$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: aNvljtMZ7WBHQF7826xWLGAlWHu+yk3wsxTUhwPjt+o= Subject key identifier: 6C:BE:BA:F9:5F:14:93:36:84:54:9E:08:B4:CF:8C:BD:7A:3F:64:F7 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 411F6FB3EBE62AD96AA8DBE120A6CCFFF52601F7 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS40676.roa Signing time: Sat 01 Nov 2025 00:06:57 +0000 ROA not before: Sat 01 Nov 2025 00:01:57 +0000 ROA not after: Sat 31 Oct 2026 00:06:57 +0000 asID: 40676 IP address blocks: 104.234.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 08:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:1f:6f:b3:eb:e6:2a:d9:6a:a8:db:e1:20:a6:cc:ff:f5:26:01:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Nov 1 00:01:57 2025 GMT Not After : Oct 31 00:06:57 2026 GMT Subject: CN=6CBEBAF95F14933684549E08B4CF8CBD7A3F64F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:34:d5:2a:56:e0:fb:b5:0c:ec:98:f7:40:24: 63:c3:ec:15:6e:fd:a5:ce:19:c8:76:44:b4:cb:4a: cf:92:a8:00:f1:2c:6c:15:47:35:fa:8b:21:e0:4f: d8:37:6b:b5:6c:17:06:d9:0b:9b:4d:cf:36:f3:0a: e2:ed:00:86:bd:f5:86:63:a1:34:ed:09:7e:e1:77: cb:a1:c3:5f:5c:9a:0d:66:44:36:68:44:05:29:43: 7f:e1:d1:b4:f9:80:92:6a:0a:5f:a6:bd:28:97:4f: 1e:b3:63:f4:0b:4f:32:a2:59:2b:67:15:2a:87:13: 12:b8:53:75:a7:5b:85:89:15:ae:aa:bc:82:eb:36: 3d:25:5c:d0:f6:7d:cf:f8:f8:50:e6:18:72:d5:6a: 57:37:2f:0a:ab:07:e6:d6:40:84:a3:20:0b:2d:56: b0:90:bf:10:59:cc:fd:d6:33:1c:a8:11:3f:61:ff: e0:cd:43:19:65:33:8c:0e:42:e9:bf:ca:91:0d:01: 61:e5:bf:83:e6:93:b3:62:a7:a3:4d:79:3e:25:15: 22:0f:89:c7:b9:33:a9:67:38:94:dc:2b:f8:05:ae: 30:95:b0:37:19:4e:75:c5:2a:40:73:de:40:6d:1e: 90:69:d4:4a:80:11:c2:07:f2:a3:d4:42:da:6e:50: 28:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BE:BA:F9:5F:14:93:36:84:54:9E:08:B4:CF:8C:BD:7A:3F:64:F7 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.134.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:b4:f4:e8:ab:80:8f:f0:29:67:8e:6d:ab:d5:e4:f4:b6:8d: d8:62:52:93:66:70:87:72:0c:6e:b5:c7:3c:27:7b:e5:24:4a: 19:70:df:fa:c1:a1:6a:11:7d:b6:09:0d:d9:20:af:0f:6d:e3: ed:d6:06:a2:28:6a:95:6c:f4:7c:e9:5d:f9:f7:c6:a8:d8:dc: d9:42:a3:25:ad:40:e2:f4:e0:f3:42:78:ae:13:e5:48:77:62: be:19:fc:b5:3d:1a:74:b7:e7:6b:84:51:ff:eb:35:7f:26:9c: 29:ed:d2:ff:c4:10:d1:c3:84:fe:29:c8:66:14:64:1f:3f:9e: b2:ac:a6:45:a4:aa:bb:50:63:d6:7b:64:47:cd:28:01:96:86: 40:55:71:ce:98:d7:7c:a4:57:3f:18:4e:8a:55:e0:82:60:d3: 22:37:ed:f4:4e:16:43:a4:1f:ba:78:60:c4:c9:08:0e:ef:a0: 53:1b:e4:42:ce:3d:d4:e9:c5:eb:c4:a8:86:4e:b9:8e:14:96: 57:7e:97:15:10:04:73:a2:20:86:5a:4b:c6:8e:f4:2c:a6:d8: fe:f2:bb:e4:f9:b7:18:d3:69:77:d2:17:3e:e7:2a:cf:8c:f9: 53:01:fd:68:c4:11:8a:8e:a4:77:69:5e:a6:d8:96:a3:37:42: 81:2a:3b:55 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUQR9vs+vmKtlqqNvhIKbM//UmAfcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMTAxMDAwMTU3WhcNMjYxMDMxMDAwNjU3 WjAzMTEwLwYDVQQDEyg2Q0JFQkFGOTVGMTQ5MzM2ODQ1NDlFMDhCNENGOENCRDdB M0Y2NEY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTTVKlbg+7UM 7Jj3QCRjw+wVbv2lzhnIdkS0y0rPkqgA8SxsFUc1+osh4E/YN2u1bBcG2QubTc82 8wri7QCGvfWGY6E07Ql+4XfLocNfXJoNZkQ2aEQFKUN/4dG0+YCSagpfpr0ol08e s2P0C08yolkrZxUqhxMSuFN1p1uFiRWuqryC6zY9JVzQ9n3P+PhQ5hhy1WpXNy8K qwfm1kCEoyALLVawkL8QWcz91jMcqBE/Yf/gzUMZZTOMDkLpv8qRDQFh5b+D5pOz YqejTXk+JRUiD4nHuTOpZziU3Cv4Ba4wlbA3GU51xSpAc95AbR6QadRKgBHCB/Kj 1ELablAomQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFGy+uvlfFJM2hFSeCLTPjL16 P2T3MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwNjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOqGMA0GCSqGSIb3DQEBCwUAA4IB AQAetPToq4CP8Clnjm2r1eT0to3YYlKTZnCHcgxutcc8J3vlJEoZcN/6waFqEX22 CQ3ZIK8PbePt1gaiKGqVbPR86V3598ao2NzZQqMlrUDi9ODzQniuE+VId2K+Gfy1 PRp0t+drhFH/6zV/Jpwp7dL/xBDRw4T+KchmFGQfP56yrKZFpKq7UGPWe2RHzSgB loZAVXHOmNd8pFc/GE6KVeCCYNMiN+30ThZDpB+6eGDEyQgO76BTG+RCzj3U6cXr xKiGTrmOFJZXfpcVEARzoiCGWkvGjvQsptj+8rvk+bcY02l30hc+5yrPjPlTAf1o xBGKjqR3aV6m2JajN0KBKjtV -----END CERTIFICATE-----Generated at Tue Nov 4 19:28:49 2025 by rpki-client