
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS33667.roa
File: AS33667.roa (raw, json)
Hash identifier: SGRpEoJsfM2T+i5kqoyCCEGIUcXKGZLGnIW37dxe1gY=
Subject key identifier: D0:89:F9:A0:7E:EE:9B:41:F9:61:95:CA:3B:B5:90:11:C8:08:D8:DD
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 110671BADA644BA885CCF6F8EF4E7B61012BF245
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS33667.roa
Signing time: Tue 25 Aug 2026 10:19:11 +0000
ROA not before: Tue 25 Aug 2026 10:14:11 +0000
ROA not after: Tue 24 Aug 2027 10:19:11 +0000
asID: 33667
IP address blocks: 74.50.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Aug 2026 18:08:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:06:71:ba:da:64:4b:a8:85:cc:f6:f8:ef:4e:7b:61:01:2b:f2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Aug 25 10:14:11 2026 GMT
Not After : Aug 24 10:19:11 2027 GMT
Subject: CN=D089F9A07EEE9B41F96195CA3BB59011C808D8DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c0:e0:89:9d:e9:29:66:56:80:4f:d5:38:46:
de:45:c4:61:e9:d9:60:5d:7e:f6:8d:64:c7:79:11:
c4:09:f0:08:ba:c3:07:ec:3d:89:e7:1f:62:64:11:
c9:7f:0d:e4:d7:2d:f1:61:78:0f:a4:f3:3b:9c:da:
e6:e9:9a:a7:93:d2:56:ac:57:7a:30:9f:88:8f:9f:
56:1d:8b:bd:a6:d1:c8:ba:04:dd:e2:8e:d7:4c:98:
eb:3f:a0:a3:ef:50:9b:e9:74:e3:da:79:67:57:8a:
de:30:a3:35:01:04:4a:ae:ae:34:e6:c8:e6:1a:55:
e4:82:7f:92:70:25:47:41:9b:06:da:13:a9:10:a4:
fa:18:03:bc:8d:5c:ae:6f:99:7b:1f:b9:05:52:5f:
2f:07:d6:03:82:5d:94:91:d7:22:c2:c8:6c:a2:d8:
c3:d5:34:8d:59:3b:b5:60:36:7a:59:0e:b2:06:90:
b8:eb:db:b9:87:d9:b5:84:49:bc:7f:7a:98:18:a9:
cf:9f:50:ae:64:f0:00:7f:f1:7c:6a:3b:89:f7:15:
79:da:34:f5:a6:b1:0f:97:31:35:5e:81:cc:96:b0:
47:14:d2:86:b0:14:38:e3:fb:e4:e7:6d:e7:06:19:
c9:da:2a:0b:e3:a0:71:66:4a:6a:72:c9:2c:fa:d9:
27:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:89:F9:A0:7E:EE:9B:41:F9:61:95:CA:3B:B5:90:11:C8:08:D8:DD
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS33667.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.50.14.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:85:03:25:46:25:23:be:35:f2:fd:8a:9c:01:02:3a:5a:62:
fe:f7:24:e5:af:0a:89:2a:09:80:b2:be:4d:d3:c4:4f:8b:12:
de:c1:0e:85:dc:d9:a4:97:dc:08:5f:c9:d0:4b:88:5d:a3:48:
ee:53:27:5d:52:ad:dd:ca:e1:22:27:22:dd:56:5d:bd:aa:67:
14:05:eb:c1:cc:c6:1e:d1:8d:fc:27:3e:d4:6d:e7:38:4a:d2:
40:43:a5:b5:37:56:fb:b8:68:89:40:80:e7:e0:9a:7f:1b:d5:
65:c0:08:e4:61:5a:f7:1c:ce:dc:f8:94:b2:fb:ae:3a:e3:65:
75:ba:2f:65:47:e1:24:9e:1d:1c:26:84:7c:97:ef:ec:1e:f7:
fe:f2:fd:20:2b:36:54:30:f1:63:b1:b6:e5:d6:70:37:46:52:
17:41:c0:fa:65:ac:4d:5b:aa:92:b9:f4:02:2f:f4:28:ef:15:
a2:05:d0:c7:aa:cc:ae:43:f6:54:25:87:75:5b:23:ab:cb:ff:
18:38:46:4d:91:05:09:ad:77:09:e0:ec:4a:01:d3:35:e3:5d:
32:c6:c2:47:7e:10:08:4e:af:80:0c:88:93:f3:6d:a2:82:5e:
85:fb:41:59:90:d6:14:84:e2:c0:05:46:a7:78:e6:b2:c1:54:
08:7c:fb:56
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUEQZxutpkS6iFzPb47057YQEr8kUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwODI1MTAxNDExWhcNMjcwODI0MTAxOTEx
WjAzMTEwLwYDVQQDEyhEMDg5RjlBMDdFRUU5QjQxRjk2MTk1Q0EzQkI1OTAxMUM4
MDhEOEREMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMDgiZ3pKWZW
gE/VOEbeRcRh6dlgXX72jWTHeRHECfAIusMH7D2J5x9iZBHJfw3k1y3xYXgPpPM7
nNrm6Zqnk9JWrFd6MJ+Ij59WHYu9ptHIugTd4o7XTJjrP6Cj71Cb6XTj2nlnV4re
MKM1AQRKrq405sjmGlXkgn+ScCVHQZsG2hOpEKT6GAO8jVyub5l7H7kFUl8vB9YD
gl2UkdciwshsotjD1TSNWTu1YDZ6WQ6yBpC469u5h9m1hEm8f3qYGKnPn1CuZPAA
f/F8ajuJ9xV52jT1prEPlzE1XoHMlrBHFNKGsBQ44/vk523nBhnJ2ioL46BxZkpq
csks+tknQwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFNCJ+aB+7ptB+WGVyju1kBHI
CNjdMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzMzNjY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSjIOMA0GCSqGSIb3DQEBCwUAA4IB
AQArhQMlRiUjvjXy/YqcAQI6WmL+9yTlrwqJKgmAsr5N08RPixLewQ6F3Nmkl9wI
X8nQS4hdo0juUyddUq3dyuEiJyLdVl29qmcUBevBzMYe0Y38Jz7Ubec4StJAQ6W1
N1b7uGiJQIDn4Jp/G9VlwAjkYVr3HM7c+JSy+64642V1ui9lR+Eknh0cJoR8l+/s
Hvf+8v0gKzZUMPFjsbbl1nA3RlIXQcD6ZaxNW6qSufQCL/Qo7xWiBdDHqsyuQ/ZU
JYd1WyOry/8YOEZNkQUJrXcJ4OxKAdM1410yxsJHfhAITq+ADIiT822igl6F+0FZ
kNYUhOLABUaneOaywVQIfPtW
-----END CERTIFICATE-----
Generated at Wed Aug 26 09:11:39 2026 by rpki-client