
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: 1js1R0S68jI6DCilfLNjIw/U20oDZaU39GnNk2m4VrA=
Subject key identifier: 66:51:5B:33:AD:13:BC:C9:8A:82:03:1F:82:6D:75:0C:7F:4F:80:84
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 5E53599DE5B506B5E3B270007A84258522BCA347
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa
Signing time: Tue 31 Mar 2026 06:03:51 +0000
ROA not before: Tue 31 Mar 2026 05:58:51 +0000
ROA not after: Tue 30 Mar 2027 06:03:51 +0000
asID: 40676
IP address blocks: 64.50.179.0/24 maxlen: 24
107.173.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:53:59:9d:e5:b5:06:b5:e3:b2:70:00:7a:84:25:85:22:bc:a3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Mar 31 05:58:51 2026 GMT
Not After : Mar 30 06:03:51 2027 GMT
Subject: CN=66515B33AD13BCC98A82031F826D750C7F4F8084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:c0:bd:26:81:e8:b6:da:13:fb:4b:cd:48:
fe:c8:b1:c8:14:14:7a:57:97:00:e4:8d:59:5b:5a:
e4:40:66:7e:98:4b:8b:bd:5a:90:2f:9a:ab:ef:98:
df:df:d2:3e:d1:d5:1f:fb:f9:79:59:22:16:44:07:
04:4c:a9:ed:7c:ac:5d:07:37:e7:4a:a1:4f:92:0e:
6f:b1:7f:a4:de:e7:bb:c2:41:1a:82:f7:21:36:30:
54:d3:48:09:57:ab:61:ad:34:3a:9d:5f:10:0e:e6:
65:49:03:42:f2:a8:7e:df:42:81:d3:fc:a2:c2:2a:
8b:28:50:06:0a:21:15:9d:2a:71:49:9e:de:c3:f9:
66:3c:10:86:bd:bf:c2:76:14:17:c0:6f:27:db:2d:
b7:28:b7:20:f1:99:e4:1f:47:ed:d1:19:f8:7c:49:
1b:50:d3:96:1a:4b:1e:89:37:19:28:93:01:93:ef:
d3:af:7b:a5:84:0c:54:83:51:81:c3:ef:39:5f:0c:
af:b6:e8:85:d4:50:0b:c4:10:be:9c:7f:dc:3c:aa:
92:9e:09:a8:7e:78:a0:7d:a5:c2:34:6d:0a:e4:a9:
73:50:ab:6e:c1:c3:a9:04:92:33:4f:2b:ca:96:65:
23:11:36:3b:ac:90:db:f4:41:40:5d:74:ff:38:93:
e2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:51:5B:33:AD:13:BC:C9:8A:82:03:1F:82:6D:75:0C:7F:4F:80:84
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.50.179.0/24
107.173.215.0/24
Signature Algorithm: sha256WithRSAEncryption
03:53:8f:2d:0c:b0:c8:62:84:83:32:8f:60:00:8f:6a:c1:e3:
00:23:f5:36:74:35:f0:6d:ca:74:4d:42:50:f3:b5:d5:3d:45:
ac:24:87:ee:ab:9e:1f:67:95:32:1e:ae:7c:60:df:cd:59:56:
ad:36:20:77:d5:ba:0f:f0:2e:a2:29:34:48:11:fd:6f:23:98:
e7:83:a8:0e:ff:c9:7c:ee:3b:32:83:32:f8:1b:ad:e0:ec:b2:
c2:9a:68:e0:eb:58:bd:3e:ed:6a:af:09:24:c3:b6:20:9d:38:
77:b5:86:f7:6a:af:7f:8c:e5:fd:bc:09:fe:5c:1c:5a:09:4c:
6a:f9:50:39:74:51:9a:13:ad:9d:f8:b5:e4:78:95:b0:6b:70:
a6:a8:1e:33:4e:1e:c8:e3:3c:51:6f:0b:b1:b6:d7:76:9c:cc:
03:68:92:19:18:96:17:53:99:5d:17:6c:c7:eb:b5:27:12:16:
f5:29:01:9c:71:c0:3e:1a:b0:27:8c:14:ac:56:6a:78:8a:7e:
a1:2d:07:38:6b:78:24:35:13:52:53:53:63:9a:1e:5f:47:29:
e2:3c:73:16:83:4a:55:9f:a5:af:85:16:74:76:26:5b:3f:2c:
36:5a:84:f8:f3:7c:f4:6f:76:b7:2f:bf:2f:a2:ea:6e:27:8d:
91:56:dc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:03:47 2026 by rpki-client