$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: 9HplmCVzk3QLUJXMj3RHbZIGVoHRxTgOioGFOTWE4Sw= Subject key identifier: 38:B8:22:2E:0A:A4:5D:8E:EC:5C:FA:D8:79:43:07:49:4A:87:2A:37 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 65E3F106B84EFAB7373AF3E7454448EFB59D8A3B Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa Signing time: Tue 10 Nov 2026 08:24:59 +0000 ROA not before: Tue 10 Nov 2026 08:19:59 +0000 ROA not after: Tue 09 Nov 2027 08:24:59 +0000 asID: 40676 IP address blocks: 64.50.177.0/24 maxlen: 24 64.188.20.0/24 maxlen: 24 107.173.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 16:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e3:f1:06:b8:4e:fa:b7:37:3a:f3:e7:45:44:48:ef:b5:9d:8a:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Nov 10 08:19:59 2026 GMT Not After : Nov 9 08:24:59 2027 GMT Subject: CN=38B8222E0AA45D8EEC5CFAD8794307494A872A37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5c:f5:c0:77:be:f9:92:b3:95:0a:ad:89:64: 5e:dd:d3:57:9a:ca:dc:03:8a:89:f3:ee:dc:2d:c7: 26:ed:db:d7:ee:42:e2:8c:06:4b:1d:11:a2:83:e8: e1:2d:f1:ad:0e:32:d0:cd:2b:a7:52:28:56:6b:41: 00:70:16:7e:d1:43:b2:62:17:ba:54:42:04:f2:d7: cd:86:21:21:5d:56:45:08:cc:e0:36:94:3a:95:26: 45:d6:3c:56:da:12:46:ed:e8:4f:30:46:22:0b:6a: 6f:1b:47:65:76:68:fa:5a:15:fd:2e:5e:57:0f:70: 9d:8d:31:11:e0:a8:07:3c:9d:0e:1c:15:3b:58:09: 54:16:f3:c1:7f:98:f2:3f:0a:13:41:37:48:5d:b3: 2f:42:cf:84:fb:f7:56:83:9b:0f:a7:84:09:14:08: 85:39:fc:22:8c:fe:5a:a2:85:f3:dd:b3:41:5d:22: d1:5f:f7:c7:38:cd:f7:1f:1c:35:6d:8f:94:fb:17: ed:8f:d8:c8:9e:57:19:6f:22:39:c1:87:03:b1:c6: 2e:b8:ff:0c:3b:7e:db:8c:c5:67:19:c8:63:ce:a2: c5:30:da:72:c0:ec:5d:f8:8b:80:27:c2:ff:b3:c4: 6a:57:0b:ae:eb:02:a5:59:02:5e:2c:57:c3:01:03: 8a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B8:22:2E:0A:A4:5D:8E:EC:5C:FA:D8:79:43:07:49:4A:87:2A:37 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.50.177.0/24 64.188.20.0/24 107.173.215.0/24 Signature Algorithm: sha256WithRSAEncryption 79:69:ea:98:c7:f0:2d:be:8a:25:52:19:7f:8d:91:ae:a8:48: 24:41:a2:5d:f9:b3:ae:1b:17:8d:e8:f6:38:11:f8:89:b8:41: 9d:30:d7:7f:57:f3:89:b3:d7:79:66:1e:04:4b:e5:f6:a1:d1: b2:c0:27:aa:b4:f6:e8:42:c5:78:f2:73:47:5d:df:40:9f:90: 90:7b:5d:46:e1:b7:ec:9a:9b:15:84:0c:af:0e:4d:06:56:f5: d1:f6:c0:53:ad:1e:0f:6b:7b:9e:e5:03:2f:47:cf:aa:87:ac: b5:ca:12:fd:68:da:eb:5b:62:f5:03:95:b6:68:e1:e4:41:b0: e4:89:59:0b:7e:81:48:05:63:ad:e9:72:8d:c5:7f:5c:dc:ca: e8:5f:32:0c:6e:ea:73:dd:5c:f0:de:82:2f:37:b7:74:72:5e: d4:6d:5b:22:e3:e8:3e:5b:52:17:72:62:6d:13:df:ff:c8:0a: 1f:64:5c:3d:03:19:b6:71:55:ed:8f:7c:e6:33:5d:ec:91:4b: 64:05:14:db:92:c2:b4:a0:70:e9:44:10:79:d0:79:68:6a:49: 2a:1c:59:97:4f:ee:f9:69:f8:c1:13:14:1b:15:0f:35:a5:83: 4a:52:2a:96:ee:1c:dc:08:30:39:bd:28:32:53:49:69:dc:ec: 92:78:b0:ff -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUZePxBrhO+rc3OvPnRURI77WdijswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYxMTEwMDgxOTU5WhcNMjcxMTA5MDgyNDU5 WjAzMTEwLwYDVQQDEygzOEI4MjIyRTBBQTQ1RDhFRUM1Q0ZBRDg3OTQzMDc0OTRB ODcyQTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlz1wHe++ZKz lQqtiWRe3dNXmsrcA4qJ8+7cLccm7dvX7kLijAZLHRGig+jhLfGtDjLQzSunUihW a0EAcBZ+0UOyYhe6VEIE8tfNhiEhXVZFCMzgNpQ6lSZF1jxW2hJG7ehPMEYiC2pv G0dldmj6WhX9Ll5XD3CdjTER4KgHPJ0OHBU7WAlUFvPBf5jyPwoTQTdIXbMvQs+E +/dWg5sPp4QJFAiFOfwijP5aooXz3bNBXSLRX/fHOM33Hxw1bY+U+xftj9jInlcZ byI5wYcDscYuuP8MO37bjMVnGchjzqLFMNpywOxd+IuAJ8L/s8RqVwuu6wKlWQJe LFfDAQOKyQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFDi4Ii4KpF2O7Fz62HlDB0lK hyo3MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzQwNjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQDKxAwQAQLwUAwQAa63XMA0GCSqG SIb3DQEBCwUAA4IBAQB5aeqYx/AtvoolUhl/jZGuqEgkQaJd+bOuGxeN6PY4EfiJ uEGdMNd/V/OJs9d5Zh4ES+X2odGywCeqtPboQsV48nNHXd9An5CQe11G4bfsmpsV hAyvDk0GVvXR9sBTrR4Pa3ue5QMvR8+qh6y1yhL9aNrrW2L1A5W2aOHkQbDkiVkL foFIBWOt6XKNxX9c3MroXzIMbupz3Vzw3oIvN7d0cl7UbVsi4+g+W1IXcmJtE9// yAofZFw9Axm2cVXtj3zmM13skUtkBRTbksK0oHDpRBB50HloakkqHFmXT+75afjB ExQbFQ81pYNKUiqW7hzcCDA5vSgyU0lp3OySeLD/ -----END CERTIFICATE-----Generated at Tue Nov 10 20:43:49 2026 by rpki-client