$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/337f1080-5d37-3961-842b-80b39577747a.roa File: 337f1080-5d37-3961-842b-80b39577747a.roa (raw, json) Hash identifier: AvCywUZYOAhh+lw3On4+5y/nkdxlOK2YQbkf1wjb+cU= Subject key identifier: A4:73:AA:1D:5B:CA:B2:C0:13:4C:3A:E5:EC:D6:92:77:C7:09:83:84 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD994BCFF0000942FA600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/337f1080-5d37-3961-842b-80b39577747a.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.70.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d9:94:bc:ff:00:00:94:2f:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=b3f3a8c2-0dfe-4382-bb94-701e1e53d598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:44:84:ad:4e:ef:f5:ce:ad:42:42:37:18:5f: c0:c4:6d:c9:7d:f2:f4:05:16:a6:cd:66:01:67:d4: 45:bc:1e:be:a1:e7:7a:34:0a:01:46:36:32:12:63: e2:77:2a:ca:e7:91:87:46:0d:eb:8d:45:46:66:56: bc:aa:10:d4:15:2e:56:b9:a9:d2:f2:78:f8:64:51: ee:b1:bc:0b:ea:c9:fc:d3:c3:8c:4a:0b:15:88:70: 12:fa:1e:23:da:f2:e2:56:28:0e:d3:c9:77:8d:e5: c6:17:2e:20:73:b9:b4:73:40:2e:ed:55:b9:00:ed: fb:98:a7:aa:18:db:56:f3:a6:65:6d:0a:f7:88:22: d4:49:fc:a9:b6:a9:6b:89:26:3d:3f:25:c6:4b:f9: d4:14:b1:39:4a:76:c7:64:33:4a:a0:ac:6f:9b:f2: 38:7c:79:13:38:1f:e3:73:e5:cd:1d:43:d1:34:a7: 41:c6:a8:04:4a:cd:68:3e:f9:1f:e8:62:12:30:05: 46:09:43:60:07:c4:b9:ad:47:63:36:56:9d:d5:a1: 5e:18:a7:85:9a:dc:a0:68:57:e9:0d:3c:67:30:5b: 75:50:5f:6d:e3:46:0b:fe:41:04:d9:14:a3:54:74: c2:18:50:82:11:05:c2:04:e3:6d:20:9f:9e:31:eb: 94:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:73:AA:1D:5B:CA:B2:C0:13:4C:3A:E5:EC:D6:92:77:C7:09:83:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/337f1080-5d37-3961-842b-80b39577747a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:c1:59:2a:e9:ec:48:85:15:5d:5a:5a:57:ba:4f:36:8d:96: 37:f7:7c:56:84:f8:47:4b:31:bf:18:ef:99:2e:cd:60:c5:7e: 5e:3f:47:52:38:7e:86:69:83:b3:e2:e0:7c:4d:4b:aa:ee:9b: 04:4a:2f:ae:55:f1:5b:89:a8:4c:7b:7a:63:67:10:76:6d:76: 39:7d:3f:ab:40:24:df:59:f9:92:3a:9d:05:1b:5d:c7:cf:a0: 57:f3:5a:c9:60:9e:72:3e:fb:1b:8b:cd:fe:32:fe:f8:e3:8a: 40:e6:f9:7f:5b:83:94:c4:41:d4:17:04:9d:0d:d9:16:a5:bb: d0:71:53:64:a6:29:02:06:d4:c9:eb:11:7f:b2:f1:99:4c:0c: 2b:0e:e7:f6:a0:1f:d6:15:f2:48:ab:d1:0b:88:fe:b4:10:17: 57:0a:02:69:95:34:d9:9b:65:07:57:11:11:58:44:49:07:83: 1d:15:94:52:6c:0f:bb:0d:46:e2:6e:cb:37:0b:2e:94:31:c0: 34:45:72:07:98:d3:9c:25:5f:94:40:63:1c:a3:57:fe:3f:2a: b7:14:18:bc:75:17:e1:91:6d:e9:00:60:88:f3:81:fe:c7:e9: 90:26:36:e3:6a:56:98:7d:7b:08:2b:be:88:4a:72:63:01:1f: 5c:d5:d5:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdmUvP8AAJQvpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YjNmM2E4YzItMGRmZS00MzgyLWJiOTQtNzAxZTFlNTNkNTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0SErU7v9c6tQkI3GF/AxG3JffL0BRamzWYB Z9RFvB6+oed6NAoBRjYyEmPidyrK55GHRg3rjUVGZla8qhDUFS5WuanS8nj4ZFHu sbwL6sn808OMSgsViHAS+h4j2vLiVigO08l3jeXGFy4gc7m0c0Au7VW5AO37mKeq GNtW86ZlbQr3iCLUSfyptqlriSY9PyXGS/nUFLE5SnbHZDNKoKxvm/I4fHkTOB/j c+XNHUPRNKdBxqgESs1oPvkf6GISMAVGCUNgB8S5rUdjNlad1aFeGKeFmtygaFfp DTxnMFt1UF9t40YL/kEE2RSjVHTCGFCCEQXCBONtIJ+eMeuUMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRzqh1byrLAE0w65ezWknfHCYOEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzM3ZjEwODAtNWQzNy0z OTYxLTg0MmItODBiMzk1Nzc3NDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPBWSrp7EiFFV1aWle6TzaNljf3fFaE+EdLMb8Y75kuzWDFfl4/R1I4 foZpg7Pi4HxNS6rumwRKL65V8VuJqEx7emNnEHZtdjl9P6tAJN9Z+ZI6nQUbXcfP oFfzWslgnnI++xuLzf4y/vjjikDm+X9bg5TEQdQXBJ0N2Ralu9BxU2SmKQIG1Mnr EX+y8ZlMDCsO5/agH9YV8kir0QuI/rQQF1cKAmmVNNmbZQdXERFYREkHgx0VlFJs D7sNRuJuyzcLLpQxwDRFcgeY05wlX5RAYxyjV/4/KrcUGLx1F+GRbekAYIjzgf7H 6ZAmNuNqVph9ewgrvohKcmMBH1zV1eE= -----END CERTIFICATE-----Generated at Sun Oct 11 21:18:23 2026 by rpki-client