$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: p0yU8VUMvwCjUO6gPNZeEKbnvmZLPEV37R3SbDr17NY= Subject key identifier: 48:CF:54:E0:9D:2F:AF:4F:DD:C0:F7:13:E5:29:97:E6:C9:44:C4:67 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 5FDCF9D5581E1FA34CD1913490307538F03B7D27 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa Signing time: Mon 06 Apr 2026 21:26:38 +0000 ROA not before: Mon 06 Apr 2026 21:21:38 +0000 ROA not after: Mon 05 Apr 2027 21:26:38 +0000 asID: 16509 IP address blocks: 40.27.16.0/23 maxlen: 24 40.183.0.0/18 maxlen: 24 40.183.80.0/22 maxlen: 24 40.183.100.0/24 maxlen: 24 40.183.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 02:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:dc:f9:d5:58:1e:1f:a3:4c:d1:91:34:90:30:75:38:f0:3b:7d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Apr 6 21:21:38 2026 GMT Not After : Apr 5 21:26:38 2027 GMT Subject: CN=48CF54E09D2FAF4FDDC0F713E52997E6C944C467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d1:db:b9:3f:19:a7:08:ef:87:31:05:73:f1: 3d:0b:0a:2c:db:93:ac:cc:98:68:dc:b2:55:98:04: ff:2d:b3:6a:2a:69:1d:73:3e:98:13:7e:fc:7c:19: e8:28:72:25:37:bd:1a:a1:ef:f4:94:47:e9:a9:2d: 55:b2:f5:95:f1:20:3b:fd:da:f4:5b:a3:bc:5f:8c: e9:c5:93:37:0b:d9:18:a3:88:d6:6a:59:33:c4:fa: b0:74:ea:47:22:24:1e:29:13:99:ad:f1:ef:09:71: 40:e7:ff:a1:3e:c7:80:c3:3c:c7:41:93:f8:ce:a5: c1:2f:52:bf:11:db:84:6e:0d:af:e4:56:4e:db:ce: 8a:70:9f:94:e0:0c:bd:df:20:2c:e1:10:3e:8a:81: 78:b1:03:c3:17:39:ab:67:58:90:55:49:e1:47:9c: 86:64:1c:43:91:54:d2:8b:e6:19:50:93:8a:be:0b: 0c:98:05:bc:94:27:7f:8f:ca:85:03:94:a1:06:c9: 50:56:2e:67:7b:c8:73:01:54:e2:cb:8d:b7:f7:99: 02:dd:41:e8:ed:5d:85:7f:18:10:cf:b7:db:da:66: 0e:b9:94:2b:8b:d7:d5:d8:e2:b6:ce:35:18:db:14: 59:e1:28:57:b0:93:24:da:e1:e0:0d:ed:ca:dd:fe: 73:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CF:54:E0:9D:2F:AF:4F:DD:C0:F7:13:E5:29:97:E6:C9:44:C4:67 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.16.0/23 40.183.0.0/18 40.183.80.0/22 40.183.100.0/24 40.183.121.0/24 Signature Algorithm: sha256WithRSAEncryption 92:5e:aa:c0:cc:e0:06:75:72:eb:5d:ca:ff:c6:f3:9f:13:70: 00:43:96:ff:d2:40:e7:cb:1c:d0:41:0d:39:0a:56:d7:72:03: 3c:b9:ca:74:a4:17:7b:38:22:a9:fb:13:e8:82:d3:a6:96:6c: 60:71:24:07:bf:0e:64:12:b6:c3:9b:b7:3b:3e:75:33:5f:1f: 71:8a:44:47:b2:83:05:74:05:0a:32:87:2f:69:f4:8f:25:f6: 22:0a:09:c2:d4:88:64:84:7c:81:6f:63:06:83:b8:a0:af:60: 49:60:76:37:40:de:77:be:a8:0f:a9:df:f5:c8:ce:16:06:c7: af:b6:7b:23:10:96:db:6c:6b:7c:7c:4e:7e:3a:cf:d8:cc:25: 83:5c:65:0e:59:0c:64:2f:04:1d:60:47:83:3a:f2:a2:e1:d3: 29:69:8f:92:25:a0:e9:0c:1c:a7:d2:21:4e:86:3e:e5:7e:66: d1:a6:fe:0f:25:11:ee:4b:1d:0f:01:3a:bd:48:66:68:f0:2f: 9a:54:89:38:13:e4:ec:e7:0b:a5:a7:62:a4:8a:a5:5f:a4:61: ad:1d:bb:70:cc:eb:b3:b3:b2:75:26:8f:a3:14:a7:d0:d1:23: 22:55:ad:b0:27:58:52:24:a7:aa:69:fa:97:65:95:bb:a9:90: 71:2a:31:8a -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUX9z51VgeH6NM0ZE0kDB1OPA7fScwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwNDA2MjEyMTM4WhcNMjcwNDA1MjEyNjM4 WjAzMTEwLwYDVQQDEyg0OENGNTRFMDlEMkZBRjRGRERDMEY3MTNFNTI5OTdFNkM5 NDRDNDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39HbuT8Zpwjv hzEFc/E9Cwos25OszJho3LJVmAT/LbNqKmkdcz6YE378fBnoKHIlN70aoe/0lEfp qS1VsvWV8SA7/dr0W6O8X4zpxZM3C9kYo4jWalkzxPqwdOpHIiQeKROZrfHvCXFA 5/+hPseAwzzHQZP4zqXBL1K/EduEbg2v5FZO286KcJ+U4Ay93yAs4RA+ioF4sQPD FzmrZ1iQVUnhR5yGZBxDkVTSi+YZUJOKvgsMmAW8lCd/j8qFA5ShBslQVi5ne8hz AVTiy42395kC3UHo7V2FfxgQz7fb2mYOuZQri9fV2OK2zjUY2xRZ4ShXsJMk2uHg De3K3f5zzQIDAQABo4ICljCCApIwHQYDVR0OBBYEFEjPVOCdL69P3cD3E+Upl+bJ RMRnMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBKBsQAwQGKLcAAwQCKLdQAwQAKLdk AwQAKLd5MA0GCSqGSIb3DQEBCwUAA4IBAQCSXqrAzOAGdXLrXcr/xvOfE3AAQ5b/ 0kDnyxzQQQ05ClbXcgM8ucp0pBd7OCKp+xPogtOmlmxgcSQHvw5kErbDm7c7PnUz Xx9xikRHsoMFdAUKMocvafSPJfYiCgnC1IhkhHyBb2MGg7igr2BJYHY3QN53vqgP qd/1yM4WBsevtnsjEJbbbGt8fE5+Os/YzCWDXGUOWQxkLwQdYEeDOvKi4dMpaY+S JaDpDByn0iFOhj7lfmbRpv4PJRHuSx0PATq9SGZo8C+aVIk4E+Ts5wulp2KkiqVf pGGtHbtwzOuzs7J1Jo+jFKfQ0SMiVa2wJ1hSJKeqafqXZZW7qZBxKjGK -----END CERTIFICATE-----Generated at Fri Apr 17 05:39:31 2026 by rpki-client