$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: WjKNGkT3gKvBjbN89blqjeBg9uw5ljAEUP0KNON7Nec= Subject key identifier: C6:AE:AB:5D:BB:6C:C7:68:7E:F0:68:DC:D2:BA:37:7A:25:E9:4C:D6 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 143E2A673626BF58B6902AEB8159ECCCF159F8A4 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa Signing time: Wed 05 Aug 2026 06:52:14 +0000 ROA not before: Wed 05 Aug 2026 06:47:14 +0000 ROA not after: Wed 04 Aug 2027 06:52:14 +0000 asID: 40676 IP address blocks: 23.226.131.0/24 maxlen: 24 107.173.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Aug 2026 15:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:3e:2a:67:36:26:bf:58:b6:90:2a:eb:81:59:ec:cc:f1:59:f8:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Aug 5 06:47:14 2026 GMT Not After : Aug 4 06:52:14 2027 GMT Subject: CN=C6AEAB5DBB6CC7687EF068DCD2BA377A25E94CD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a4:ae:f8:f8:4e:55:81:86:3e:03:d4:4d:b4: 71:3f:dd:7d:07:c5:19:84:35:5c:20:bd:a0:9f:4d: 17:ac:4d:a5:27:1a:2d:7f:c4:a3:aa:cc:7d:10:ee: 94:d1:97:23:b6:f5:0b:f8:b5:39:f5:9c:77:7d:bc: 87:1f:e1:1e:0c:43:fa:fe:8f:33:e9:b1:ca:d8:0f: bf:70:ca:09:38:97:d2:a8:11:56:ec:0c:29:53:c9: 84:f2:27:0b:f9:80:3f:d8:bd:e8:00:6d:2b:ef:b8: d2:50:07:42:2c:ac:d6:63:48:13:d1:09:b1:9a:76: 73:e8:4b:b9:2b:c6:1c:a0:9a:24:82:93:4e:d9:33: 44:38:4c:4e:19:26:5a:b5:1f:13:9e:7c:89:f2:cc: 2b:00:97:11:01:93:7a:c0:33:aa:9a:d8:6f:a9:3b: 71:12:a0:94:72:65:29:2b:8c:db:5a:21:18:10:0a: 94:07:8d:2e:2c:31:d6:d0:66:34:92:e0:8d:f1:90: 1f:ff:ec:13:82:b1:6f:25:8f:88:b2:5a:e0:61:58: 29:e9:d7:9d:ba:80:da:f8:06:fb:fc:af:3f:43:aa: 0c:ff:45:c2:c7:6f:81:b1:8c:aa:23:f2:4f:36:75: 1a:d8:98:75:37:63:2c:ee:7e:37:89:d2:55:47:83: cc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AE:AB:5D:BB:6C:C7:68:7E:F0:68:DC:D2:BA:37:7A:25:E9:4C:D6 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.226.131.0/24 107.173.215.0/24 Signature Algorithm: sha256WithRSAEncryption 23:3a:c8:52:01:4e:04:9a:f3:7a:e1:19:c3:68:97:7c:c1:f8: 4c:d6:ae:73:69:55:a5:2c:c2:9b:60:fe:1c:3d:8f:e4:68:de: fb:ae:87:58:05:76:64:79:cd:bd:21:79:96:d1:fe:fc:c0:fb: ac:be:6d:0e:b5:bc:43:36:1f:bf:e1:9f:a4:eb:45:a0:07:00: a4:16:3f:1f:06:68:2b:7d:59:45:c5:78:52:48:be:4c:6b:65: ff:cb:94:42:97:63:de:c8:79:2b:4e:92:91:24:78:c6:67:76: 68:98:1e:63:94:45:09:1b:21:90:14:ec:d1:c4:11:81:be:af: 81:ed:89:6c:de:81:fb:40:01:20:0b:0c:97:8d:2a:1b:28:d7: 84:81:c4:11:7a:fe:53:d5:99:b1:b8:e0:2f:a6:06:69:4f:41: 91:ac:d7:32:17:c5:36:be:b3:47:35:c9:2b:ef:f0:df:d4:da: 83:80:74:cc:00:58:c1:ea:14:58:d9:91:8a:99:9b:96:6a:fb: d2:15:71:56:27:24:a6:73:95:24:22:8d:21:06:2b:fc:d1:c5: 17:01:75:fa:fe:62:a4:ae:03:f5:2e:f2:47:55:fa:25:1c:55: 36:1e:78:cf:04:a9:08:4e:f5:9e:93:52:45:5c:66:11:e9:96: 9f:32:5a:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUFD4qZzYmv1i2kCrrgVnszPFZ+KQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwODA1MDY0NzE0WhcNMjcwODA0MDY1MjE0 WjAzMTEwLwYDVQQDEyhDNkFFQUI1REJCNkNDNzY4N0VGMDY4RENEMkJBMzc3QTI1 RTk0Q0Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KSu+PhOVYGG PgPUTbRxP919B8UZhDVcIL2gn00XrE2lJxotf8Sjqsx9EO6U0ZcjtvUL+LU59Zx3 fbyHH+EeDEP6/o8z6bHK2A+/cMoJOJfSqBFW7AwpU8mE8icL+YA/2L3oAG0r77jS UAdCLKzWY0gT0QmxmnZz6Eu5K8YcoJokgpNO2TNEOExOGSZatR8TnnyJ8swrAJcR AZN6wDOqmthvqTtxEqCUcmUpK4zbWiEYEAqUB40uLDHW0GY0kuCN8ZAf/+wTgrFv JY+IslrgYVgp6deduoDa+Ab7/K8/Q6oM/0XCx2+BsYyqI/JPNnUa2Jh1N2Ms7n43 idJVR4PMsQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFMauq127bMdofvBo3NK6N3ol 6UzWMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzQwNjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF+KDAwQAa63XMA0GCSqGSIb3DQEB CwUAA4IBAQAjOshSAU4EmvN64RnDaJd8wfhM1q5zaVWlLMKbYP4cPY/kaN77rodY BXZkec29IXmW0f78wPusvm0OtbxDNh+/4Z+k60WgBwCkFj8fBmgrfVlFxXhSSL5M a2X/y5RCl2PeyHkrTpKRJHjGZ3ZomB5jlEUJGyGQFOzRxBGBvq+B7Yls3oH7QAEg CwyXjSobKNeEgcQRev5T1ZmxuOAvpgZpT0GRrNcyF8U2vrNHNckr7/Df1NqDgHTM AFjB6hRY2ZGKmZuWavvSFXFWJySmc5UkIo0hBiv80cUXAXX6/mKkrgP1LvJHVfol HFU2HnjPBKkITvWek1JFXGYR6ZafMlox -----END CERTIFICATE-----Generated at Mon Aug 10 20:18:37 2026 by rpki-client