$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: kpo/Z6IXVDN4yLRpZXnt24DPGPaUVk7z1io3lY3lvdE= Subject key identifier: 87:DC:7F:57:3E:3E:7E:C6:25:10:5E:34:48:E1:27:66:A5:FE:5F:B2 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 2917F1E9514AFA351E99587BD03AD72327154558 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa Signing time: Mon 31 Aug 2026 14:11:13 +0000 ROA not before: Mon 31 Aug 2026 14:06:13 +0000 ROA not after: Mon 30 Aug 2027 14:11:13 +0000 asID: 40676 IP address blocks: 23.226.131.0/24 maxlen: 24 64.188.20.0/24 maxlen: 24 74.50.8.0/24 maxlen: 24 107.173.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 12:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:17:f1:e9:51:4a:fa:35:1e:99:58:7b:d0:3a:d7:23:27:15:45:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Aug 31 14:06:13 2026 GMT Not After : Aug 30 14:11:13 2027 GMT Subject: CN=87DC7F573E3E7EC625105E3448E12766A5FE5FB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e3:72:98:93:5c:d1:b5:81:cf:8c:b9:80:e4: 61:3f:63:c4:be:f1:c9:a8:19:3d:85:c6:8a:2d:b1: 07:1e:88:66:45:3f:38:16:c5:2e:3b:ee:2a:14:cb: 86:40:1d:ab:aa:91:e9:92:80:ba:f3:90:e5:c6:18: d9:e9:9b:45:2b:59:99:08:fa:16:bc:09:7a:23:aa: b1:d3:ec:14:32:48:00:84:ab:dd:55:f4:bf:a0:fa: 2c:2b:f5:af:7b:55:36:5a:0d:ea:6c:60:da:74:d0: 9d:0b:65:cf:4d:61:7b:31:81:62:6a:b0:bd:e0:c8: d9:11:12:2a:3b:ff:3b:8f:12:90:c5:70:6e:f4:19: b8:e9:d6:28:01:bf:78:65:72:18:dd:c0:a9:5c:f2: 76:41:27:f4:cf:ae:6d:45:6f:8a:50:0b:25:05:38: cc:b7:db:fa:8d:39:0e:0d:ef:d0:f7:c9:a1:af:f9: 30:f4:fc:cf:37:94:ba:99:c3:d0:74:9a:31:11:ac: 9f:55:96:ba:2f:2c:01:aa:52:d8:8f:a4:20:7a:87: d4:e3:57:a6:4a:ec:56:d5:b7:89:fe:b1:03:08:92: 45:54:73:0f:47:f0:1c:e1:a3:9f:00:f0:12:86:ec: e1:bd:6d:0e:ae:59:bf:fc:a5:d6:c0:7f:c9:65:c6: 8c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DC:7F:57:3E:3E:7E:C6:25:10:5E:34:48:E1:27:66:A5:FE:5F:B2 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.226.131.0/24 64.188.20.0/24 74.50.8.0/24 107.173.215.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:81:12:0f:46:a6:ef:11:fb:a5:86:4f:59:00:cb:0a:e9:3d: d9:62:be:13:8f:3d:22:9b:b5:27:3c:e9:92:c7:8a:e3:9a:4e: ee:db:50:d0:7a:8c:84:69:38:ea:32:d1:8a:cb:b5:c6:f8:97: 29:a7:bb:df:2a:05:2c:ed:0d:f0:94:9d:ef:40:82:ca:b4:fa: 53:43:ba:b2:3d:8a:b5:67:f6:6b:35:d0:bd:6b:eb:7f:21:e2: 70:72:4c:fc:a4:2c:85:60:95:b5:1b:42:11:b6:3c:98:ac:f3: 11:c4:06:60:04:d7:b3:79:bb:dd:2e:8d:88:ee:48:c4:82:85: c3:ea:0e:5e:31:a3:be:65:b8:69:43:9f:6c:c6:36:09:9b:a9: a5:6b:eb:ce:b4:92:df:22:d2:9c:3f:85:18:d8:49:d9:9c:8e: ec:96:2d:92:ca:61:26:6e:b8:54:45:ed:29:97:e6:15:bc:bc: 06:3a:29:ed:93:98:a2:41:fe:a8:bb:04:a5:4b:e0:c1:d2:d7: 9e:f9:89:d4:7e:c6:72:2d:4d:b6:24:6c:78:c4:5b:ed:9c:9a: fd:ef:2a:19:7f:c0:4b:cb:ce:1c:c4:f8:69:16:9a:1f:cd:c3: 13:38:72:84:5d:2c:3e:ac:68:c1:86:a6:31:47:11:7c:78:4f: da:cb:01:7e -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIUKRfx6VFK+jUemVh70DrXIycVRVgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwODMxMTQwNjEzWhcNMjcwODMwMTQxMTEz WjAzMTEwLwYDVQQDEyg4N0RDN0Y1NzNFM0U3RUM2MjUxMDVFMzQ0OEUxMjc2NkE1 RkU1RkIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuONymJNc0bWB z4y5gORhP2PEvvHJqBk9hcaKLbEHHohmRT84FsUuO+4qFMuGQB2rqpHpkoC685Dl xhjZ6ZtFK1mZCPoWvAl6I6qx0+wUMkgAhKvdVfS/oPosK/Wve1U2Wg3qbGDadNCd C2XPTWF7MYFiarC94MjZERIqO/87jxKQxXBu9Bm46dYoAb94ZXIY3cCpXPJ2QSf0 z65tRW+KUAslBTjMt9v6jTkODe/Q98mhr/kw9PzPN5S6mcPQdJoxEayfVZa6LywB qlLYj6QgeofU41emSuxW1beJ/rEDCJJFVHMPR/Ac4aOfAPAShuzhvW0Orlm//KXW wH/JZcaMBwIDAQABo4ICkDCCAowwHQYDVR0OBBYEFIfcf1c+Pn7GJRBeNEjhJ2al /l+yMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzQwNjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAF+KDAwQAQLwUAwQASjIIAwQAa63X MA0GCSqGSIb3DQEBCwUAA4IBAQAbgRIPRqbvEfulhk9ZAMsK6T3ZYr4Tjz0im7Un POmSx4rjmk7u21DQeoyEaTjqMtGKy7XG+Jcpp7vfKgUs7Q3wlJ3vQILKtPpTQ7qy PYq1Z/ZrNdC9a+t/IeJwckz8pCyFYJW1G0IRtjyYrPMRxAZgBNezebvdLo2I7kjE goXD6g5eMaO+ZbhpQ59sxjYJm6mla+vOtJLfItKcP4UY2EnZnI7sli2SymEmbrhU Re0pl+YVvLwGOintk5iiQf6ouwSlS+DB0tee+YnUfsZyLU22JGx4xFvtnJr97yoZ f8BLy84cxPhpFpofzcMTOHKEXSw+rGjBhqYxRxF8eE/aywF+ -----END CERTIFICATE-----Generated at Sun Sep 20 21:46:41 2026 by rpki-client