$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40605.roa File: AS40605.roa (raw, json) Hash identifier: /W9tnDq8uC+EMCJ340rHyBGA8ym/Y6dc7NHDRpLeWrk= Subject key identifier: 27:DE:9A:E8:6B:78:86:EA:91:6A:C5:FE:A9:B9:05:C9:A6:5A:47:5A Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 56EBF5CDEA97E6072B9FA8E6A0D53659DBD6BA8B Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40605.roa Signing time: Fri 11 Jul 2025 08:06:09 +0000 ROA not before: Fri 11 Jul 2025 08:01:09 +0000 ROA not after: Fri 10 Jul 2026 08:06:09 +0000 asID: 40605 IP address blocks: 40.27.50.0/24 maxlen: 24 40.27.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 03:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:eb:f5:cd:ea:97:e6:07:2b:9f:a8:e6:a0:d5:36:59:db:d6:ba:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Jul 11 08:01:09 2025 GMT Not After : Jul 10 08:06:09 2026 GMT Subject: CN=27DE9AE86B7886EA916AC5FEA9B905C9A65A475A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:27:a7:64:75:4f:9f:47:e5:c5:65:0d:2a:8f: 07:f1:13:19:cf:06:e7:bd:c4:ba:29:30:fa:26:ec: 3c:5b:ea:65:a9:ed:20:38:a8:fa:80:4a:7e:d6:55: c2:20:82:5a:35:e5:ff:31:cb:65:08:02:c4:92:06: da:b7:f2:a3:36:81:4e:e1:2e:75:02:0f:93:fc:1c: d2:39:ae:c5:f8:ba:29:e9:4d:c4:c1:84:b7:fc:03: 51:05:16:8d:95:67:18:3c:bf:00:e9:12:e0:5b:82: a7:a4:e7:90:52:7a:e9:c2:4d:0b:28:48:11:c4:8f: de:1b:f7:1d:ca:8a:64:ec:38:6b:4a:28:81:1c:10: c3:f2:17:40:4c:50:09:dc:4b:6e:af:a8:49:e0:53: 71:82:61:03:42:91:3c:95:6b:d4:db:3b:3e:10:68: a3:a2:c2:2c:96:d6:fe:38:2a:99:f6:26:e1:bc:fa: 03:0d:05:d4:0b:dd:7a:a3:05:3e:2c:73:61:02:ed: 5f:7f:e2:43:6d:8c:73:5b:96:bd:9f:1c:cf:1c:a6: 70:17:e6:53:a1:e3:5c:7c:6e:84:60:8f:a5:b3:c5: b3:48:68:ef:74:12:d7:d9:5b:59:14:cd:17:ec:d3: 8d:00:53:a8:b6:90:b0:af:23:8d:d7:e4:50:15:a7: 6d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DE:9A:E8:6B:78:86:EA:91:6A:C5:FE:A9:B9:05:C9:A6:5A:47:5A X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40605.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.50.0/24 40.27.53.0/24 Signature Algorithm: sha256WithRSAEncryption 72:39:a0:d5:92:fc:21:bf:76:ef:b1:27:d2:7c:df:bb:e8:dd: 8c:19:2b:d7:6d:43:ff:4c:64:55:4b:49:b1:44:7a:81:ba:0c: 46:da:91:b1:c4:8f:01:56:56:55:41:0f:41:7f:81:5d:bd:80: c0:2c:f0:09:4f:71:05:b2:06:ba:82:b3:52:67:7d:9b:b2:54: 4c:b3:0d:4a:1e:60:53:f0:e7:5c:d1:c6:d4:1c:10:fb:95:bf: 96:d1:98:47:df:ca:7c:41:2b:02:74:17:14:8b:ff:65:6d:81: 8c:58:11:ca:f5:07:c1:6c:71:96:f7:24:12:87:64:71:b4:98: 3a:b7:2a:6d:b7:6e:08:7f:50:f3:02:43:f2:50:17:d3:54:61: 14:ae:5a:91:09:5e:98:23:04:fa:0e:2c:52:b4:19:04:49:cd: eb:41:0d:df:22:13:16:af:a6:63:08:4d:4e:e2:d0:9d:75:6a: 0e:a6:8f:0a:56:dc:aa:b6:82:d1:1c:1a:e7:df:63:fe:36:15: c8:70:b9:35:ee:3a:ea:6c:29:6d:1a:46:85:ce:7f:73:82:e4: 02:36:58:a0:c7:14:4d:8e:2d:ed:e9:c4:71:61:b4:3b:22:9a: 42:52:1e:c4:d4:bb:17:aa:86:aa:a1:38:c7:4d:8f:ed:c3:ef: a9:ad:94:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUVuv1zeqX5gcrn6jmoNU2WdvWuoswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwNzExMDgwMTA5WhcNMjYwNzEwMDgwNjA5 WjAzMTEwLwYDVQQDEygyN0RFOUFFODZCNzg4NkVBOTE2QUM1RkVBOUI5MDVDOUE2 NUE0NzVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSenZHVPn0fl xWUNKo8H8RMZzwbnvcS6KTD6Juw8W+plqe0gOKj6gEp+1lXCIIJaNeX/MctlCALE kgbat/KjNoFO4S51Ag+T/BzSOa7F+Lop6U3EwYS3/ANRBRaNlWcYPL8A6RLgW4Kn pOeQUnrpwk0LKEgRxI/eG/cdyopk7DhrSiiBHBDD8hdATFAJ3Etur6hJ4FNxgmED QpE8lWvU2zs+EGijosIsltb+OCqZ9ibhvPoDDQXUC916owU+LHNhAu1ff+JDbYxz W5a9nxzPHKZwF+ZToeNcfG6EYI+ls8WzSGjvdBLX2VtZFM0X7NONAFOotpCwryON 1+RQFadtFQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFCfemuhreIbqkWrF/qm5Bcmm WkdaMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzQwNjA1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAKBsyAwQAKBs1MA0GCSqGSIb3DQEB CwUAA4IBAQByOaDVkvwhv3bvsSfSfN+76N2MGSvXbUP/TGRVS0mxRHqBugxG2pGx xI8BVlZVQQ9Bf4FdvYDALPAJT3EFsga6grNSZ32bslRMsw1KHmBT8Odc0cbUHBD7 lb+W0ZhH38p8QSsCdBcUi/9lbYGMWBHK9QfBbHGW9yQSh2RxtJg6typtt24If1Dz AkPyUBfTVGEUrlqRCV6YIwT6DixStBkESc3rQQ3fIhMWr6ZjCE1O4tCddWoOpo8K VtyqtoLRHBrn32P+NhXIcLk17jrqbCltGkaFzn9zguQCNligxxRNji3t6cRxYbQ7 IppCUh7E1LsXqoaqoTjHTY/tw++prZRk -----END CERTIFICATE-----Generated at Sun Jul 20 17:26:34 2025 by rpki-client