$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS33685.roa File: AS33685.roa (raw, json) Hash identifier: XEf9XGFbvotSBamdlyZlbbawgpBqlH/4pkHptloWX2o= Subject key identifier: A3:8E:68:45:90:DF:03:A4:66:EB:26:3D:F0:36:6B:C8:D3:B4:B5:69 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 582D8F712215C344148D7AB0816FAABD45964E28 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS33685.roa Signing time: Wed 18 Mar 2026 17:53:02 +0000 ROA not before: Wed 18 Mar 2026 17:48:02 +0000 ROA not after: Wed 17 Mar 2027 17:53:02 +0000 asID: 33685 IP address blocks: 157.254.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 21:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:2d:8f:71:22:15:c3:44:14:8d:7a:b0:81:6f:aa:bd:45:96:4e:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Mar 18 17:48:02 2026 GMT Not After : Mar 17 17:53:02 2027 GMT Subject: CN=A38E684590DF03A466EB263DF0366BC8D3B4B569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0a:89:b3:3f:92:05:cf:a0:81:5b:c9:d1:a6: db:b5:77:26:6f:d0:55:ec:13:4e:ef:9b:f2:2d:d5: f3:0e:9c:62:48:40:00:2a:fd:4b:5b:e3:50:78:f0: 26:64:6e:d6:98:89:31:17:59:99:bf:8a:e4:32:45: e1:6e:15:96:87:b6:d8:09:11:1b:72:88:d4:22:e5: 8b:b7:ff:60:7b:05:b8:9e:00:f5:56:c1:f7:8c:08: 0c:fd:ae:82:6c:f6:76:e4:e6:c1:3c:60:9c:49:a4: f9:49:fc:b6:19:a5:61:09:4a:f8:79:9b:11:3f:e9: b5:33:c0:c0:63:85:76:7f:da:f6:6b:c5:fc:0a:71: 13:e5:ef:e9:7f:37:5c:7b:81:81:a1:e0:92:60:3e: 32:8a:d1:8d:94:83:32:3b:d0:4c:e7:90:51:f1:18: 11:ba:51:2b:8c:ca:44:bc:33:aa:f5:8a:93:4d:5f: 9e:41:80:79:c7:36:00:f3:c2:e8:28:15:95:b4:8d: 5a:b7:36:29:cf:09:7d:24:93:0a:72:8c:38:cb:c0: 01:1d:89:7a:b2:29:51:79:2d:6b:74:82:2f:10:3b: fe:77:d9:68:85:0c:cb:1c:52:72:c3:93:e0:51:b3: ae:49:14:1f:93:43:ba:04:de:37:80:8f:69:dc:ad: e5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8E:68:45:90:DF:03:A4:66:EB:26:3D:F0:36:6B:C8:D3:B4:B5:69 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS33685.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.211.0/24 Signature Algorithm: sha256WithRSAEncryption 39:ff:ab:3a:4b:2f:9a:7e:6c:e8:c8:88:31:1d:6b:f2:33:a4: 29:c7:ec:c6:a2:dd:f5:dd:61:37:ff:48:0a:47:fe:33:5d:7c: e6:c9:dd:c3:a4:9b:ad:58:60:3f:39:dc:9c:95:1d:e3:b5:4d: a1:87:33:ea:0c:7d:cb:18:d3:4a:99:12:98:15:9b:2c:8e:a3: 33:98:c1:47:0a:e4:8d:2b:3d:42:47:22:0d:2e:b9:25:1f:1d: 32:65:e3:53:81:2d:64:6c:88:79:32:ad:1b:eb:32:bf:98:75: 82:39:e1:76:63:84:ea:32:5e:45:d2:96:1c:68:7b:89:27:54: f8:ed:c2:f8:d6:ae:3b:1b:3d:ad:e6:87:12:27:1a:34:0b:71: 47:48:b7:a1:b0:3a:9e:74:a4:11:78:7a:a0:6d:90:80:39:dd: 34:64:9e:f0:8e:5b:76:2a:8f:3e:1a:86:d7:ef:47:52:d3:8f: 4c:7f:09:a6:79:e0:d9:10:30:d1:b2:5f:bf:5b:18:29:26:dd: c1:dd:cf:eb:41:56:57:cd:0b:11:ee:cb:5d:57:76:49:7e:38: 91:aa:bb:05:9e:3a:42:05:a9:cc:a2:38:f1:22:fa:07:a6:f9: a9:b2:ca:98:c4:80:2b:a8:7b:90:9c:89:66:d9:69:ea:d4:48: bf:47:97:34 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUWC2PcSIVw0QUjXqwgW+qvUWWTigwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwMzE4MTc0ODAyWhcNMjcwMzE3MTc1MzAy WjAzMTEwLwYDVQQDEyhBMzhFNjg0NTkwREYwM0E0NjZFQjI2M0RGMDM2NkJDOEQz QjRCNTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgqJsz+SBc+g gVvJ0abbtXcmb9BV7BNO75vyLdXzDpxiSEAAKv1LW+NQePAmZG7WmIkxF1mZv4rk MkXhbhWWh7bYCREbcojUIuWLt/9gewW4ngD1VsH3jAgM/a6CbPZ25ObBPGCcSaT5 Sfy2GaVhCUr4eZsRP+m1M8DAY4V2f9r2a8X8CnET5e/pfzdce4GBoeCSYD4yitGN lIMyO9BM55BR8RgRulErjMpEvDOq9YqTTV+eQYB5xzYA88LoKBWVtI1atzYpzwl9 JJMKcow4y8ABHYl6silReS1rdIIvEDv+d9lohQzLHFJyw5PgUbOuSRQfk0O6BN43 gI9p3K3lwQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFKOOaEWQ3wOkZusmPfA2a8jT tLVpMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzMzNjg1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf7TMA0GCSqGSIb3DQEBCwUAA4IB AQA5/6s6Sy+afmzoyIgxHWvyM6Qpx+zGot313WE3/0gKR/4zXXzmyd3DpJutWGA/ OdyclR3jtU2hhzPqDH3LGNNKmRKYFZssjqMzmMFHCuSNKz1CRyINLrklHx0yZeNT gS1kbIh5Mq0b6zK/mHWCOeF2Y4TqMl5F0pYcaHuJJ1T47cL41q47Gz2t5ocSJxo0 C3FHSLehsDqedKQReHqgbZCAOd00ZJ7wjlt2Ko8+GobX70dS049MfwmmeeDZEDDR sl+/WxgpJt3B3c/rQVZXzQsR7stdV3ZJfjiRqrsFnjpCBanMojjxIvoHpvmpssqY xIArqHuQnIlm2Wnq1Ei/R5c0 -----END CERTIFICATE-----Generated at Mon Mar 23 04:33:55 2026 by rpki-client