$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: ZipxL6kIhbqdNubck6iLKfUpjxLqdejwDkZJ5FxwQ/c= Subject key identifier: 83:EA:F4:B3:57:5E:3A:CC:8E:CB:BE:33:2F:26:5F:01:68:81:99:C0 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 470EDD27EE2921E697964FBD1863901F67041BF5 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa Signing time: Tue 24 Jun 2025 01:42:48 +0000 ROA not before: Tue 24 Jun 2025 01:37:48 +0000 ROA not after: Tue 23 Jun 2026 01:42:48 +0000 asID: 40676 IP address blocks: 64.50.188.0/23 maxlen: 24 107.173.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Jun 2025 14:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:0e:dd:27:ee:29:21:e6:97:96:4f:bd:18:63:90:1f:67:04:1b:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jun 24 01:37:48 2025 GMT Not After : Jun 23 01:42:48 2026 GMT Subject: CN=83EAF4B3575E3ACC8ECBBE332F265F01688199C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c4:7c:87:4a:f7:d3:ac:dc:9e:ea:05:31:4e: e9:aa:02:21:1e:15:18:a8:3c:a8:26:10:6a:bd:59: 49:57:db:2e:3d:e0:f9:72:ad:f0:a8:74:16:15:9d: bb:40:aa:f8:6c:1b:86:f6:11:e0:98:30:13:8a:de: f6:5f:38:c2:4f:29:25:5d:ca:58:cd:db:ce:e4:52: b0:4a:37:43:df:ee:b8:4c:2e:c2:b1:f3:76:64:20: 39:69:49:0b:3e:7f:89:0e:9d:f7:b7:9a:16:fb:d0: d1:4a:4d:c6:f1:c6:08:d3:bc:63:b3:04:8b:ff:31: 29:f1:11:a9:52:47:52:17:a8:85:96:45:65:20:a1: 89:ed:d1:90:e8:ed:81:dd:32:93:67:ce:33:13:c9: dc:a6:1f:81:af:a6:cd:bc:e8:d3:3d:b9:16:c9:a7: d3:fd:b0:ad:17:e1:7f:49:48:76:46:35:4d:d5:d5: 25:e2:20:e3:e6:67:a2:70:5f:13:16:99:de:00:94: e6:ca:86:17:f3:d3:38:28:cc:ee:66:45:29:9e:e9: e4:2c:e7:be:bc:a5:de:02:22:ac:41:e3:2f:da:d8: d9:67:53:0b:79:7d:38:92:c3:78:41:ae:75:3d:79: ce:80:c5:3b:14:49:1c:2c:a2:43:84:51:62:81:7c: 74:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EA:F4:B3:57:5E:3A:CC:8E:CB:BE:33:2F:26:5F:01:68:81:99:C0 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.50.188.0/23 107.173.215.0/24 Signature Algorithm: sha256WithRSAEncryption b0:4c:ab:06:4c:eb:b2:03:2f:45:47:9c:13:c8:9b:78:db:bc: 1e:b4:f5:72:6d:ca:75:51:05:3d:bc:e7:33:b8:b5:51:02:9d: 54:92:6b:cc:1a:4d:42:3c:06:7f:55:f1:62:2e:09:0f:0f:47: cf:ed:ed:67:bf:3c:a4:19:bb:a6:dd:de:b2:90:01:e7:13:db: f6:53:42:f1:a6:13:c7:87:ed:64:f8:84:c7:30:83:79:aa:a5: 8b:76:ce:72:51:77:85:c0:4a:40:bb:67:16:e4:5a:01:8d:70: 7e:47:9c:17:06:78:75:7b:cf:26:21:40:39:85:ab:2a:b5:c4: 3b:5c:c7:77:91:1b:b8:05:e0:89:f4:c3:ce:69:c9:36:1b:c0: 0d:1e:ee:80:4e:36:95:73:22:23:00:33:48:08:19:03:87:50: a9:6c:5f:6e:d4:b3:22:fa:4b:96:0b:8e:ec:b2:1e:e3:64:e8: 6d:d5:17:15:51:fc:ae:6a:7f:75:02:a3:d7:27:b6:37:a3:f3: fb:1b:38:ba:28:20:b7:0b:9a:64:c3:47:aa:88:0e:ab:d9:c5: 1b:9a:63:32:bf:10:db:29:a8:38:8b:24:9a:1e:f3:e5:7d:f9: 2e:69:d6:7b:cc:45:31:80:59:77:87:ac:51:ad:66:30:03:c7: 3e:23:a6:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIURw7dJ+4pIeaXlk+9GGOQH2cEG/UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNjI0MDEzNzQ4WhcNMjYwNjIzMDE0MjQ4 WjAzMTEwLwYDVQQDEyg4M0VBRjRCMzU3NUUzQUNDOEVDQkJFMzMyRjI2NUYwMTY4 ODE5OUMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8R8h0r306zc nuoFMU7pqgIhHhUYqDyoJhBqvVlJV9suPeD5cq3wqHQWFZ27QKr4bBuG9hHgmDAT it72XzjCTyklXcpYzdvO5FKwSjdD3+64TC7CsfN2ZCA5aUkLPn+JDp33t5oW+9DR Sk3G8cYI07xjswSL/zEp8RGpUkdSF6iFlkVlIKGJ7dGQ6O2B3TKTZ84zE8ncph+B r6bNvOjTPbkWyafT/bCtF+F/SUh2RjVN1dUl4iDj5meicF8TFpneAJTmyoYX89M4 KMzuZkUpnunkLOe+vKXeAiKsQeMv2tjZZ1MLeX04ksN4Qa51PXnOgMU7FEkcLKJD hFFigXx09QIDAQABo4IChDCCAoAwHQYDVR0OBBYEFIPq9LNXXjrMjsu+My8mXwFo gZnAMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzQwNjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBQDK8AwQAa63XMA0GCSqGSIb3DQEB CwUAA4IBAQCwTKsGTOuyAy9FR5wTyJt427wetPVybcp1UQU9vOczuLVRAp1UkmvM Gk1CPAZ/VfFiLgkPD0fP7e1nvzykGbum3d6ykAHnE9v2U0LxphPHh+1k+ITHMIN5 qqWLds5yUXeFwEpAu2cW5FoBjXB+R5wXBnh1e88mIUA5hasqtcQ7XMd3kRu4BeCJ 9MPOack2G8ANHu6ATjaVcyIjADNICBkDh1CpbF9u1LMi+kuWC47ssh7jZOht1RcV Ufyuan91AqPXJ7Y3o/P7Gzi6KCC3C5pkw0eqiA6r2cUbmmMyvxDbKag4iySaHvPl ffkuadZ7zEUxgFl3h6xRrWYwA8c+I6Ya -----END CERTIFICATE-----Generated at Sun Jun 29 05:52:09 2025 by rpki-client