$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16276.roa File: AS16276.roa (raw, json) Hash identifier: 1v2llnVO6fwhWfJSwfNi7MqV+2LlLXr8afwGPyn69Q8= Subject key identifier: 2A:19:65:86:7F:55:68:AA:32:87:7F:8D:A6:C9:54:CB:4A:F2:56:57 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 31362771C61912D2D12BD1BFBD6CD303E37EACC3 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16276.roa Signing time: Tue 21 Oct 2025 16:29:07 +0000 ROA not before: Tue 21 Oct 2025 16:24:07 +0000 ROA not after: Tue 20 Oct 2026 16:29:07 +0000 asID: 16276 IP address blocks: 40.27.189.0/24 maxlen: 24 40.183.205.0/24 maxlen: 24 40.183.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 13:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:36:27:71:c6:19:12:d2:d1:2b:d1:bf:bd:6c:d3:03:e3:7e:ac:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Oct 21 16:24:07 2025 GMT Not After : Oct 20 16:29:07 2026 GMT Subject: CN=2A1965867F5568AA32877F8DA6C954CB4AF25657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:66:61:d7:f6:0a:ad:78:3f:92:61:b0:91:1f: aa:99:7f:50:a2:8b:bb:26:80:d9:b7:1c:da:01:0d: f7:74:03:be:b7:0e:ca:2d:5c:54:43:10:7c:c9:46: ef:32:8d:d2:d3:62:d8:6e:00:79:b0:a3:ff:a1:f2: 86:72:15:d5:6b:80:cc:36:98:28:0c:1c:6e:21:38: 85:8b:d2:92:40:7a:47:eb:59:9e:23:d6:8b:93:ca: ca:15:f5:e7:74:11:14:56:a8:cb:f0:0e:54:4f:ac: 29:4a:9e:71:67:a8:6a:c9:5e:b5:49:44:76:fe:f4: b1:ab:05:01:ca:60:a8:8d:cb:22:24:61:e6:d7:01: 68:52:72:91:71:e1:b6:dd:90:f3:ea:50:f2:ca:41: fe:64:ba:12:bb:16:e8:1e:cb:45:26:0b:2c:2f:dd: 54:ed:50:2c:07:f2:a3:7b:73:eb:c9:4e:03:d8:bb: e4:ad:44:32:8d:3e:6a:5d:7a:50:5f:49:1b:ce:98: 16:a3:ab:be:2b:77:0e:62:ad:44:42:04:06:bf:61: 1f:2b:71:1d:54:56:79:48:22:e4:fa:fd:54:b1:70: 01:1b:a7:b9:ac:b1:5a:6e:af:9c:f0:34:9e:61:de: f1:00:4d:9b:07:97:60:79:c2:36:85:dc:08:62:59: a1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:19:65:86:7F:55:68:AA:32:87:7F:8D:A6:C9:54:CB:4A:F2:56:57 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16276.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.189.0/24 40.183.205.0/24 40.183.253.0/24 Signature Algorithm: sha256WithRSAEncryption 37:28:a4:72:9c:de:28:fb:1e:72:ac:59:df:bc:6a:7c:e5:14: 1c:1a:94:35:7d:e7:7b:5f:8a:87:07:9f:e5:b1:d3:fb:b0:6f: e0:e2:69:01:44:0d:00:7f:54:6a:32:56:b2:95:1e:e6:76:66: 82:27:b9:32:de:1e:5f:76:3d:54:ac:9f:b5:79:8b:41:7f:34: 02:fe:05:b6:81:52:2b:e2:6f:07:c8:0e:bf:f6:3f:9b:73:c5: d6:76:ae:04:b8:82:9f:ee:03:6b:28:ad:a8:7b:49:a8:ba:c4: 22:ef:38:49:b6:07:84:95:9b:dc:59:cb:1f:e0:d0:92:3b:e8: 11:c1:42:81:39:07:22:36:fa:ca:f3:c6:c2:ef:52:cb:ec:7f: a9:5a:ad:25:18:7f:a2:41:e7:a2:97:ca:21:ed:40:e0:b7:d7: 4f:03:10:57:90:a2:b6:a5:c7:71:3f:31:f0:91:8f:e4:d6:5d: 04:18:03:7e:c1:89:9b:bb:d8:30:f1:cc:ab:dd:d3:a1:56:05: a9:42:2e:91:b0:07:b5:94:db:16:4d:77:7c:b0:d4:0b:63:5e: 7b:3b:1e:a2:c0:49:f2:28:30:31:bc:95:f4:a6:6b:3c:f4:c3: 33:74:6a:9c:54:f1:54:dc:7f:25:14:2a:6c:74:3a:57:05:03: 26:7f:c8:81 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUMTYnccYZEtLRK9G/vWzTA+N+rMMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUxMDIxMTYyNDA3WhcNMjYxMDIwMTYyOTA3 WjAzMTEwLwYDVQQDEygyQTE5NjU4NjdGNTU2OEFBMzI4NzdGOERBNkM5NTRDQjRB RjI1NjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGZh1/YKrXg/ kmGwkR+qmX9Qoou7JoDZtxzaAQ33dAO+tw7KLVxUQxB8yUbvMo3S02LYbgB5sKP/ ofKGchXVa4DMNpgoDBxuITiFi9KSQHpH61meI9aLk8rKFfXndBEUVqjL8A5UT6wp Sp5xZ6hqyV61SUR2/vSxqwUBymCojcsiJGHm1wFoUnKRceG23ZDz6lDyykH+ZLoS uxboHstFJgssL91U7VAsB/Kje3PryU4D2LvkrUQyjT5qXXpQX0kbzpgWo6u+K3cO Yq1EQgQGv2EfK3EdVFZ5SCLk+v1UsXABG6e5rLFabq+c8DSeYd7xAE2bB5dgecI2 hdwIYlmhNQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFCoZZYZ/VWiqMod/jabJVMtK 8lZXMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzE2Mjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAKBu9AwQAKLfNAwQAKLf9MA0GCSqG SIb3DQEBCwUAA4IBAQA3KKRynN4o+x5yrFnfvGp85RQcGpQ1fed7X4qHB5/lsdP7 sG/g4mkBRA0Af1RqMlaylR7mdmaCJ7ky3h5fdj1UrJ+1eYtBfzQC/gW2gVIr4m8H yA6/9j+bc8XWdq4EuIKf7gNrKK2oe0mousQi7zhJtgeElZvcWcsf4NCSO+gRwUKB OQciNvrK88bC71LL7H+pWq0lGH+iQeeil8oh7UDgt9dPAxBXkKK2pcdxPzHwkY/k 1l0EGAN+wYmbu9gw8cyr3dOhVgWpQi6RsAe1lNsWTXd8sNQLY157Ox6iwEnyKDAx vJX0pms89MMzdGqcVPFU3H8lFCpsdDpXBQMmf8iB -----END CERTIFICATE-----Generated at Wed Nov 5 00:34:46 2025 by rpki-client