$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: EJgGbGYAarXLalVhdBJVWJq2A/6AQ+Ioer/m9hyhyTo= Subject key identifier: CC:53:AD:CE:51:47:08:6D:4F:EC:BD:C7:07:DC:B9:D6:E0:DE:D0:44 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 370A655ABC18047276ECA9E44CE4A1F019B3E67E Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa Signing time: Wed 05 Nov 2025 05:47:30 +0000 ROA not before: Wed 05 Nov 2025 05:42:30 +0000 ROA not after: Wed 04 Nov 2026 05:47:30 +0000 asID: 16509 IP address blocks: 40.183.0.0/18 maxlen: 24 40.183.80.0/22 maxlen: 24 40.183.100.0/24 maxlen: 24 40.183.124.0/24 maxlen: 24 40.183.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:0a:65:5a:bc:18:04:72:76:ec:a9:e4:4c:e4:a1:f0:19:b3:e6:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Nov 5 05:42:30 2025 GMT Not After : Nov 4 05:47:30 2026 GMT Subject: CN=CC53ADCE5147086D4FECBDC707DCB9D6E0DED044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:70:8f:9b:06:ca:ba:79:9c:97:7b:73:c0:54: 2d:c0:65:b3:e6:51:50:72:e2:fe:5f:cc:28:36:b8: 41:6b:ef:42:27:c2:ca:a7:8e:cf:31:56:2b:1a:b9: 02:82:33:78:d6:cf:08:9e:ed:11:18:ef:9c:15:33: 24:0b:71:9d:9e:ee:12:35:ee:71:3e:dd:77:a1:d9: c2:98:27:8b:0c:da:8a:1e:3b:b3:91:20:e5:5b:ca: ee:9b:6a:88:77:93:87:fc:9d:7d:83:26:7f:1d:b9: 97:1f:55:82:ed:03:b5:78:ec:b7:91:67:f8:d3:83: 3c:67:60:3d:fb:fe:0f:bd:c5:1f:4a:a5:7e:d5:20: 50:0c:8f:6c:63:d8:50:7b:b0:ac:e0:c7:df:48:84: 38:e4:b3:ed:76:44:28:9e:51:fe:a4:5c:3d:1b:0d: ab:9d:72:fd:33:66:97:84:9b:c9:78:bb:39:44:01: 37:78:77:39:f0:2e:5c:1d:b0:4a:30:20:ce:26:84: be:44:32:ab:d6:99:99:92:ed:cf:cb:e3:8e:c2:e8: 63:13:aa:fd:79:60:d8:66:54:2b:92:ee:26:05:0b: 06:f9:8f:27:06:4d:f1:46:fd:43:d9:7e:90:72:9a: c5:89:ea:65:23:39:fb:74:b1:9e:90:ab:7b:cc:5b: ef:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:53:AD:CE:51:47:08:6D:4F:EC:BD:C7:07:DC:B9:D6:E0:DE:D0:44 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.183.0.0/18 40.183.80.0/22 40.183.100.0/24 40.183.124.0/23 Signature Algorithm: sha256WithRSAEncryption 28:75:41:3b:42:a0:83:63:49:71:5b:ba:0e:87:fd:37:d8:e8: 23:2a:ad:ae:a6:e8:5f:be:8f:68:35:20:36:8e:91:3b:7c:8a: 0d:a8:29:d6:67:0c:b9:cf:5e:07:f0:7a:23:f0:6b:0e:19:33: 05:08:2d:c6:57:71:ef:e3:9e:82:3c:41:be:86:a1:51:a7:5d: 8d:4d:4d:35:f2:71:61:5d:cf:f5:2b:12:a2:9d:03:b4:8c:eb: ab:85:2e:8b:85:17:6c:da:ef:0d:6e:33:70:bd:69:6a:00:45: 85:7b:e6:d4:f2:65:5c:f2:69:84:fd:d2:92:a9:b8:69:97:e9: 16:f8:de:dd:a8:ca:9a:ef:18:fc:1e:aa:64:42:39:a3:b2:7b: 11:c5:4f:92:5d:e7:c2:3b:1a:62:e6:ed:55:68:71:e6:6f:d3: 5a:3f:fe:29:f0:d9:3c:1d:1e:55:dd:a2:fd:c6:eb:5b:10:f0: d5:78:64:47:96:b7:8b:d6:fb:a7:ab:f1:e9:43:35:9b:0c:34: f8:a0:2d:96:b3:90:97:de:72:b0:af:88:bf:54:9c:b4:c1:24: 2c:f9:57:d4:d9:1d:b3:10:a2:18:53:13:6b:50:b3:5b:54:6d: b4:1e:2e:f3:02:f1:9e:73:56:16:69:ec:30:84:61:63:dd:4d: 4d:1c:31:21 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIUNwplWrwYBHJ27KnkTOSh8Bmz5n4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUxMTA1MDU0MjMwWhcNMjYxMTA0MDU0NzMw WjAzMTEwLwYDVQQDEyhDQzUzQURDRTUxNDcwODZENEZFQ0JEQzcwN0RDQjlENkUw REVEMDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nCPmwbKunmc l3tzwFQtwGWz5lFQcuL+X8woNrhBa+9CJ8LKp47PMVYrGrkCgjN41s8Inu0RGO+c FTMkC3Gdnu4SNe5xPt13odnCmCeLDNqKHjuzkSDlW8rum2qId5OH/J19gyZ/HbmX H1WC7QO1eOy3kWf404M8Z2A9+/4PvcUfSqV+1SBQDI9sY9hQe7Cs4MffSIQ45LPt dkQonlH+pFw9Gw2rnXL9M2aXhJvJeLs5RAE3eHc58C5cHbBKMCDOJoS+RDKr1pmZ ku3Py+OOwuhjE6r9eWDYZlQrku4mBQsG+Y8nBk3xRv1D2X6QcprFieplIzn7dLGe kKt7zFvviwIDAQABo4ICkDCCAowwHQYDVR0OBBYEFMxTrc5RRwhtT+y9xwfcudbg 3tBEMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQGKLcAAwQCKLdQAwQAKLdkAwQBKLd8 MA0GCSqGSIb3DQEBCwUAA4IBAQAodUE7QqCDY0lxW7oOh/032OgjKq2upuhfvo9o NSA2jpE7fIoNqCnWZwy5z14H8Hoj8GsOGTMFCC3GV3Hv456CPEG+hqFRp12NTU01 8nFhXc/1KxKinQO0jOurhS6LhRds2u8NbjNwvWlqAEWFe+bU8mVc8mmE/dKSqbhp l+kW+N7dqMqa7xj8HqpkQjmjsnsRxU+SXefCOxpi5u1VaHHmb9NaP/4p8Nk8HR5V 3aL9xutbEPDVeGRHlreL1vunq/HpQzWbDDT4oC2Ws5CX3nKwr4i/VJy0wSQs+VfU 2R2zEKIYUxNrULNbVG20Hi7zAvGec1YWaewwhGFj3U1NHDEh -----END CERTIFICATE-----Generated at Wed Nov 5 08:41:33 2025 by rpki-client