$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS33667.roa File: AS33667.roa (raw, json) Hash identifier: VInbQ5M7cvo3Y2TMYA2c3snEC4f3WWN2qd4ghRWySrE= Subject key identifier: 84:C0:AC:CB:F4:8F:88:89:2D:FE:01:AE:08:EE:4E:DA:65:4E:C2:81 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 18DC3FA37917E1E88EA73A8423650CAD20559551 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS33667.roa Signing time: Tue 25 Aug 2026 10:19:23 +0000 ROA not before: Tue 25 Aug 2026 10:14:23 +0000 ROA not after: Tue 24 Aug 2027 10:19:23 +0000 asID: 33667 IP address blocks: 40.27.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 10:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:dc:3f:a3:79:17:e1:e8:8e:a7:3a:84:23:65:0c:ad:20:55:95:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Aug 25 10:14:23 2026 GMT Not After : Aug 24 10:19:23 2027 GMT Subject: CN=84C0ACCBF48F88892DFE01AE08EE4EDA654EC281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:26:85:6a:56:c9:6a:c8:b7:6f:ec:0d:96:92: b2:f4:1a:c3:d4:0e:e9:30:49:2e:af:a1:20:68:11: 33:5d:04:fa:7b:5e:30:34:6b:d1:ce:ab:a3:23:32: 6c:15:20:a9:4f:39:0c:59:e7:c2:f7:b1:2a:f1:22: 96:98:de:b9:dd:38:db:21:d7:99:57:6a:ca:74:23: d5:56:c7:a4:53:86:b1:96:bd:1e:00:6a:81:c6:10: 41:44:c8:b5:02:52:76:fc:26:da:60:cf:37:0a:06: 37:4c:07:6a:c6:54:77:99:cd:00:c2:78:f9:a9:3e: 28:26:1e:4b:49:43:f3:8b:a4:b4:bb:05:b0:6c:fc: 56:51:d0:77:ee:39:4d:9a:ca:53:b5:5e:a7:05:ef: 67:b1:ae:ff:0e:73:79:2c:4c:27:5f:d6:7a:f9:bf: 39:3e:53:43:9f:07:e4:cd:e2:02:60:df:32:97:71: 12:95:d4:35:cb:2d:23:cc:a1:29:79:00:0a:17:b6: 0f:b4:b8:38:35:6c:97:5a:89:c5:cd:aa:ac:14:93: ed:c9:ea:12:e6:d9:ab:6a:a3:ed:3c:fb:55:59:71: ce:66:ec:b5:a8:52:52:8d:b7:c5:a0:d2:7e:56:13: 69:02:a5:e5:c0:0e:f2:c8:31:f7:9e:1b:e3:a7:f4: e6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C0:AC:CB:F4:8F:88:89:2D:FE:01:AE:08:EE:4E:DA:65:4E:C2:81 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS33667.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.174.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:64:cb:00:99:d0:75:b9:6c:c2:c2:97:2a:8f:27:15:69:f8: b3:27:92:13:31:1b:9f:49:44:12:85:1c:07:09:8a:50:a9:5f: 8e:f5:fd:f1:97:ed:d1:7f:67:e3:80:bd:7b:fd:b6:28:0e:6e: 58:96:65:da:5c:f5:69:1e:6d:1d:bf:f3:9e:68:1e:4c:4b:10: 0c:32:05:22:1e:bd:42:4b:ec:9f:0b:04:77:11:6c:f0:22:45: 3f:30:c7:98:3e:93:08:64:cf:f8:97:ea:16:cc:3c:65:be:fa: 75:b6:06:c1:3b:bf:07:8b:18:cd:9a:cb:c8:3b:f0:f7:f1:92: 0e:d3:56:01:4b:91:a4:b3:51:c0:1d:00:4c:49:93:95:0e:d2: a8:f7:a2:70:89:87:fc:cd:85:43:38:8e:83:af:5a:fe:5d:5d: 4b:e3:7f:cb:bb:57:02:7e:21:88:ba:b7:f2:f0:ea:a4:20:a2: 01:d9:16:73:f0:b7:e9:d1:a5:b5:18:bd:0d:4f:e0:5b:08:00: 0a:3f:4e:4a:bf:ab:d4:7a:3c:4d:e0:5f:57:a6:c3:29:50:3f: b9:14:ed:a5:25:4f:86:9e:20:57:a5:6c:3c:d8:e5:0e:18:6c: 5f:5c:3c:89:7b:83:30:e2:41:a0:9c:92:57:8c:88:9f:f4:2f: c9:30:48:04 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUGNw/o3kX4eiOpzqEI2UMrSBVlVEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwODI1MTAxNDIzWhcNMjcwODI0MTAxOTIz WjAzMTEwLwYDVQQDEyg4NEMwQUNDQkY0OEY4ODg5MkRGRTAxQUUwOEVFNEVEQTY1 NEVDMjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSaFalbJasi3 b+wNlpKy9BrD1A7pMEkur6EgaBEzXQT6e14wNGvRzqujIzJsFSCpTzkMWefC97Eq 8SKWmN653TjbIdeZV2rKdCPVVsekU4axlr0eAGqBxhBBRMi1AlJ2/CbaYM83CgY3 TAdqxlR3mc0Awnj5qT4oJh5LSUPzi6S0uwWwbPxWUdB37jlNmspTtV6nBe9nsa7/ DnN5LEwnX9Z6+b85PlNDnwfkzeICYN8yl3ESldQ1yy0jzKEpeQAKF7YPtLg4NWyX WonFzaqsFJPtyeoS5tmraqPtPPtVWXHOZuy1qFJSjbfFoNJ+VhNpAqXlwA7yyDH3 nhvjp/Tm4QIDAQABo4ICfjCCAnowHQYDVR0OBBYEFITArMv0j4iJLf4BrgjuTtpl TsKBMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzMzNjY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBKBuuMA0GCSqGSIb3DQEBCwUAA4IB AQAdZMsAmdB1uWzCwpcqjycVafizJ5ITMRufSUQShRwHCYpQqV+O9f3xl+3Rf2fj gL17/bYoDm5YlmXaXPVpHm0dv/OeaB5MSxAMMgUiHr1CS+yfCwR3EWzwIkU/MMeY PpMIZM/4l+oWzDxlvvp1tgbBO78HixjNmsvIO/D38ZIO01YBS5Gks1HAHQBMSZOV DtKo96JwiYf8zYVDOI6Dr1r+XV1L43/Lu1cCfiGIurfy8OqkIKIB2RZz8Lfp0aW1 GL0NT+BbCAAKP05Kv6vUejxN4F9XpsMpUD+5FO2lJU+GniBXpWw82OUOGGxfXDyJ e4Mw4kGgnJJXjIif9C/JMEgE -----END CERTIFICATE-----Generated at Fri Sep 4 16:28:50 2026 by rpki-client