$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: 7yoBr9FcqLSC1AqkwPU7yOKuvPETI2elAH+rpHQSYPM= Subject key identifier: 25:7E:D9:44:24:D8:D2:7F:44:F6:0C:36:AC:F5:93:64:07:E5:DA:D1 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 65637BC040FC2E407EA0A59CDFAFB1D6B9F8063F Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40676.roa Signing time: Sat 25 Jul 2026 21:48:44 +0000 ROA not before: Sat 25 Jul 2026 21:43:44 +0000 ROA not after: Sat 24 Jul 2027 21:48:44 +0000 asID: 40676 IP address blocks: 40.27.83.0/24 maxlen: 24 40.27.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 10:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:63:7b:c0:40:fc:2e:40:7e:a0:a5:9c:df:af:b1:d6:b9:f8:06:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Jul 25 21:43:44 2026 GMT Not After : Jul 24 21:48:44 2027 GMT Subject: CN=257ED94424D8D27F44F60C36ACF5936407E5DAD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f3:e1:07:fc:2a:d3:62:29:db:bc:3f:6f:79: 76:5b:26:a9:ab:7d:d2:e0:ce:53:51:47:2a:75:81: 18:71:ec:42:a4:ba:b2:04:a6:35:a3:75:0b:91:bd: a3:41:79:dc:60:c1:04:f3:4b:13:ca:10:cf:91:1b: cb:ae:49:86:b0:ba:56:85:79:fc:59:f0:26:b7:6c: 0a:1c:3f:5f:47:11:81:ff:d8:2d:cc:a1:bb:70:bc: fd:1e:f5:df:4f:f6:1d:37:a4:5d:fb:f3:f6:6c:2d: 7d:93:c4:d0:97:91:93:3b:59:a7:f8:ca:15:79:d3: c9:51:60:df:66:e0:50:96:95:aa:3a:91:39:f1:f4: fc:04:1f:52:a4:6f:3d:66:a5:b1:8f:6c:88:ff:b1: 70:a0:fd:d1:a8:3c:f4:21:f8:d0:93:f0:73:af:a1: f1:5b:4e:9b:e9:69:4c:94:85:ae:4c:73:bf:e9:88: ac:09:dc:bd:03:e3:df:d1:d0:93:89:46:2b:98:eb: 03:73:24:e1:22:34:5a:62:43:6e:56:32:ea:9d:d9: c3:95:ae:75:29:b9:4a:85:17:4b:11:9d:ee:34:13: 64:8d:23:9b:33:2d:83:99:71:a7:a3:ba:6c:2b:8d: 4a:b5:22:13:b6:2a:36:ee:e2:44:19:b9:4b:bf:d0: 72:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7E:D9:44:24:D8:D2:7F:44:F6:0C:36:AC:F5:93:64:07:E5:DA:D1 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.83.0/24 40.27.216.0/24 Signature Algorithm: sha256WithRSAEncryption ab:c4:57:1b:c3:d5:30:74:ff:ac:48:ca:b6:93:f4:32:8c:94: 4e:a6:04:c0:60:d2:23:58:67:29:da:4a:26:e5:82:f8:12:42: c4:6f:3f:6c:d0:f5:29:40:b2:f0:ef:4e:2e:50:e2:e4:88:eb: ae:f2:df:6c:ab:87:50:4c:2c:69:a0:01:ec:16:2d:0d:70:79: 0b:56:b2:59:1a:99:2a:f1:29:26:ef:74:57:75:c3:06:a2:04: f4:f9:4d:f6:12:74:71:6f:4d:9f:40:5b:b1:98:4d:07:66:70: 15:b5:64:c2:c3:2d:15:4c:0e:13:06:c9:b9:7d:05:56:76:4a: 42:99:84:4e:1f:f5:6b:f5:1c:87:7f:54:a5:a7:fc:ca:85:ca: 13:cb:a1:1c:9e:fe:d2:32:68:3c:d7:78:17:77:08:e6:45:fd: d9:54:98:96:10:be:d0:4f:04:e8:35:57:c1:64:9e:fc:a3:8b: 1f:91:0e:29:4a:d1:da:73:ca:e1:57:d8:f8:0e:7f:1b:78:fa: 82:66:cd:52:bd:38:08:59:97:0e:ab:d1:b3:3e:3d:86:ff:c6: 18:03:e1:61:c7:3b:f4:15:a3:11:a9:92:86:ed:77:7a:43:14: 23:01:30:59:bb:09:d2:72:6a:7d:17:ba:80:85:74:f2:d6:2b: 12:8e:1a:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUZWN7wED8LkB+oKWc36+x1rn4Bj8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwNzI1MjE0MzQ0WhcNMjcwNzI0MjE0ODQ0 WjAzMTEwLwYDVQQDEygyNTdFRDk0NDI0RDhEMjdGNDRGNjBDMzZBQ0Y1OTM2NDA3 RTVEQUQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPPhB/wq02Ip 27w/b3l2Wyapq33S4M5TUUcqdYEYcexCpLqyBKY1o3ULkb2jQXncYMEE80sTyhDP kRvLrkmGsLpWhXn8WfAmt2wKHD9fRxGB/9gtzKG7cLz9HvXfT/YdN6Rd+/P2bC19 k8TQl5GTO1mn+MoVedPJUWDfZuBQlpWqOpE58fT8BB9SpG89ZqWxj2yI/7FwoP3R qDz0IfjQk/Bzr6HxW06b6WlMlIWuTHO/6YisCdy9A+Pf0dCTiUYrmOsDcyThIjRa YkNuVjLqndnDla51KblKhRdLEZ3uNBNkjSObMy2DmXGno7psK41KtSITtio27uJE GblLv9ByGwIDAQABo4IChDCCAoAwHQYDVR0OBBYEFCV+2UQk2NJ/RPYMNqz1k2QH 5drRMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzQwNjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAKBtTAwQAKBvYMA0GCSqGSIb3DQEB CwUAA4IBAQCrxFcbw9UwdP+sSMq2k/QyjJROpgTAYNIjWGcp2kom5YL4EkLEbz9s 0PUpQLLw704uUOLkiOuu8t9sq4dQTCxpoAHsFi0NcHkLVrJZGpkq8Skm73RXdcMG ogT0+U32EnRxb02fQFuxmE0HZnAVtWTCwy0VTA4TBsm5fQVWdkpCmYROH/Vr9RyH f1Slp/zKhcoTy6Ecnv7SMmg813gXdwjmRf3ZVJiWEL7QTwToNVfBZJ78o4sfkQ4p StHac8rhV9j4Dn8bePqCZs1SvTgIWZcOq9GzPj2G/8YYA+Fhxzv0FaMRqZKG7Xd6 QxQjATBZuwnScmp9F7qAhXTy1isSjhpz -----END CERTIFICATE-----Generated at Tue Jul 28 19:19:17 2026 by rpki-client