$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: TL01sYIltOZDZRqcAAFBA1FSJ+6/R/NMkcmK2EtgxzY= Subject key identifier: B0:F1:F8:9F:5E:6F:C8:6D:FC:73:04:F1:22:8F:38:6B:0A:29:33:86 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 62248B6E90C204F92DD0EF19EF2505ACBB78FCFE Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40676.roa Signing time: Mon 14 Sep 2026 21:46:24 +0000 ROA not before: Mon 14 Sep 2026 21:41:24 +0000 ROA not after: Mon 13 Sep 2027 21:46:24 +0000 asID: 40676 IP address blocks: 157.254.0.0/24 maxlen: 24 157.254.8.0/24 maxlen: 24 157.254.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 07:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:24:8b:6e:90:c2:04:f9:2d:d0:ef:19:ef:25:05:ac:bb:78:fc:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Sep 14 21:41:24 2026 GMT Not After : Sep 13 21:46:24 2027 GMT Subject: CN=B0F1F89F5E6FC86DFC7304F1228F386B0A293386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c4:86:e2:61:d6:3a:45:ee:48:3a:ff:6e:26: 5e:0d:14:ee:60:ba:8d:88:5e:ca:f0:a5:c4:3b:8a: f4:30:e7:94:6f:26:2c:67:da:ff:4a:a5:38:36:bd: 27:6f:31:d9:ca:49:d5:64:6d:51:4e:1a:76:6f:e8: d8:bf:9a:40:ce:fb:2f:8e:e0:4b:d3:f5:87:d6:bc: 64:b9:e0:e8:82:c3:58:e5:cb:4d:21:cf:1e:cd:51: a1:bc:b2:ba:66:e7:d1:9a:ad:37:87:92:93:c8:dc: 18:24:4a:5b:38:5d:22:8e:ff:05:99:76:e4:7a:6a: fd:7e:ae:35:09:a7:ec:e9:67:e0:fe:c2:19:06:9c: c5:70:50:44:9f:91:d0:cd:b8:82:06:ec:f4:b7:bf: 10:9d:a6:7f:e1:ca:ec:ba:5d:8c:d1:4d:fe:0b:bc: d2:d1:5f:8b:ab:e5:d0:42:20:8a:07:b5:52:3e:12: 0b:6a:7d:9f:48:74:bc:90:7e:e3:67:36:0e:3d:55: ed:04:01:ab:d0:f8:bc:03:d0:84:67:09:9e:dc:7b: 3c:e1:50:4b:d7:ac:25:cf:e5:dd:1f:4d:ba:76:1b: 3a:a6:85:68:a5:73:a5:69:16:27:60:a9:7b:7b:78: 09:09:04:0a:38:9b:d5:48:17:8e:f6:48:2f:ab:36: cb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F1:F8:9F:5E:6F:C8:6D:FC:73:04:F1:22:8F:38:6B:0A:29:33:86 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.0.0/24 157.254.8.0/24 157.254.250.0/24 Signature Algorithm: sha256WithRSAEncryption 01:de:bc:47:89:f0:e4:ed:85:86:5a:f2:a9:8c:c8:41:b1:3f: be:d4:02:7f:a3:0e:f2:c2:61:95:3a:6d:e9:45:b9:ed:c8:ec: c6:23:5c:9c:19:ad:39:9e:2f:02:b0:e2:e3:d7:37:f9:85:cf: 74:5a:eb:f4:70:82:c6:ab:c3:63:19:7a:84:42:1e:b6:c9:ad: 13:d1:fc:71:d5:5e:a9:46:35:8a:d4:f2:3d:a7:95:ff:ae:cf: b6:fa:5c:3c:8d:31:58:3b:95:49:a1:0c:cd:f6:97:3b:c9:4f: b4:c6:ea:c2:6f:0d:61:f0:90:3b:f1:d5:f6:72:37:3c:65:72: 23:5a:e0:c4:45:52:57:7b:4a:38:eb:9a:38:dd:aa:c0:66:1e: 63:ff:e3:13:20:36:49:cc:ce:5a:19:a0:ff:f5:dc:c7:34:d4: d7:cb:74:d2:ef:66:c0:78:d3:1c:93:61:14:c3:88:33:32:5d: 60:59:0e:27:8d:67:b4:f0:48:c7:6e:e6:42:57:6e:92:63:e8: 3c:92:b1:37:cd:c4:49:f3:6d:d8:b6:5c:7f:c9:8c:d4:42:89: 4b:e8:9c:79:8b:89:84:13:64:5f:95:9e:01:12:a1:be:51:8c: 30:49:5e:d7:ce:50:7f:08:34:c6:8f:9f:da:3f:2e:68:61:d9: 64:44:8c:78 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUYiSLbpDCBPkt0O8Z7yUFrLt4/P4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwOTE0MjE0MTI0WhcNMjcwOTEzMjE0NjI0 WjAzMTEwLwYDVQQDEyhCMEYxRjg5RjVFNkZDODZERkM3MzA0RjEyMjhGMzg2QjBB MjkzMzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcSG4mHWOkXu SDr/biZeDRTuYLqNiF7K8KXEO4r0MOeUbyYsZ9r/SqU4Nr0nbzHZyknVZG1RThp2 b+jYv5pAzvsvjuBL0/WH1rxkueDogsNY5ctNIc8ezVGhvLK6ZufRmq03h5KTyNwY JEpbOF0ijv8FmXbkemr9fq41Cafs6Wfg/sIZBpzFcFBEn5HQzbiCBuz0t78QnaZ/ 4crsul2M0U3+C7zS0V+Lq+XQQiCKB7VSPhILan2fSHS8kH7jZzYOPVXtBAGr0Pi8 A9CEZwme3Hs84VBL16wlz+XdH026dhs6poVopXOlaRYnYKl7e3gJCQQKOJvVSBeO 9kgvqzbLsQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFLDx+J9eb8ht/HME8SKPOGsK KTOGMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzQwNjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAnf4AAwQAnf4IAwQAnf76MA0GCSqG SIb3DQEBCwUAA4IBAQAB3rxHifDk7YWGWvKpjMhBsT++1AJ/ow7ywmGVOm3pRbnt yOzGI1ycGa05ni8CsOLj1zf5hc90Wuv0cILGq8NjGXqEQh62ya0T0fxx1V6pRjWK 1PI9p5X/rs+2+lw8jTFYO5VJoQzN9pc7yU+0xurCbw1h8JA78dX2cjc8ZXIjWuDE RVJXe0o465o43arAZh5j/+MTIDZJzM5aGaD/9dzHNNTXy3TS72bAeNMck2EUw4gz Ml1gWQ4njWe08EjHbuZCV26SY+g8krE3zcRJ823Ytlx/yYzUQolL6Jx5i4mEE2Rf lZ4BEqG+UYwwSV7XzlB/CDTGj5/aPy5oYdlkRIx4 -----END CERTIFICATE-----Generated at Sun Sep 20 14:20:55 2026 by rpki-client