$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS33490.roa File: AS33490.roa (raw, json) Hash identifier: iG2v9lf0XgHGd8XvOJknUr0/4Pl/tEHUJgFoT9TXhF0= Subject key identifier: 40:A7:4F:86:95:1C:3D:F5:E2:8E:92:C3:85:A7:3D:06:DB:50:23:AE Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 08EF713C43FA8D17029C3D8FC8D4AC995AFBA9D1 Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS33490.roa Signing time: Tue 28 Oct 2025 11:30:39 +0000 ROA not before: Tue 28 Oct 2025 11:25:39 +0000 ROA not after: Tue 27 Oct 2026 11:30:39 +0000 asID: 33490 IP address blocks: 140.99.27.0/24 maxlen: 24 140.99.59.0/24 maxlen: 24 140.99.123.0/24 maxlen: 24 140.99.151.0/24 maxlen: 24 140.99.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 14:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ef:71:3c:43:fa:8d:17:02:9c:3d:8f:c8:d4:ac:99:5a:fb:a9:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Oct 28 11:25:39 2025 GMT Not After : Oct 27 11:30:39 2026 GMT Subject: CN=40A74F86951C3DF5E28E92C385A73D06DB5023AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:79:64:e1:52:07:74:5f:1f:67:67:48:de:43: 79:4b:15:b4:11:3f:04:75:12:c4:f2:1e:8e:c2:34: c0:80:6c:43:bb:23:49:ee:69:7f:c5:88:db:92:cc: 0d:e4:66:81:bb:66:93:98:8b:20:c9:4b:e0:1a:9c: d2:f1:10:47:0f:e0:6c:0d:86:fd:0c:d2:5f:36:87: b1:68:d9:09:0e:db:14:74:72:0b:e1:d3:b1:cf:27: 4f:0d:3c:ac:5f:03:8a:12:2d:fd:3e:9f:a1:73:83: 54:f9:e0:17:a9:dd:30:f5:3b:8c:50:8a:54:cb:c6: ba:dc:fd:35:bb:d1:c9:50:98:7a:fc:e1:93:bd:14: bb:90:6c:11:aa:ad:91:49:8a:8a:92:1f:f1:a1:5e: 80:2a:50:ce:8a:69:6d:6e:ab:9a:6d:e6:0c:f5:a1: b1:bb:fb:4a:b3:9d:ab:b9:07:94:89:f5:6c:af:76: 63:b6:d7:13:08:8b:0a:ac:74:b6:ca:7a:fa:ac:8a: 51:74:6b:91:ba:55:d5:4e:08:c1:6d:fd:d8:83:cc: 8d:ca:91:7d:15:da:4c:b7:06:3f:4e:13:b5:30:16: 6a:54:99:b7:a3:bc:46:f2:a0:38:c4:5c:d3:0f:44: 01:e7:c0:f1:26:b0:2a:7b:2e:9d:52:41:af:6d:3d: 91:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A7:4F:86:95:1C:3D:F5:E2:8E:92:C3:85:A7:3D:06:DB:50:23:AE X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS33490.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.27.0/24 140.99.59.0/24 140.99.123.0/24 140.99.151.0/24 140.99.211.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:5a:9c:6f:13:78:1f:52:00:e6:6e:3a:75:ea:de:14:71:79: 3a:c2:aa:4e:d6:a2:35:1d:8b:aa:ed:ff:73:4f:dc:0c:70:9f: 25:f6:39:64:a9:55:ed:3c:99:5b:3e:0e:cd:2f:7b:80:4b:72: b9:46:87:a3:f3:b5:1c:7d:3a:fd:af:4e:68:68:e7:46:5c:75: a3:55:8f:a1:ee:a5:d0:a4:f3:47:33:a5:fe:2b:83:65:4e:75: 4e:dd:e8:d0:c1:35:f7:62:bd:94:0b:7d:14:d3:ee:75:cd:85: e7:98:b0:53:a8:7b:62:e9:33:0b:6e:d9:b5:6b:48:b9:01:0c: 96:98:d2:43:a2:fc:4c:a9:e2:1b:8b:08:99:2f:4d:38:b3:1d: c9:1a:18:68:b1:c1:5b:36:d8:ef:f1:84:dd:68:bd:f7:2e:eb: e3:7f:6e:e7:f8:83:6e:46:92:70:b7:ea:af:43:97:91:14:59: aa:72:3b:9c:93:9e:98:95:b6:db:87:39:6d:71:c5:eb:62:bc: 9b:d7:1d:1d:3e:dd:87:3f:81:b6:32:c4:20:2c:68:a9:72:4e: 07:ab:80:84:82:b8:93:c6:20:17:ae:ba:2e:4c:94:cc:f3:a1: 72:0d:f9:92:bc:87:eb:f7:14:31:1d:37:04:fa:eb:f7:1a:88: 1b:d4:92:6b -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUCO9xPEP6jRcCnD2PyNSsmVr7qdEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUxMDI4MTEyNTM5WhcNMjYxMDI3MTEzMDM5 WjAzMTEwLwYDVQQDEyg0MEE3NEY4Njk1MUMzREY1RTI4RTkyQzM4NUE3M0QwNkRC NTAyM0FFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonlk4VIHdF8f Z2dI3kN5SxW0ET8EdRLE8h6OwjTAgGxDuyNJ7ml/xYjbkswN5GaBu2aTmIsgyUvg GpzS8RBHD+BsDYb9DNJfNoexaNkJDtsUdHIL4dOxzydPDTysXwOKEi39Pp+hc4NU +eAXqd0w9TuMUIpUy8a63P01u9HJUJh6/OGTvRS7kGwRqq2RSYqKkh/xoV6AKlDO imltbquabeYM9aGxu/tKs52ruQeUifVsr3ZjttcTCIsKrHS2ynr6rIpRdGuRulXV TgjBbf3Yg8yNypF9FdpMtwY/ThO1MBZqVJm3o7xG8qA4xFzTD0QB58DxJrAqey6d UkGvbT2RbQIDAQABo4ICljCCApIwHQYDVR0OBBYEFECnT4aVHD314o6Sw4WnPQbb UCOuMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzMzNDkwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAjGMbAwQAjGM7AwQAjGN7AwQAjGOX AwQAjGPTMA0GCSqGSIb3DQEBCwUAA4IBAQCLWpxvE3gfUgDmbjp16t4UcXk6wqpO 1qI1HYuq7f9zT9wMcJ8l9jlkqVXtPJlbPg7NL3uAS3K5Roej87UcfTr9r05oaOdG XHWjVY+h7qXQpPNHM6X+K4NlTnVO3ejQwTX3Yr2UC30U0+51zYXnmLBTqHti6TML btm1a0i5AQyWmNJDovxMqeIbiwiZL004sx3JGhhoscFbNtjv8YTdaL33Luvjf27n +INuRpJwt+qvQ5eRFFmqcjuck56YlbbbhzltccXrYryb1x0dPt2HP4G2MsQgLGip ck4Hq4CEgriTxiAXrrouTJTM86FyDfmSvIfr9xQxHTcE+uv3Gogb1JJr -----END CERTIFICATE-----Generated at Wed Nov 5 01:09:07 2025 by rpki-client