
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40352.roa
File: AS40352.roa (raw, json)
Hash identifier: +2aAV5sJlDMgI1jvaw/Tv/HH4M1aD3pMNLSdSQ7B+CQ=
Subject key identifier: AF:AC:9F:DE:A6:7E:B2:62:5D:6B:F4:DF:F7:FF:6E:07:F2:F9:02:D1
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 336C0E748355B18FE5859A7334E1E4104484AA8E
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40352.roa
Signing time: Mon 01 Jun 2026 07:37:49 +0000
ROA not before: Mon 01 Jun 2026 07:32:49 +0000
ROA not after: Mon 31 May 2027 07:37:49 +0000
asID: 40352
IP address blocks: 157.254.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Jun 2026 18:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:6c:0e:74:83:55:b1:8f:e5:85:9a:73:34:e1:e4:10:44:84:aa:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Jun 1 07:32:49 2026 GMT
Not After : May 31 07:37:49 2027 GMT
Subject: CN=AFAC9FDEA67EB2625D6BF4DFF7FF6E07F2F902D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f5:5d:cd:cd:63:4e:ec:0c:2d:b1:ed:b9:31:
b0:af:49:7a:ee:41:c2:37:72:84:75:08:39:5d:f4:
f3:fd:fb:8b:90:b1:5a:2e:07:7f:22:e6:17:4c:5c:
6b:a9:34:c9:82:ef:9f:81:27:8b:22:48:6c:fa:d9:
98:eb:98:ed:88:c4:c9:77:98:ef:47:8b:07:b4:1b:
d3:f1:ba:2d:66:f1:db:f2:e4:d3:89:67:e3:92:ce:
02:8a:75:71:a8:76:75:82:15:58:d2:dd:ea:89:75:
2c:2b:f6:ed:95:e1:bd:84:7d:2d:e2:7c:59:81:db:
07:d8:b7:6e:2a:d2:2c:16:e3:f9:28:0e:27:79:b6:
cc:71:5f:58:7f:ad:b8:5e:d9:99:37:d3:93:cd:3d:
48:4e:2b:26:88:01:a0:22:0e:39:4f:79:aa:88:7f:
ef:9a:f6:d2:dd:0a:1d:1a:f2:c9:dc:71:fe:35:21:
da:29:e4:db:9a:be:36:25:b2:93:51:29:b1:53:89:
8a:de:31:5b:77:e8:d5:1f:6d:05:e3:83:be:b3:73:
e5:36:5d:39:bb:b1:c1:4b:8f:1d:f2:4a:1d:d1:f3:
ed:3b:88:8b:cf:93:80:12:8f:d2:01:08:f8:bc:8c:
ab:28:38:3e:30:45:5a:3c:77:bc:d8:55:b8:cb:21:
85:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AC:9F:DE:A6:7E:B2:62:5D:6B:F4:DF:F7:FF:6E:07:F2:F9:02:D1
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40352.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.232.0/24
Signature Algorithm: sha256WithRSAEncryption
72:4d:48:5f:2a:72:2a:b3:3c:05:aa:f6:b3:a8:8b:bd:f5:93:
b1:a0:db:bc:f9:1a:ed:2e:7e:2d:d7:60:63:15:67:33:ff:0d:
8a:14:07:df:31:c4:d9:3e:0d:9b:6d:09:1e:b5:f7:e6:82:fe:
c0:21:d2:b2:39:e1:f2:30:f0:0c:5c:c5:86:93:ac:f4:5e:e0:
5c:67:57:de:67:9b:79:c2:b4:4d:53:72:9e:50:43:1d:0b:aa:
05:d3:7d:fd:65:d2:45:ce:0e:3a:8a:f7:5e:1f:50:bd:57:a5:
d8:6a:f8:52:9f:6d:41:f4:05:3c:bf:52:88:7c:ea:54:27:b1:
dd:c4:c3:46:08:61:bd:6c:88:79:aa:c8:0e:2b:62:e9:9c:b2:
54:ae:10:ca:e8:4c:34:ca:bf:48:37:34:56:ea:3a:2b:80:be:
5b:71:f0:de:69:d5:2e:f1:07:c2:fe:b0:be:53:bd:70:d9:42:
5f:55:d4:46:a2:d8:68:e2:5f:79:65:89:ba:b9:81:66:24:76:
f8:e2:85:49:99:16:61:ee:9a:a4:86:b9:b4:1f:c1:d2:3a:e9:
93:49:9a:15:82:a7:88:60:a8:52:b2:1a:d2:d7:5c:54:ff:eb:
7d:d3:59:31:03:18:f6:10:ea:27:30:ed:ef:4b:68:78:4d:3a:
0b:f5:2c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 22:24:46 2026 by rpki-client