$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: zqRzlKXVpm5qzGOXekSGPEXhgadVQiNmwFVCjKiAekU= Subject key identifier: 3F:51:2E:71:40:CD:C5:AB:1E:2C:CF:24:0C:6D:FC:F9:1D:7D:8D:08 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 2B5B9DE27303DF80175E7050A58F0B464FF81259 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40676.roa Signing time: Thu 05 Nov 2026 08:47:52 +0000 ROA not before: Thu 05 Nov 2026 08:42:52 +0000 ROA not after: Thu 04 Nov 2027 08:47:52 +0000 asID: 40676 IP address blocks: 157.254.8.0/24 maxlen: 24 157.254.232.0/24 maxlen: 24 157.254.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 12:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:5b:9d:e2:73:03:df:80:17:5e:70:50:a5:8f:0b:46:4f:f8:12:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Nov 5 08:42:52 2026 GMT Not After : Nov 4 08:47:52 2027 GMT Subject: CN=3F512E7140CDC5AB1E2CCF240C6DFCF91D7D8D08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:03:3c:c5:ea:d4:f0:3b:6a:50:f9:84:8a:73: 8d:bc:96:75:a7:b6:58:99:35:d7:ce:5c:25:d0:8c: 60:aa:2b:33:a4:8d:88:f1:53:7d:25:9c:96:ac:e2: fa:44:ae:23:63:e3:fb:b4:c1:18:e1:f6:40:2c:9e: 17:29:ff:81:af:50:eb:aa:5f:72:a8:84:56:41:1f: 27:53:33:a7:5a:2b:0a:92:c2:84:65:3e:8e:32:42: 05:24:50:41:7e:77:fc:9f:3d:f8:96:9b:ac:4e:67: 02:64:1d:5b:05:b7:f5:d7:20:dd:50:94:3c:28:13: 25:7b:a3:4f:b1:af:80:a9:37:ca:38:39:e4:cf:49: c6:9e:69:41:14:5b:be:3c:d8:4c:5f:07:7b:7e:67: ed:fb:12:90:c4:51:21:ea:8e:e4:80:a0:f1:8f:89: cf:2f:22:25:be:12:e4:ae:fe:c3:7e:e9:dd:9a:1c: d9:a6:13:7d:52:1c:4e:05:87:9d:d8:c2:a7:c5:ab: 09:65:ef:cf:4b:f7:06:f2:81:69:0c:c7:cf:8b:d9: 1f:92:32:4e:b8:c2:4c:1d:c1:9f:d1:56:24:b7:6d: 4b:7b:0d:94:fa:b1:04:63:f5:0a:35:0a:23:22:7a: 8c:9c:51:25:5e:f7:49:83:ea:fa:3b:07:f3:c5:2b: 99:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:51:2E:71:40:CD:C5:AB:1E:2C:CF:24:0C:6D:FC:F9:1D:7D:8D:08 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.8.0/24 157.254.232.0/24 157.254.250.0/24 Signature Algorithm: sha256WithRSAEncryption 81:1c:2e:04:11:5f:de:14:d5:02:1c:90:04:df:a2:85:fb:3b: f5:c8:01:8f:ec:4a:05:84:d5:65:49:84:d9:23:54:58:69:ad: 02:3a:e5:94:2c:58:21:9b:ff:f4:42:72:7d:bf:92:95:90:40: de:85:a5:f2:51:a3:3c:8d:06:62:6a:ec:49:9f:d6:b2:ca:ae: 49:c1:fb:f1:1f:1b:12:c1:77:96:40:24:09:f0:e0:b7:93:b8: 3f:ec:46:55:4e:e5:d6:51:64:7a:27:53:b7:13:f6:64:16:e6: 0b:10:9c:3a:29:9f:e4:cc:85:f4:6a:69:c5:43:4a:de:d3:45: f0:aa:58:68:b2:82:a5:24:f1:de:d8:6a:48:0b:11:48:da:84: e2:45:5d:dc:b0:79:fc:bb:64:4c:b0:fd:a7:90:11:b6:b8:1f: 2b:6e:00:99:1d:3c:0c:7e:fe:46:d3:bb:24:a7:9f:a5:18:d3: 3f:d0:c8:aa:a2:17:68:a4:ab:0f:a3:87:52:24:7f:8a:2b:0f: 4b:58:e1:90:6e:48:9e:51:8f:23:d7:f6:15:d8:ae:f0:8a:d7: 2f:36:72:6c:69:b4:4f:70:43:de:f3:8f:e9:0d:43:b7:43:91: ef:4b:91:3b:63:4e:02:67:84:32:22:f6:1e:73:17:22:ff:71: 42:c3:cc:8c -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUK1ud4nMD34AXXnBQpY8LRk/4ElkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYxMTA1MDg0MjUyWhcNMjcxMTA0MDg0NzUy WjAzMTEwLwYDVQQDEygzRjUxMkU3MTQwQ0RDNUFCMUUyQ0NGMjQwQzZERkNGOTFE N0Q4RDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QM8xerU8Dtq UPmEinONvJZ1p7ZYmTXXzlwl0IxgqiszpI2I8VN9JZyWrOL6RK4jY+P7tMEY4fZA LJ4XKf+Br1Drql9yqIRWQR8nUzOnWisKksKEZT6OMkIFJFBBfnf8nz34lpusTmcC ZB1bBbf11yDdUJQ8KBMle6NPsa+AqTfKODnkz0nGnmlBFFu+PNhMXwd7fmft+xKQ xFEh6o7kgKDxj4nPLyIlvhLkrv7DfundmhzZphN9UhxOBYed2MKnxasJZe/PS/cG 8oFpDMfPi9kfkjJOuMJMHcGf0VYkt21Lew2U+rEEY/UKNQojInqMnFElXvdJg+r6 OwfzxSuZawIDAQABo4ICijCCAoYwHQYDVR0OBBYEFD9RLnFAzcWrHizPJAxt/Pkd fY0IMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzQwNjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAnf4IAwQAnf7oAwQAnf76MA0GCSqG SIb3DQEBCwUAA4IBAQCBHC4EEV/eFNUCHJAE36KF+zv1yAGP7EoFhNVlSYTZI1RY aa0COuWULFghm//0QnJ9v5KVkEDehaXyUaM8jQZiauxJn9ayyq5JwfvxHxsSwXeW QCQJ8OC3k7g/7EZVTuXWUWR6J1O3E/ZkFuYLEJw6KZ/kzIX0amnFQ0re00Xwqlho soKlJPHe2GpICxFI2oTiRV3csHn8u2RMsP2nkBG2uB8rbgCZHTwMfv5G07skp5+l GNM/0MiqohdopKsPo4dSJH+KKw9LWOGQbkieUY8j1/YV2K7witcvNnJsabRPcEPe 84/pDUO3Q5HvS5E7Y04CZ4QyIvYecxci/3FCw8yM -----END CERTIFICATE-----Generated at Thu Nov 5 15:05:17 2026 by rpki-client