$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40605.roa File: AS40605.roa (raw, json) Hash identifier: zjH6IqtOqUZXzDdRCkqdY8cOap4h2ucmBAcDoH5XuWg= Subject key identifier: 2B:68:16:51:53:03:B0:67:33:FC:19:6F:51:90:F8:01:29:B1:67:F6 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 4BE1AFAE23D2F1907E363258D6CFB6A26480CA14 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40605.roa Signing time: Mon 02 Nov 2026 02:36:21 +0000 ROA not before: Mon 02 Nov 2026 02:31:21 +0000 ROA not after: Mon 01 Nov 2027 02:36:21 +0000 asID: 40605 IP address blocks: 40.27.48.0/24 maxlen: 24 40.27.49.0/24 maxlen: 24 40.27.50.0/24 maxlen: 24 40.27.52.0/24 maxlen: 24 40.27.53.0/24 maxlen: 24 40.27.54.0/24 maxlen: 24 40.27.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 13:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e1:af:ae:23:d2:f1:90:7e:36:32:58:d6:cf:b6:a2:64:80:ca:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Nov 2 02:31:21 2026 GMT Not After : Nov 1 02:36:21 2027 GMT Subject: CN=2B6816515303B06733FC196F5190F80129B167F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c8:96:b7:a7:8f:86:15:2b:fa:5a:49:0a:1a: b9:95:d1:f4:8e:02:99:88:28:ce:0b:b5:cc:db:12: 45:bc:f4:92:49:95:e3:1c:80:c4:c0:92:e6:c3:2c: b2:19:9d:d4:dd:c8:23:d1:8f:73:f6:9f:da:a5:35: 68:84:88:c8:61:cb:0e:1c:d4:80:89:82:6a:43:38: 2f:02:d2:d5:39:61:2d:e2:8f:aa:c4:09:e2:d2:ae: 7c:42:76:09:7a:fd:34:67:2d:bc:47:80:ec:f3:7b: 43:0d:25:b2:71:71:c8:97:d2:7b:ea:9e:63:33:2e: 1c:84:5d:b3:c9:f4:9d:f9:fb:80:21:c8:74:2b:a2: 78:47:14:74:e6:ff:d7:18:fc:ab:e4:6e:ef:8a:a3: ac:0d:df:f4:ec:64:d9:14:96:6d:95:cb:16:ee:d6: 60:d9:7e:bb:6e:c9:47:28:70:f6:67:c3:51:5f:dc: e2:7c:d2:a7:1d:06:e5:dd:55:38:00:be:4a:b8:fe: fd:9c:00:39:80:be:27:b9:76:e1:36:9b:c2:9f:53: ed:bc:a6:d8:5a:08:7f:19:2e:c6:5d:2a:3e:d2:cb: 79:91:2f:37:20:24:88:2e:c8:9f:63:32:d6:4e:da: dc:73:3a:dd:e4:cc:95:68:85:b0:17:d9:39:1b:c1: 38:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:68:16:51:53:03:B0:67:33:FC:19:6F:51:90:F8:01:29:B1:67:F6 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40605.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.48.0-40.27.50.255 40.27.52.0-40.27.54.255 40.27.133.0/24 Signature Algorithm: sha256WithRSAEncryption 13:1f:fc:ad:03:b1:af:84:5d:c9:84:84:7c:87:e0:a5:fe:8c: 23:64:41:06:61:51:36:be:ec:fb:a4:53:43:f7:c9:2a:01:78: d5:53:e2:4e:3a:c3:88:51:e5:da:0e:9b:45:e8:78:16:bb:aa: 53:5d:cf:36:f4:2e:fe:a3:04:a3:de:ac:0c:9f:bf:9c:6b:47: 73:49:e8:41:3c:7d:d3:68:b5:2d:97:ba:18:8e:36:2c:90:04: db:87:e5:c8:82:54:5c:8b:9b:91:1d:14:e1:86:73:ab:62:d9: 52:a3:5c:95:26:e2:f6:10:60:37:c9:dc:b2:28:cc:16:73:09: b0:28:11:9e:23:92:11:af:ee:5a:51:e6:b9:27:dc:41:1a:82: 57:df:5b:56:48:e7:fa:a6:d2:17:e1:3a:48:90:b4:85:9e:fd: 76:3e:0a:25:54:12:2b:64:c4:17:df:d6:9c:e4:3f:cc:a3:73: 59:42:65:4d:de:c9:58:8e:71:74:18:00:b4:ad:c5:b7:b7:d4: 05:4c:81:28:10:c2:dc:7c:82:97:9b:99:cf:a8:6e:58:c4:4b: e1:a8:b8:b7:aa:17:ed:cb:2b:a4:06:a5:5c:51:83:2e:de:f3: a1:1d:f6:0e:b9:d7:fc:6a:77:d2:03:ef:e7:e4:ac:4e:bf:50: 1f:47:d3:11 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgIUS+GvriPS8ZB+NjJY1s+2omSAyhQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYxMTAyMDIzMTIxWhcNMjcxMTAxMDIzNjIx WjAzMTEwLwYDVQQDEygyQjY4MTY1MTUzMDNCMDY3MzNGQzE5NkY1MTkwRjgwMTI5 QjE2N0Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysiWt6ePhhUr +lpJChq5ldH0jgKZiCjOC7XM2xJFvPSSSZXjHIDEwJLmwyyyGZ3U3cgj0Y9z9p/a pTVohIjIYcsOHNSAiYJqQzgvAtLVOWEt4o+qxAni0q58QnYJev00Zy28R4Ds83tD DSWycXHIl9J76p5jMy4chF2zyfSd+fuAIch0K6J4RxR05v/XGPyr5G7viqOsDd/0 7GTZFJZtlcsW7tZg2X67bslHKHD2Z8NRX9zifNKnHQbl3VU4AL5KuP79nAA5gL4n uXbhNpvCn1PtvKbYWgh/GS7GXSo+0st5kS83ICSILsifYzLWTtrcczrd5MyVaIWw F9k5G8E45QIDAQABo4ICmjCCApYwHQYDVR0OBBYEFCtoFlFTA7BnM/wZb1GQ+AEp sWf2MB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzQwNjA1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsG CCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAQoGzADBAAoGzIwDAMEAigbNAME ACgbNgMEACgbhTANBgkqhkiG9w0BAQsFAAOCAQEAEx/8rQOxr4RdyYSEfIfgpf6M I2RBBmFRNr7s+6RTQ/fJKgF41VPiTjrDiFHl2g6bReh4FruqU13PNvQu/qMEo96s DJ+/nGtHc0noQTx902i1LZe6GI42LJAE24flyIJUXIubkR0U4YZzq2LZUqNclSbi 9hBgN8ncsijMFnMJsCgRniOSEa/uWlHmuSfcQRqCV99bVkjn+qbSF+E6SJC0hZ79 dj4KJVQSK2TEF9/WnOQ/zKNzWUJlTd7JWI5xdBgAtK3Ft7fUBUyBKBDC3HyCl5uZ z6huWMRL4ai4t6oX7csrpAalXFGDLt7zoR32DrnX/Gp30gPv5+SsTr9QH0fTEQ== -----END CERTIFICATE-----Generated at Thu Nov 5 18:52:56 2026 by rpki-client