$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: ayj/adw2fExMJ0n+hiOq9E+xcBdX/GDm0ItMw3L/llQ= Subject key identifier: 6C:33:F8:D9:4E:91:38:58:79:67:76:28:9C:A9:08:16:78:8C:9E:CD Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 52A7DBB95497FA6B22ACC806EF8416E7956C1975 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40676.roa Signing time: Tue 20 May 2025 12:03:22 +0000 ROA not before: Tue 20 May 2025 11:58:22 +0000 ROA not after: Tue 19 May 2026 12:03:22 +0000 asID: 40676 IP address blocks: 157.254.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:45:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a7:db:b9:54:97:fa:6b:22:ac:c8:06:ef:84:16:e7:95:6c:19:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: May 20 11:58:22 2025 GMT Not After : May 19 12:03:22 2026 GMT Subject: CN=6C33F8D94E913858796776289CA90816788C9ECD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:89:71:cc:c8:2d:f9:c3:d2:67:7d:f9:9a:f4: 1a:88:db:43:96:ce:86:13:10:56:bf:89:fc:cf:c3: 57:71:bc:fc:ab:2d:84:0f:c4:1e:0e:4d:b0:9d:25: 99:b9:03:a4:e2:9a:40:a9:89:f4:f7:0b:98:a2:87: 0e:6a:e3:3e:99:22:d2:47:ca:8b:cb:52:28:2a:a6: 1a:c9:26:77:db:a2:0d:0c:f8:3f:90:1b:76:19:4d: d6:f4:59:e8:fb:31:08:ce:87:01:70:70:19:21:a2: 72:5f:79:62:1c:e9:bf:51:f0:da:9a:26:01:3e:36: 58:b3:b9:50:4b:8c:e6:3d:7b:b4:0a:28:98:8b:56: 6f:74:23:5f:a0:76:de:e6:17:f2:84:c0:54:ef:f1: 5e:41:62:91:c2:5d:fc:ea:87:b6:e4:2b:57:14:27: ca:0a:ab:50:5d:de:af:f3:69:3a:22:59:c6:7a:3a: b6:64:43:95:3a:cc:1d:78:28:ac:05:a3:5e:fb:96: 8d:df:35:9d:aa:b8:6b:63:23:e4:d1:93:ae:90:a0: be:d8:40:d0:06:eb:8a:78:c3:52:b6:49:ca:78:4a: a1:a8:13:bc:1e:a5:ed:ca:73:7c:c0:94:bb:c6:80: 58:5f:dd:04:4c:f3:bb:cc:c6:02:dd:5b:4a:f1:6d: 2a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:33:F8:D9:4E:91:38:58:79:67:76:28:9C:A9:08:16:78:8C:9E:CD X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.250.0/24 Signature Algorithm: sha256WithRSAEncryption 48:db:0f:08:c9:dd:bd:59:35:a3:e0:aa:55:5f:ca:fe:db:39: cd:3c:23:12:13:d7:57:6a:ad:12:fc:4d:d8:14:98:fe:67:75: 94:c2:6c:c2:31:d2:88:98:04:f0:27:18:c2:ab:43:e0:53:3e: 67:25:bb:21:b2:b8:87:52:80:3c:78:0e:24:83:c8:e7:dc:0b: a7:68:f7:a6:32:f1:74:ee:68:da:dc:2e:29:a2:a5:4c:0e:e6: b6:4a:88:8f:3c:e2:eb:59:54:df:e8:bc:9c:82:40:47:07:f6: 47:42:75:f1:98:cd:b3:6b:9e:bc:e6:38:cd:94:db:48:a1:38: ff:4d:e8:80:83:c2:0c:75:a6:3e:a5:3d:fc:79:4e:8e:84:13: 1c:b7:7c:14:0a:cb:eb:47:89:f1:4e:ba:96:77:5a:e4:82:51: c6:ad:01:02:ad:04:90:e5:c1:a5:1e:ac:d7:85:ae:07:85:79: a0:0e:d3:37:3e:f4:79:5e:67:c0:d9:01:ff:8a:5b:35:5e:63: 8d:ce:2b:bc:36:ea:02:9e:7f:de:fc:81:66:77:cf:3b:6d:5e: 63:40:f0:7b:aa:b8:25:dc:6a:94:3d:eb:d2:40:8b:bc:04:dd: 54:5b:ab:8a:77:09:f9:4a:ae:b2:bb:77:3d:9d:e3:be:30:cb: 9d:b8:af:dc -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUUqfbuVSX+msirMgG74QW55VsGXUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwNTIwMTE1ODIyWhcNMjYwNTE5MTIwMzIy WjAzMTEwLwYDVQQDEyg2QzMzRjhEOTRFOTEzODU4Nzk2Nzc2Mjg5Q0E5MDgxNjc4 OEM5RUNEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIlxzMgt+cPS Z335mvQaiNtDls6GExBWv4n8z8NXcbz8qy2ED8QeDk2wnSWZuQOk4ppAqYn09wuY oocOauM+mSLSR8qLy1IoKqYaySZ326INDPg/kBt2GU3W9Fno+zEIzocBcHAZIaJy X3liHOm/UfDamiYBPjZYs7lQS4zmPXu0CiiYi1ZvdCNfoHbe5hfyhMBU7/FeQWKR wl386oe25CtXFCfKCqtQXd6v82k6IlnGejq2ZEOVOswdeCisBaNe+5aN3zWdqrhr YyPk0ZOukKC+2EDQBuuKeMNStknKeEqhqBO8HqXtynN8wJS7xoBYX90ETPO7zMYC 3VtK8W0qDQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFGwz+NlOkThYeWd2KJypCBZ4 jJ7NMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzQwNjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf76MA0GCSqGSIb3DQEBCwUAA4IB AQBI2w8Iyd29WTWj4KpVX8r+2znNPCMSE9dXaq0S/E3YFJj+Z3WUwmzCMdKImATw JxjCq0PgUz5nJbshsriHUoA8eA4kg8jn3AunaPemMvF07mja3C4poqVMDua2SoiP POLrWVTf6LycgkBHB/ZHQnXxmM2za5685jjNlNtIoTj/TeiAg8IMdaY+pT38eU6O hBMct3wUCsvrR4nxTrqWd1rkglHGrQECrQSQ5cGlHqzXha4HhXmgDtM3PvR5XmfA 2QH/ils1XmONziu8NuoCnn/e/IFmd887bV5jQPB7qrgl3GqUPevSQIu8BN1UW6uK dwn5Sq6yu3c9neO+MMuduK/c -----END CERTIFICATE-----Generated at Mon Jun 16 11:01:53 2025 by rpki-client