$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS33651.roa File: AS33651.roa (raw, json) Hash identifier: dHkA9fRisDdZS1TNVNnCwt0uWhql+HKCqsoLIJt0PIE= Subject key identifier: 28:9D:A5:8D:47:C5:3B:DC:75:A2:D6:DA:27:32:43:E4:37:7E:80:13 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 11A61F305EE167BDBB62C319F042E2467CFB6316 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS33651.roa Signing time: Tue 25 Aug 2026 10:19:23 +0000 ROA not before: Tue 25 Aug 2026 10:14:23 +0000 ROA not after: Tue 24 Aug 2027 10:19:23 +0000 asID: 33651 IP address blocks: 40.27.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 10:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a6:1f:30:5e:e1:67:bd:bb:62:c3:19:f0:42:e2:46:7c:fb:63:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Aug 25 10:14:23 2026 GMT Not After : Aug 24 10:19:23 2027 GMT Subject: CN=289DA58D47C53BDC75A2D6DA273243E4377E8013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7a:b6:cc:ba:83:65:29:5d:b5:cd:41:37:71: 81:33:9c:d9:89:a6:27:c3:05:0b:f0:da:b9:56:55: 97:d3:01:d3:ec:15:af:01:63:55:6f:05:7a:8f:cf: 7b:5f:dd:6d:11:46:d3:d3:d1:60:ba:08:fd:bb:b5: 00:a0:e1:bc:93:99:63:20:6e:56:91:19:c5:4d:33: 11:96:8c:31:5c:75:74:30:dc:08:6d:0d:59:79:41: a4:7e:18:54:e9:6b:8f:97:49:68:fb:39:aa:f1:9a: a2:c1:a8:29:5e:48:ed:ce:57:81:3f:3e:c0:e1:e0: 75:ec:df:45:78:e5:67:02:9c:14:17:ae:b9:e8:9d: 4a:55:73:52:49:ab:a5:a1:12:0d:31:80:46:f7:cf: 9f:a0:81:72:29:ad:2c:84:57:50:d9:81:ce:5c:0e: 70:1b:0a:d5:75:69:97:32:86:b2:2c:fd:96:33:47: 16:2b:92:c9:0c:e7:91:81:e1:fb:38:a7:f3:df:a3: af:e1:7d:10:b3:e2:25:79:9b:7e:04:9c:b0:c8:b5: 02:a1:ae:65:c8:a0:37:69:b2:4e:9e:b9:35:56:d0: 80:91:7a:d0:95:37:29:31:c4:36:1a:65:bd:a4:e0: 9d:9d:66:eb:7a:3b:d9:91:b7:8f:56:a5:1f:7b:d3: 97:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9D:A5:8D:47:C5:3B:DC:75:A2:D6:DA:27:32:43:E4:37:7E:80:13 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS33651.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.174.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:55:ab:99:df:30:b6:aa:6d:80:64:23:9e:16:57:37:4d:51: 61:82:34:8c:9e:87:c9:62:90:63:c9:42:8f:11:8c:75:e7:d9: 4b:2f:10:39:2c:04:06:a2:09:de:e3:bf:25:6e:2e:f6:a1:25: 38:9a:61:0e:37:59:09:62:09:0d:31:99:ec:ea:65:47:15:ec: 8c:bd:52:13:40:55:b4:5f:0d:02:2b:c0:01:57:c0:88:71:29: 52:ce:43:1e:5e:78:03:bf:23:3f:84:96:e7:93:57:98:91:da: 1d:2d:8a:b6:05:69:55:53:33:47:06:d9:14:16:1a:a9:3f:fb: 21:8d:0f:dc:07:c6:cb:1e:2d:c7:6d:e9:86:9e:24:12:ee:00: a7:91:75:f0:37:15:56:b2:72:ef:c7:8c:29:e6:82:92:dd:57: bf:90:7a:26:4e:43:e0:16:28:7b:9c:33:62:7e:79:2e:69:87: 9d:8f:b7:80:be:17:6c:b6:c5:40:a1:2b:84:ad:bb:ad:3a:b3: 88:b1:a7:ec:b6:ea:a9:e7:dd:57:6d:04:8d:40:0c:98:30:a4: 38:43:03:3e:2c:f1:f5:3f:cd:51:de:65:a6:94:1d:42:b2:55: aa:89:cc:3e:e0:ac:8b:83:e9:8e:bc:65:ce:99:62:2a:11:d6: 35:6d:24:07 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUEaYfMF7hZ727YsMZ8ELiRnz7YxYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwODI1MTAxNDIzWhcNMjcwODI0MTAxOTIz WjAzMTEwLwYDVQQDEygyODlEQTU4RDQ3QzUzQkRDNzVBMkQ2REEyNzMyNDNFNDM3 N0U4MDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nq2zLqDZSld tc1BN3GBM5zZiaYnwwUL8Nq5VlWX0wHT7BWvAWNVbwV6j897X91tEUbT09Fgugj9 u7UAoOG8k5ljIG5WkRnFTTMRlowxXHV0MNwIbQ1ZeUGkfhhU6WuPl0lo+zmq8Zqi wagpXkjtzleBPz7A4eB17N9FeOVnApwUF6656J1KVXNSSauloRINMYBG98+foIFy Ka0shFdQ2YHOXA5wGwrVdWmXMoayLP2WM0cWK5LJDOeRgeH7OKfz36Ov4X0Qs+Il eZt+BJywyLUCoa5lyKA3abJOnrk1VtCAkXrQlTcpMcQ2GmW9pOCdnWbrejvZkbeP VqUfe9OX6QIDAQABo4ICfjCCAnowHQYDVR0OBBYEFCidpY1HxTvcdaLW2icyQ+Q3 foATMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzMzNjUxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBKBuuMA0GCSqGSIb3DQEBCwUAA4IB AQA+VauZ3zC2qm2AZCOeFlc3TVFhgjSMnofJYpBjyUKPEYx159lLLxA5LAQGogne 478lbi72oSU4mmEON1kJYgkNMZns6mVHFeyMvVITQFW0Xw0CK8ABV8CIcSlSzkMe XngDvyM/hJbnk1eYkdodLYq2BWlVUzNHBtkUFhqpP/shjQ/cB8bLHi3HbemGniQS 7gCnkXXwNxVWsnLvx4wp5oKS3Ve/kHomTkPgFih7nDNifnkuaYedj7eAvhdstsVA oSuErbutOrOIsafstuqp591XbQSNQAyYMKQ4QwM+LPH1P81R3mWmlB1CslWqicw+ 4KyLg+mOvGXOmWIqEdY1bSQH -----END CERTIFICATE-----Generated at Fri Sep 4 16:28:49 2026 by rpki-client