$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: 1VaLV8+pnEKM/S2FiFW69In5HIpHzQ6+WMGSpq1UNvc= Subject key identifier: 72:81:6D:2F:42:01:F7:BF:91:BB:D2:4A:0B:36:6F:24:CA:E3:20:7A Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 4609BCA6DC6B73D7645C08E03C58A72F574408BC Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40676.roa Signing time: Sat 18 Oct 2025 03:48:16 +0000 ROA not before: Sat 18 Oct 2025 03:43:16 +0000 ROA not after: Sat 17 Oct 2026 03:48:16 +0000 asID: 40676 IP address blocks: 40.27.24.0/23 maxlen: 24 40.183.96.0/22 maxlen: 24 40.183.208.0/22 maxlen: 24 40.223.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 08:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:09:bc:a6:dc:6b:73:d7:64:5c:08:e0:3c:58:a7:2f:57:44:08:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Oct 18 03:43:16 2025 GMT Not After : Oct 17 03:48:16 2026 GMT Subject: CN=72816D2F4201F7BF91BBD24A0B366F24CAE3207A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:82:73:90:32:7f:b0:99:f6:ce:9f:12:da:c6: 70:b0:1a:e7:a0:cc:94:95:b5:5a:ce:8f:12:61:5d: 7d:81:ab:c9:51:52:60:df:58:4d:1e:fb:3b:3b:95: 6e:26:14:6f:7a:2b:d6:ab:cf:ee:84:b5:60:25:a9: 42:f4:31:e8:f3:43:62:4d:9f:85:da:6b:0f:c2:af: 6f:3e:5f:8f:a2:39:42:b4:44:5c:9a:c5:30:fe:43: 2f:6e:76:17:4f:fc:e2:87:f0:ef:b9:01:b0:84:6a: 45:6f:d4:8c:bd:57:f4:a2:ed:f8:e9:ab:0b:3a:cf: de:89:23:7b:f2:4c:25:6b:d9:7c:f1:12:46:19:02: b2:6c:1c:70:ae:28:91:5c:ca:11:43:7e:28:22:1b: ca:e9:a3:02:c7:c7:ab:9f:25:23:6c:d2:be:6d:ee: d8:7d:d1:84:f7:94:46:02:27:e6:de:db:87:17:1c: 2b:00:d4:44:39:66:77:6c:57:69:b5:10:4b:12:c0: 4a:45:2b:3b:85:7d:d4:df:16:15:8b:5e:7a:9a:81: f4:8d:3c:7a:19:ff:e5:65:9a:9c:46:ae:5d:cc:57: 0c:8c:1f:84:66:79:06:75:a8:92:e9:65:ea:00:37: e8:c8:ad:d2:f9:22:8f:a2:fd:f3:d5:4f:00:b1:fe: 23:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:81:6D:2F:42:01:F7:BF:91:BB:D2:4A:0B:36:6F:24:CA:E3:20:7A X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.24.0/23 40.183.96.0/22 40.183.208.0/22 40.223.184.0/22 Signature Algorithm: sha256WithRSAEncryption 90:f0:51:cc:a8:3f:29:ce:34:42:d0:cd:9e:91:ad:e4:00:a0: 07:54:5f:7a:19:68:d5:7f:4a:79:87:81:b9:df:3e:a3:a4:14: 31:00:ff:e1:f1:41:69:a4:30:f8:0e:2f:9d:cf:65:f4:8e:5f: 7d:78:6e:f4:0f:08:dd:54:67:b5:86:73:c3:7a:2b:18:eb:78: ee:40:e8:95:ce:b7:c6:94:09:db:89:49:f0:d9:9a:eb:55:92: 9f:ba:c1:3b:9c:f0:72:1d:66:af:2e:78:aa:b0:a0:9f:c8:75: fc:1e:92:68:da:49:48:af:31:45:2f:c3:95:3f:89:6a:6f:90: 6d:5a:9a:d0:e7:f5:d3:a9:ab:09:71:22:5d:11:ef:14:5e:a3: 94:9f:0f:46:85:84:04:44:04:c6:f3:42:49:4c:95:40:b0:e3: 2a:41:d8:08:7b:39:b1:31:6e:b5:0d:d9:7b:8d:74:64:4d:d1: 60:e0:67:6c:43:9a:59:a4:ca:46:54:7f:93:2f:98:66:5c:4c: 79:93:b7:92:f2:7b:55:32:06:c0:69:82:ff:6c:a1:f8:3b:bd: b0:9c:57:fa:4e:85:f4:54:47:8e:d9:83:0d:45:50:54:53:d1: e7:e2:fd:bf:e8:2e:f8:0d:fc:11:69:07:d0:c8:c4:65:ec:5b: 69:c5:f7:42 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIURgm8ptxrc9dkXAjgPFinL1dECLwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUxMDE4MDM0MzE2WhcNMjYxMDE3MDM0ODE2 WjAzMTEwLwYDVQQDEyg3MjgxNkQyRjQyMDFGN0JGOTFCQkQyNEEwQjM2NkYyNENB RTMyMDdBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoJzkDJ/sJn2 zp8S2sZwsBrnoMyUlbVazo8SYV19gavJUVJg31hNHvs7O5VuJhRveivWq8/uhLVg JalC9DHo80NiTZ+F2msPwq9vPl+PojlCtERcmsUw/kMvbnYXT/zih/DvuQGwhGpF b9SMvVf0ou346asLOs/eiSN78kwla9l88RJGGQKybBxwriiRXMoRQ34oIhvK6aMC x8ernyUjbNK+be7YfdGE95RGAifm3tuHFxwrANREOWZ3bFdptRBLEsBKRSs7hX3U 3xYVi156moH0jTx6Gf/lZZqcRq5dzFcMjB+EZnkGdaiS6WXqADfoyK3S+SKPov3z 1U8Asf4j4QIDAQABo4ICkDCCAowwHQYDVR0OBBYEFHKBbS9CAfe/kbvSSgs2byTK 4yB6MB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzQwNjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBKBsYAwQCKLdgAwQCKLfQAwQCKN+4 MA0GCSqGSIb3DQEBCwUAA4IBAQCQ8FHMqD8pzjRC0M2eka3kAKAHVF96GWjVf0p5 h4G53z6jpBQxAP/h8UFppDD4Di+dz2X0jl99eG70DwjdVGe1hnPDeisY63juQOiV zrfGlAnbiUnw2ZrrVZKfusE7nPByHWavLniqsKCfyHX8HpJo2klIrzFFL8OVP4lq b5BtWprQ5/XTqasJcSJdEe8UXqOUnw9GhYQERATG80JJTJVAsOMqQdgIezmxMW61 Ddl7jXRkTdFg4GdsQ5pZpMpGVH+TL5hmXEx5k7eS8ntVMgbAaYL/bKH4O72wnFf6 ToX0VEeO2YMNRVBUU9Hn4v2/6C74DfwRaQfQyMRl7FtpxfdC -----END CERTIFICATE-----Generated at Mon Oct 20 12:41:06 2025 by rpki-client