$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: eKXUs44qeJ0AwxlRVHVPyi+fQNNQRFp3F94rIadZ6rg= Subject key identifier: 53:A9:70:BF:2A:E0:37:30:30:A2:33:EB:74:03:37:4D:23:BC:CD:D8 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 3D9B502EB7CD4C17D29F2DD4CCAA36E7453F8533 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40676.roa Signing time: Sat 18 Jul 2026 10:42:37 +0000 ROA not before: Sat 18 Jul 2026 10:37:37 +0000 ROA not after: Sat 17 Jul 2027 10:42:37 +0000 asID: 40676 IP address blocks: 157.254.1.0/24 maxlen: 24 157.254.8.0/24 maxlen: 24 157.254.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 00:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:9b:50:2e:b7:cd:4c:17:d2:9f:2d:d4:cc:aa:36:e7:45:3f:85:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jul 18 10:37:37 2026 GMT Not After : Jul 17 10:42:37 2027 GMT Subject: CN=53A970BF2AE0373030A233EB7403374D23BCCDD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5d:d8:5b:d2:9c:14:f0:25:af:5e:a3:ab:a1: bf:e9:a8:3b:6d:06:75:38:e6:85:a6:fd:24:1a:4f: 79:38:4d:14:ab:d1:19:4a:80:d5:59:ae:2d:7b:30: 0d:12:86:b4:8b:98:8a:0f:06:ac:a5:56:dc:06:57: 84:50:c1:ee:bd:33:6b:ae:7a:9b:20:63:de:b5:24: 8f:0c:c0:02:10:d5:9c:4a:fe:4e:48:f7:5c:b5:89: bc:b5:78:98:1d:65:97:94:ab:82:fa:87:67:be:8a: c6:b1:de:83:ac:1d:92:1f:65:2d:7c:99:14:9d:e3: 01:a5:a5:32:ed:45:a6:5e:05:7e:b1:9e:15:b5:c4: ec:8a:92:b0:a8:0b:8e:c4:bf:81:d0:7a:3d:45:18: 01:84:be:6d:8f:37:eb:23:86:55:44:d7:dc:97:23: 1f:cc:86:62:b5:9a:72:9a:4c:6f:d3:4f:69:48:f7: 18:a9:79:60:be:3f:b9:d7:4e:4c:fc:cc:08:96:f2: 18:65:b2:62:7f:71:aa:0e:16:bd:40:1a:32:5b:54: bf:fe:eb:ef:37:5c:15:63:17:a2:fa:ef:86:0b:89: 2f:bb:0d:c7:88:3c:65:e6:f1:08:80:35:ea:25:86: a6:5e:fb:fe:e8:ab:fa:7e:20:fc:a0:ec:f7:5c:d2: 6e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A9:70:BF:2A:E0:37:30:30:A2:33:EB:74:03:37:4D:23:BC:CD:D8 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.1.0/24 157.254.8.0/24 157.254.250.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:4d:7c:84:86:79:f6:67:fa:2b:3b:7d:96:09:e2:15:b4:e0: 32:6d:a5:ab:52:af:ff:6d:d1:37:33:b8:a8:91:e6:a6:c3:f5: f4:54:db:53:6e:e2:3d:cf:e6:31:24:66:4b:89:9e:9b:01:69: 37:a3:22:70:2c:21:87:6c:07:66:88:70:9f:65:7c:42:ec:f5: 49:e4:b4:cc:47:f5:59:b1:75:f6:24:16:4c:6c:92:96:2f:70: 47:32:46:4e:9d:f4:17:48:60:7a:c4:88:77:66:c5:06:6e:b0: 57:78:26:98:70:2d:06:4a:3f:10:85:52:41:ff:a0:35:f9:d4: bf:af:71:1d:76:c6:43:0b:ae:51:8a:18:8e:87:78:85:e8:2a: dc:ed:c9:4d:25:e0:e4:2b:7d:d6:e3:b5:6f:76:02:9c:5d:d3: c4:96:7b:dc:69:43:3a:ed:ec:d3:d1:0e:f3:5d:23:83:43:04: d9:44:65:12:38:36:73:2f:6a:9e:fc:c9:be:da:96:05:9d:bc: cd:ee:9e:22:d0:60:45:2d:53:8f:04:ef:6d:33:3f:0f:f9:b3: 81:45:8a:68:c8:ca:83:ee:2f:8d:45:71:3f:69:e4:56:bc:38: 32:d7:00:ad:c8:f6:8e:dd:ca:3a:1e:37:5a:19:53:2c:61:68: ee:4d:1d:11 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUPZtQLrfNTBfSny3UzKo250U/hTMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNzE4MTAzNzM3WhcNMjcwNzE3MTA0MjM3 WjAzMTEwLwYDVQQDEyg1M0E5NzBCRjJBRTAzNzMwMzBBMjMzRUI3NDAzMzc0RDIz QkNDREQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV3YW9KcFPAl r16jq6G/6ag7bQZ1OOaFpv0kGk95OE0Uq9EZSoDVWa4tezANEoa0i5iKDwaspVbc BleEUMHuvTNrrnqbIGPetSSPDMACENWcSv5OSPdctYm8tXiYHWWXlKuC+odnvorG sd6DrB2SH2UtfJkUneMBpaUy7UWmXgV+sZ4VtcTsipKwqAuOxL+B0Ho9RRgBhL5t jzfrI4ZVRNfclyMfzIZitZpymkxv009pSPcYqXlgvj+5105M/MwIlvIYZbJif3Gq Dha9QBoyW1S//uvvN1wVYxei+u+GC4kvuw3HiDxl5vEIgDXqJYamXvv+6Kv6fiD8 oOz3XNJugQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFFOpcL8q4DcwMKIz63QDN00j vM3YMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzQwNjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAnf4BAwQAnf4IAwQAnf76MA0GCSqG SIb3DQEBCwUAA4IBAQA9TXyEhnn2Z/orO32WCeIVtOAybaWrUq//bdE3M7iokeam w/X0VNtTbuI9z+YxJGZLiZ6bAWk3oyJwLCGHbAdmiHCfZXxC7PVJ5LTMR/VZsXX2 JBZMbJKWL3BHMkZOnfQXSGB6xIh3ZsUGbrBXeCaYcC0GSj8QhVJB/6A1+dS/r3Ed dsZDC65RihiOh3iF6Crc7clNJeDkK33W47VvdgKcXdPElnvcaUM67ezT0Q7zXSOD QwTZRGUSODZzL2qe/Mm+2pYFnbzN7p4i0GBFLVOPBO9tMz8P+bOBRYpoyMqD7i+N RXE/aeRWvDgy1wCtyPaO3co6HjdaGVMsYWjuTR0R -----END CERTIFICATE-----Generated at Fri Jul 24 02:20:30 2026 by rpki-client