
$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: G2hmK4dnrhotmEeSBlU2YaEbBcphPOKJf3rlXD497d4=
Subject key identifier: 3B:4D:E0:49:50:F6:82:57:6A:DC:31:1E:01:6D:4D:8B:61:6D:97:CA
Certificate issuer: /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial: 44C6F4A5045EA83ABF7A278556DA94BCDC67E8E3
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access: rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS40676.roa
Signing time: Sun 30 Aug 2026 12:41:51 +0000
ROA not before: Sun 30 Aug 2026 12:36:51 +0000
ROA not after: Sun 29 Aug 2027 12:41:51 +0000
asID: 40676
IP address blocks: 216.75.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 19:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:c6:f4:a5:04:5e:a8:3a:bf:7a:27:85:56:da:94:bc:dc:67:e8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Validity
Not Before: Aug 30 12:36:51 2026 GMT
Not After : Aug 29 12:41:51 2027 GMT
Subject: CN=3B4DE04950F682576ADC311E016D4D8B616D97CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:e9:b5:1c:fe:84:a2:ad:5e:19:9e:d0:66:
12:1e:b0:12:44:e4:bb:c2:0b:37:ba:c2:03:f2:b8:
dd:19:e9:3a:57:cb:96:b5:c4:de:b3:9e:88:fa:9e:
a6:bc:74:ac:94:d6:3d:f1:ba:97:40:7e:85:75:30:
cb:9f:69:79:74:73:45:e5:4f:09:8c:38:f2:66:49:
fa:c8:b5:75:d0:f2:bb:72:8d:b8:51:d7:37:1e:5a:
cf:52:ea:2c:bd:53:b5:c2:36:bf:75:1b:ad:40:b2:
c4:02:32:95:22:88:b1:a5:cb:25:04:49:30:af:8a:
6f:13:89:cc:37:5a:cd:7c:82:05:c6:06:1e:cb:36:
91:bd:92:45:e1:c6:d5:4f:a1:56:0e:1d:65:59:37:
8d:6e:f9:7a:f5:3e:7f:26:8a:0a:b4:24:4f:37:e5:
83:bb:64:82:a5:92:11:ae:0f:17:37:d6:9f:fb:fe:
52:f3:c3:db:e0:3e:de:0b:c6:b7:d6:11:7d:77:a1:
0f:31:67:82:0d:cc:98:11:1f:c3:aa:f6:b2:a3:5c:
77:4b:d7:b7:78:56:30:64:f2:e8:46:88:7c:ff:b5:
f9:5f:8e:e5:32:b0:05:4e:df:f8:3b:6b:84:cf:a3:
08:e8:6d:eb:5a:53:99:e1:22:e8:9e:ab:cf:e7:52:
3b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4D:E0:49:50:F6:82:57:6A:DC:31:1E:01:6D:4D:8B:61:6D:97:CA
X509v3 Authority Key Identifier:
keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.75.147.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:95:af:fd:3e:7d:7e:d3:c0:54:20:ef:16:0c:01:9e:d6:21:
7a:1b:18:a2:20:f4:78:c0:22:fc:c5:fd:4d:aa:fa:fa:41:80:
82:e2:fc:29:83:6b:6f:b4:e9:a6:34:c1:50:23:fb:5d:d2:2c:
56:78:e0:5a:d3:79:d3:c9:10:cd:8d:93:c1:1a:e8:9f:46:53:
de:68:39:db:12:cb:70:10:5a:f3:9c:b3:b3:6c:40:c9:f7:39:
95:9d:bd:ff:51:74:f8:93:11:e8:4d:0a:41:f4:c3:2b:60:36:
bb:53:f7:09:72:01:97:8b:61:de:5b:1a:bd:f7:c1:3b:2f:3b:
cf:51:98:f2:02:be:43:ba:12:37:d6:f9:d8:8f:9e:5f:4f:f2:
23:2e:2f:9e:4a:cb:a1:6b:d9:49:ee:f1:f4:5b:c9:3c:75:30:
78:8d:31:c1:ae:df:f5:d1:a8:58:1b:3a:fc:44:01:9b:ae:ed:
ba:d7:e8:c2:6e:9d:fc:fd:94:38:30:38:c8:2d:f4:91:2e:a3:
fd:f6:f7:bd:eb:20:73:e7:db:bf:94:91:9d:26:34:bd:20:b4:
61:65:f5:ee:89:64:39:b3:ee:e6:71:d2:5b:4a:51:55:c4:e4:
88:6d:5f:11:81:a0:78:ed:fc:45:74:94:51:93:9f:ed:7c:cf:
b9:e3:68:fd
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIURMb0pQReqDq/eieFVtqUvNxn6OMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw
Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYwODMwMTIzNjUxWhcNMjcwODI5MTI0MTUx
WjAzMTEwLwYDVQQDEygzQjRERTA0OTUwRjY4MjU3NkFEQzMxMUUwMTZENEQ4QjYx
NkQ5N0NBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArELptRz+hKKt
Xhme0GYSHrASROS7wgs3usID8rjdGek6V8uWtcTes56I+p6mvHSslNY98bqXQH6F
dTDLn2l5dHNF5U8JjDjyZkn6yLV10PK7co24Udc3HlrPUuosvVO1wja/dRutQLLE
AjKVIoixpcslBEkwr4pvE4nMN1rNfIIFxgYeyzaRvZJF4cbVT6FWDh1lWTeNbvl6
9T5/JooKtCRPN+WDu2SCpZIRrg8XN9af+/5S88Pb4D7eC8a31hF9d6EPMWeCDcyY
ER/Dqvayo1x3S9e3eFYwZPLoRoh8/7X5X47lMrAFTt/4O2uEz6MI6G3rWlOZ4SLo
nqvP51I7jQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFDtN4ElQ9oJXatwxHgFtTYth
bZfKMB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv
RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk
Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4
NmRkM2YvMC9BUzQwNjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EuTMA0GCSqGSIb3DQEBCwUAA4IB
AQBMla/9Pn1+08BUIO8WDAGe1iF6GxiiIPR4wCL8xf1Nqvr6QYCC4vwpg2tvtOmm
NMFQI/td0ixWeOBa03nTyRDNjZPBGuifRlPeaDnbEstwEFrznLOzbEDJ9zmVnb3/
UXT4kxHoTQpB9MMrYDa7U/cJcgGXi2HeWxq998E7LzvPUZjyAr5DuhI31vnYj55f
T/IjLi+eSsuha9lJ7vH0W8k8dTB4jTHBrt/10ahYGzr8RAGbru261+jCbp38/ZQ4
MDjILfSRLqP99ve96yBz59u/lJGdJjS9ILRhZfXuiWQ5s+7mcdJbSlFVxOSIbV8R
gaB47fxFdJRRk5/tfM+542j9
-----END CERTIFICATE-----
Generated at Sat Sep 5 05:19:48 2026 by rpki-client