$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: 8tz2NHStpfI4B/bcfxwnqqoDlAPd6gj6o22RivlwWjM= Subject key identifier: 58:12:22:B7:3A:46:AB:EE:AC:14:4A:83:7A:7D:A2:A2:B2:8C:B6:70 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 1975DA0A6B7B23B6BF0847D14329A425C650B9B2 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40676.roa Signing time: Thu 14 Aug 2025 14:09:16 +0000 ROA not before: Thu 14 Aug 2025 14:04:16 +0000 ROA not after: Thu 13 Aug 2026 14:09:16 +0000 asID: 40676 IP address blocks: 40.27.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 18:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:75:da:0a:6b:7b:23:b6:bf:08:47:d1:43:29:a4:25:c6:50:b9:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Aug 14 14:04:16 2025 GMT Not After : Aug 13 14:09:16 2026 GMT Subject: CN=581222B73A46ABEEAC144A837A7DA2A2B28CB670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:69:53:11:8e:a6:12:c5:03:6a:ad:04:16:ee: 87:47:bf:2c:ae:61:35:81:5b:9e:ba:dc:bf:15:e8: d5:c4:27:1e:d5:66:ff:7a:cf:ba:bc:79:81:bf:57: ad:03:91:3e:65:94:71:aa:76:15:e1:2a:54:94:0b: eb:d1:6c:43:fc:1f:bd:59:2a:c4:f5:f7:a9:9c:67: 31:f4:4a:d4:0b:b1:40:2b:b2:46:4b:6e:e8:44:1c: 82:6a:90:f6:64:73:be:b5:92:7b:9d:5d:91:01:5a: 36:f7:e2:56:ae:b1:f4:07:60:f6:d9:9f:38:84:be: 67:89:62:5d:72:40:33:46:b1:fd:3d:9f:bc:3c:87: a5:00:27:89:e4:9f:b1:c7:55:ae:00:4d:b6:0f:4b: 05:82:da:3c:56:b9:80:31:39:70:28:30:5a:ae:a9: 8b:f7:23:4e:f4:a0:c9:a4:38:2a:28:66:c0:89:fd: fd:15:56:7b:2c:f5:95:9b:46:91:e5:62:c3:fd:0b: cf:a1:8f:23:34:18:97:98:97:a9:89:32:35:69:19: f1:6a:d3:34:e3:c4:e9:bd:9f:d5:17:0a:11:fe:53: d5:6a:2d:7e:7d:7b:e5:c4:77:d4:ed:90:a8:c1:6c: 07:c9:ec:fb:97:d7:5b:78:e1:44:0c:9b:b4:42:86: 0b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:12:22:B7:3A:46:AB:EE:AC:14:4A:83:7A:7D:A2:A2:B2:8C:B6:70 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.12.0/24 Signature Algorithm: sha256WithRSAEncryption b8:41:af:46:0a:bb:f5:95:98:0d:8b:aa:89:38:ea:44:f7:a4: 30:be:2d:b5:23:4a:60:e8:c5:fa:bb:fc:01:33:c1:db:5b:69: 57:67:8a:33:bb:90:ef:9e:21:db:92:c0:68:2b:ae:a2:a5:69: df:c5:ad:57:5c:10:09:98:d2:a7:ff:48:9d:57:14:75:68:b8: bd:53:a2:76:93:31:39:2e:64:2c:3a:4a:cd:e5:72:ea:f1:2a: c1:56:39:b0:e0:0c:0b:fb:cd:74:d9:87:65:7c:85:4e:c9:aa: d0:77:27:0d:74:80:ad:69:fc:70:cb:23:ab:26:67:45:f6:65: 62:9e:77:a8:56:8d:62:e3:c1:65:1e:af:5f:d9:85:fc:23:77: 4a:90:4c:92:94:a1:77:a2:0a:5f:5e:0b:c8:64:0d:88:ad:62: a9:a1:1a:d5:a2:bd:38:cb:a2:19:79:de:7c:eb:a5:91:af:b2: 69:91:b0:27:b5:0f:93:6e:ad:a9:09:2a:5f:25:cc:c5:24:c4: b5:a0:8d:8e:c1:b0:bd:e7:77:61:70:47:87:56:a0:72:bc:17: ef:d2:b3:be:54:16:a9:04:ae:a2:d7:57:d1:f8:55:10:2e:3a: 1f:c3:14:bb:12:5e:9b:f9:8f:0c:05:c1:a9:2c:10:33:92:39: 9a:0c:ca:c3 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUGXXaCmt7I7a/CEfRQymkJcZQubIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwODE0MTQwNDE2WhcNMjYwODEzMTQwOTE2 WjAzMTEwLwYDVQQDEyg1ODEyMjJCNzNBNDZBQkVFQUMxNDRBODM3QTdEQTJBMkIy OENCNjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWlTEY6mEsUD aq0EFu6HR78srmE1gVueuty/FejVxCce1Wb/es+6vHmBv1etA5E+ZZRxqnYV4SpU lAvr0WxD/B+9WSrE9fepnGcx9ErUC7FAK7JGS27oRByCapD2ZHO+tZJ7nV2RAVo2 9+JWrrH0B2D22Z84hL5niWJdckAzRrH9PZ+8PIelACeJ5J+xx1WuAE22D0sFgto8 VrmAMTlwKDBarqmL9yNO9KDJpDgqKGbAif39FVZ7LPWVm0aR5WLD/QvPoY8jNBiX mJepiTI1aRnxatM048TpvZ/VFwoR/lPVai1+fXvlxHfU7ZCowWwHyez7l9dbeOFE DJu0QoYLhQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFFgSIrc6RqvurBRKg3p9oqKy jLZwMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzQwNjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKBsMMA0GCSqGSIb3DQEBCwUAA4IB AQC4Qa9GCrv1lZgNi6qJOOpE96Qwvi21I0pg6MX6u/wBM8HbW2lXZ4ozu5DvniHb ksBoK66ipWnfxa1XXBAJmNKn/0idVxR1aLi9U6J2kzE5LmQsOkrN5XLq8SrBVjmw 4AwL+8102YdlfIVOyarQdycNdICtafxwyyOrJmdF9mVinneoVo1i48FlHq9f2YX8 I3dKkEySlKF3ogpfXgvIZA2IrWKpoRrVor04y6IZed5866WRr7JpkbAntQ+Tbq2p CSpfJczFJMS1oI2OwbC953dhcEeHVqByvBfv0rO+VBapBK6i11fR+FUQLjofwxS7 El6b+Y8MBcGpLBAzkjmaDMrD -----END CERTIFICATE-----Generated at Thu Aug 21 06:56:42 2025 by rpki-client