
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: jC41u1k22to/whltsa0/Vdaby3F07y0rleDjB9F1iaA=
Subject key identifier: C3:48:E8:AB:F1:06:59:24:15:2B:25:05:BC:A8:35:2C:F1:C8:90:0D
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 63FE89427826CCEFD45CB8A4F91A3927ABB43A2A
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS40676.roa
Signing time: Sat 13 Jun 2026 04:26:06 +0000
ROA not before: Sat 13 Jun 2026 04:21:06 +0000
ROA not after: Sat 12 Jun 2027 04:26:06 +0000
asID: 40676
IP address blocks: 104.234.134.0/24 maxlen: 24
206.53.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:fe:89:42:78:26:cc:ef:d4:5c:b8:a4:f9:1a:39:27:ab:b4:3a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jun 13 04:21:06 2026 GMT
Not After : Jun 12 04:26:06 2027 GMT
Subject: CN=C348E8ABF1065924152B2505BCA8352CF1C8900D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:4d:4e:63:18:07:ab:2b:c4:84:26:f8:a0:
3d:7b:b2:11:19:75:89:00:21:fc:55:d9:84:37:c9:
ae:f6:66:e1:3d:c8:e3:38:02:10:40:7f:96:49:bd:
a6:43:c1:6c:b8:e0:94:24:4c:b2:29:97:ba:bd:a7:
ae:ca:b3:09:cd:cc:d1:40:39:3b:78:0d:43:a3:b9:
14:ff:89:c8:a4:d0:b7:6f:82:eb:46:77:a4:7c:54:
f5:2e:7b:78:83:6f:2d:6b:7b:42:86:89:fe:c8:6f:
9e:e3:c3:c8:af:3b:9e:23:ee:dd:5e:27:15:eb:3e:
67:8a:25:e3:1f:79:7f:01:14:46:98:ed:6b:d6:f7:
56:35:5d:4e:a3:2e:94:6e:4e:77:87:0c:b0:03:10:
06:3e:28:d9:1f:94:f1:0a:1a:14:45:1e:85:dd:cf:
aa:f9:d7:b1:6f:c9:fd:4b:17:02:99:ef:c9:86:15:
89:52:2f:df:4b:d8:e4:4e:a6:a6:3f:3a:d0:ea:da:
1d:f8:bd:2b:54:90:ee:64:61:d6:36:15:c7:cd:5f:
ea:26:f3:9d:9a:4b:74:e1:fa:4e:4f:b9:b3:64:e4:
9d:45:14:6c:a7:d8:43:80:df:e6:e5:0f:23:82:ff:
65:04:09:04:30:32:d2:36:62:1e:93:19:7a:82:7f:
25:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:48:E8:AB:F1:06:59:24:15:2B:25:05:BC:A8:35:2C:F1:C8:90:0D
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.134.0/24
206.53.54.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c9:5d:2b:15:81:25:ed:9c:5e:91:ce:3a:2e:63:48:64:17:
06:25:b9:d8:d5:f3:6c:dc:4b:05:42:db:b0:87:35:aa:f2:b5:
0d:1c:e0:9f:d7:54:19:ba:3c:47:04:fa:17:ba:8f:c7:fa:2c:
97:d7:57:a8:95:4a:b4:a6:46:5e:65:e6:a8:5a:a3:ca:89:f6:
03:71:a0:b6:9b:11:60:38:ac:98:ec:46:c9:be:5e:42:a2:b4:
fe:0b:fe:67:74:54:85:b4:5d:ef:f1:f4:e5:44:a0:58:89:92:
21:76:7d:c1:22:f3:1a:b8:b5:03:d5:83:29:c5:cc:29:ec:25:
39:e0:a8:ae:44:b3:c2:ae:dd:e9:45:f4:1d:b0:86:73:ac:f2:
1b:80:bf:66:7e:6d:2f:43:91:65:59:74:60:c1:64:5d:ad:24:
58:c5:f8:29:04:ba:36:89:43:ab:01:7c:17:b6:54:23:19:41:
e0:45:97:68:61:60:c7:d8:c8:07:e4:32:3e:46:c6:2e:e4:bf:
ff:94:22:e0:8e:fc:e9:32:3b:01:a4:70:c0:0f:45:cf:51:67:
ea:06:62:93:e3:e6:1a:4b:3d:06:fb:22:fe:e9:69:ee:79:0a:
69:d6:7f:54:33:66:73:1e:5a:e6:35:36:d8:fc:32:47:97:b1:
dc:fc:11:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:28 2026 by rpki-client