$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: JtFD0b+44MZ8aGNXqY+RNPa+B9aSuKzDW/pu9HwUalQ= Subject key identifier: 44:AC:CF:38:74:5A:1B:F7:3F:CB:05:EE:35:F6:E7:C5:2E:8C:9D:3F Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 01A1760EBBD2D582FAA38669EEA13A5376F7C83F Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa Signing time: Thu 24 Jul 2025 00:02:01 +0000 ROA not before: Wed 23 Jul 2025 23:57:01 +0000 ROA not after: Thu 23 Jul 2026 00:02:01 +0000 asID: 40676 IP address blocks: 64.50.184.0/23 maxlen: 24 107.173.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 10:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:76:0e:bb:d2:d5:82:fa:a3:86:69:ee:a1:3a:53:76:f7:c8:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jul 23 23:57:01 2025 GMT Not After : Jul 23 00:02:01 2026 GMT Subject: CN=44ACCF38745A1BF73FCB05EE35F6E7C52E8C9D3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d0:4d:2d:2c:ba:df:df:5e:22:73:d9:84:2a: 0e:06:b5:41:ec:dc:94:8e:22:36:7b:09:3f:dd:9d: 82:ea:0a:f1:fe:c8:67:30:50:19:81:5d:66:64:4c: 22:11:02:9d:89:96:66:09:4a:6e:3e:ee:c8:63:e2: 31:ff:aa:a8:37:47:60:bd:ee:ca:3c:bf:b6:3a:f3: 60:da:e3:48:2c:e6:ea:41:8c:0f:f0:e5:6c:ec:b4: e8:d6:a8:bf:a7:8e:6d:08:3d:f8:d3:b1:e0:9c:70: 6d:e7:e1:43:8c:e5:cc:b7:96:57:da:8e:ab:3a:e3: 20:da:c5:6f:5a:92:80:c4:59:94:28:33:75:12:d3: c8:aa:bd:35:a3:f2:14:03:be:e1:72:ec:4c:1b:8d: 28:f5:65:72:a4:34:4a:df:b4:08:d5:42:31:31:ee: 8e:7d:f5:8a:66:80:4f:a9:69:97:99:ac:3a:88:ce: ae:45:7c:1f:0a:5b:a4:71:f3:51:bf:df:85:ac:1c: 04:82:91:31:a5:ef:09:25:e5:d2:8c:42:ba:ee:fc: b9:d8:67:8f:c3:de:88:9f:32:dc:db:33:bf:68:17: 16:b3:35:62:ba:32:9c:37:77:92:6c:66:a3:16:f2: ae:f4:b7:da:f1:5b:00:64:42:0c:9e:bc:97:88:14: d0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AC:CF:38:74:5A:1B:F7:3F:CB:05:EE:35:F6:E7:C5:2E:8C:9D:3F X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.50.184.0/23 107.173.215.0/24 Signature Algorithm: sha256WithRSAEncryption 58:b1:50:cb:21:41:cf:ee:dc:dd:2b:0d:9e:a1:fc:6b:95:ed: 5e:61:e0:c1:1e:52:1e:a5:91:c3:25:3b:26:f2:30:ab:53:5b: 2a:e0:32:e7:fc:74:eb:84:86:ab:46:34:e1:15:8a:66:43:d5: 4f:54:10:7a:be:cb:22:7e:b7:02:ab:b5:fa:3d:95:9a:af:a2: ef:a3:97:4d:cb:4c:67:d1:0e:71:6f:a7:b5:6a:02:8a:ba:d9: 2f:1d:c8:f5:c1:c6:87:4f:34:fa:c5:1c:0b:72:d6:ed:e4:88: ce:36:7e:79:07:a8:9b:35:6c:28:d6:3d:95:00:61:87:a7:68: 94:87:8d:7a:37:af:71:da:69:11:eb:6f:84:13:3e:ae:a3:49: 5e:3a:03:37:28:da:5f:c4:1b:25:f1:6c:0e:20:84:3a:de:9c: 65:c8:ef:10:57:9d:ca:d8:3f:fd:c0:c8:94:26:3b:1b:ae:cb: fb:e3:9d:f9:18:c1:09:f1:ce:ce:45:f7:bc:c7:43:b6:75:89: f5:1b:4f:60:8f:c4:f4:a2:45:71:8d:71:1b:81:af:d0:1c:27: 3d:ff:35:e5:8e:cc:eb:84:14:ab:6e:4a:21:18:a8:77:57:b4: 9d:48:7e:ad:4a:75:69:35:26:b7:95:19:4b:3b:3e:94:3a:a6: 5a:e9:d9:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUAaF2DrvS1YL6o4Zp7qE6U3b3yD8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNzIzMjM1NzAxWhcNMjYwNzIzMDAwMjAx WjAzMTEwLwYDVQQDEyg0NEFDQ0YzODc0NUExQkY3M0ZDQjA1RUUzNUY2RTdDNTJF OEM5RDNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstBNLSy6399e InPZhCoOBrVB7NyUjiI2ewk/3Z2C6grx/shnMFAZgV1mZEwiEQKdiZZmCUpuPu7I Y+Ix/6qoN0dgve7KPL+2OvNg2uNILObqQYwP8OVs7LTo1qi/p45tCD3407HgnHBt 5+FDjOXMt5ZX2o6rOuMg2sVvWpKAxFmUKDN1EtPIqr01o/IUA77hcuxMG40o9WVy pDRK37QI1UIxMe6OffWKZoBPqWmXmaw6iM6uRXwfClukcfNRv9+FrBwEgpExpe8J JeXSjEK67vy52GePw96InzLc2zO/aBcWszViujKcN3eSbGajFvKu9Lfa8VsAZEIM nryXiBTQawIDAQABo4IChDCCAoAwHQYDVR0OBBYEFESszzh0Whv3P8sF7jX258Uu jJ0/MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzQwNjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBQDK4AwQAa63XMA0GCSqGSIb3DQEB CwUAA4IBAQBYsVDLIUHP7tzdKw2eofxrle1eYeDBHlIepZHDJTsm8jCrU1sq4DLn /HTrhIarRjThFYpmQ9VPVBB6vssifrcCq7X6PZWar6Lvo5dNy0xn0Q5xb6e1agKK utkvHcj1wcaHTzT6xRwLctbt5IjONn55B6ibNWwo1j2VAGGHp2iUh416N69x2mkR 62+EEz6uo0leOgM3KNpfxBsl8WwOIIQ63pxlyO8QV53K2D/9wMiUJjsbrsv74535 GMEJ8c7ORfe8x0O2dYn1G09gj8T0okVxjXEbga/QHCc9/zXljszrhBSrbkohGKh3 V7SdSH6tSnVpNSa3lRlLOz6UOqZa6dk6 -----END CERTIFICATE-----Generated at Sat Jul 26 02:46:30 2025 by rpki-client