9:19:53:1f:77:90: 0a:6f:c9:71:3d:a4:36:15:85:b4:05:b5:30:3e:d9: 4b:33:a0:d6:fc:fa:e9:4a:31:9a:e3:5b:bc:9a:1a: 1b:72:d7:6d:49:aa:d3:2e:11:cd:92:5d:f5:8c:5d: eb:c8:af:aa:55:13:37:e2:f2:e4:31:4d:04:3a:95: 8f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7F:49:E1:B7:58:FE:A7:D1:DB:B7:A3:0D:C3:B9:43:6D:63:59:E4 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.16.0/23 40.183.0.0/18 40.183.80.0/22 40.183.100.0/24 40.223.23.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:21:dc:b2:79:19:ec:ff:22:88:90:83:d8:97:87:72:3a:cc: b2:4b:cf:13:9e:a0:f0:1b:f3:bf:8c:0f:b2:70:1e:42:18:46: 93:9a:ce:98:29:47:4a:f8:41:f9:9e:3a:ee:81:0d:3d:32:5f: f9:89:c7:b9:cc:ad:17:94:bf:1f:82:88:13:46:5d:d3:a7:5f: 0a:17:11:d8:26:ca:86:ad:22:55:79:45:cc:a4:4b:23:a1:9e: f5:d4:16:f9:5d:bb:1f:a8:5a:f6:4b:76:ae:7d:50:6c:4d:2e: 44:c8:dd:53:5f:b1:fb:ab:ca:73:4d:ae:21:ad:f2:d4:de:38: 53:56:50:97:97:91:c9:9c:94:36:f1:c3:5f:6e:fb:46:08:16: a2:50:38:74:68:8e:07:be:c9:a8:93:bf:72:46:0f:d0:e8:8c: 77:6e:80:ec:a8:84:2b:cb:6f:fc:ac:83:8b:4c:8e:4f:f2:0f: c2:ab:3c:c1:46:52:ce:48:cc:d7:c7:3e:1e:8c:ad:7f:72:39: bc:49:d7:69:73:c2:e3:0d:7b:51:50:18:7d:27:dd:6f:87:3f: 9c:c5:68:4f:cb:d4:36:c8:9a:d8:d2:cc:00:3d:98:b2:d5:17: e2:6f:e6:4a:3b:c8:d0:1c:85:3e:a9:58:b8:99:14:32:5b:30: 80:bd:74:58 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUGNot919y1GdvjHo7Woat2ofLLwowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwNzIzMTQ1ODA2WhcNMjcwNzIyMTUwMzA2 WjAzMTEwLwYDVQQDEygzRTdGNDlFMUI3NThGRUE3RDFEQkI3QTMwREMzQjk0MzZE NjM1OUU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PIqNSnqsas1 BtSFf1OWlt20HkAh/3Og26GytLgFnc7aTcAB89wpPycGM80sGMZg6Dix1msUOSNC CNL+ivEzq//YCCrxJ1w1CFK6dca/0irOWmpcP/qnKAh8o3LowCXAIfqlT4sIZTXf 2nqMmbXWLyofVmGzgfobvF+cl3NBImTurUcPW+cXNFeesxb17Vk5tiNp/hat7HPQ YoOEzWIMkNoRC6weLiolbjNKhKdFyomfnTzldir6I+XPIN/JGVMfd5AKb8lxPaQ2 FYW0BbUwPtlLM6DW/PrpSjGa41u8mhobctdtSarTLhHNkl31jF3ryK+qVRM34vLk MU0EOpWPvwIDAQABo4ICljCCApIwHQYDVR0OBBYEFD5/SeG3WP6n0du3ow3DuUNt Y1nkMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBKBsQAwQGKLcAAwQCKLdQAwQAKLdk AwQAKN8XMA0GCSqGSIb3DQEBCwUAA4IBAQA9IdyyeRns/yKIkIPYl4dyOsyyS88T nqDwG/O/jA+ycB5CGEaTms6YKUdK+EH5njrugQ09Ml/5ice5zK0XlL8fgogTRl3T p18KFxHYJsqGrSJVeUXMpEsjoZ711Bb5XbsfqFr2S3aufVBsTS5EyN1TX7H7q8pz Ta4hrfLU3jhTVlCXl5HJnJQ28cNfbvtGCBaiUDh0aI4Hvsmok79yRg/Q6Ix3boDs qIQry2/8rIOLTI5P8g/CqzzBRlLOSMzXxz4ejK1/cjm8Sddpc8LjDXtRUBh9J91v hz+cxWhPy9Q2yJrY0swAPZiy1Rfib+ZKO8jQHIU+qVi4mRQyWzCAvXRY -----END CERTIFICATE-----Generated at Thu Jul 23 23:42:01 2026 by rpki-client