$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa File: efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa (raw, json) Hash identifier: f2wubDOgoyirwfER7gtmVBsuU4SVvI0sEmPzmwBJ6ws= Subject key identifier: 83:11:D8:46:EE:2E:73:AC:8B:08:A2:80:F0:64:8C:81:63:70:4C:5B Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584A51D0655B5231773E7DD8BBC0 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 6621 IP address blocks: 174.32.76.0/24 maxlen: 24 174.32.81.0/24 maxlen: 24 174.32.92.0/24 maxlen: 24 174.32.107.0/24 maxlen: 24 174.32.108.0/22 maxlen: 22 174.32.112.0/20 maxlen: 20 174.32.129.0/24 maxlen: 24 174.32.130.0/23 maxlen: 23 174.32.133.0/24 maxlen: 24 174.32.134.0/23 maxlen: 23 174.32.136.0/21 maxlen: 21 174.32.144.0/23 maxlen: 23 174.32.160.0/22 maxlen: 22 174.32.164.0/22 maxlen: 22 174.32.168.0/22 maxlen: 22 174.32.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:65:5b:52:31:77:3e:7d:d8:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=5536bc71-0305-43c8-b75c-e638e7871a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:39:9a:6b:d5:03:ff:92:e3:05:21:b5:fe:ce: 9c:03:2d:f4:0a:ab:15:42:99:c4:2a:d7:b4:5d:fa: 34:b6:56:0b:0d:f7:62:0a:93:8c:75:85:18:d2:4a: 15:37:24:08:a8:0d:68:df:fc:00:7f:ca:db:06:98: a7:dc:b5:fb:e8:08:c4:0f:7e:d8:3c:b6:87:99:25: 3f:f8:bb:4f:66:72:72:a2:ec:aa:48:87:9b:5f:dd: e6:91:ad:8a:36:da:aa:96:50:8f:fb:32:1f:b6:5d: 62:f1:a3:6c:f0:5f:7b:d1:99:74:38:4d:43:01:b7: cd:7d:8c:eb:c2:7c:b6:e6:17:c6:84:99:2c:87:f8: e9:90:1f:fd:db:bc:64:ac:06:ea:42:2c:ad:18:5e: b1:b6:f8:3a:86:98:3e:b9:09:42:0b:57:f5:4d:08: c3:4f:e8:82:9e:e3:1e:c4:fc:44:08:3c:a2:b2:1c: 28:55:e2:26:83:b2:0b:3a:0b:71:d1:0c:17:ff:d8: ba:92:65:ce:f8:5f:06:ce:f9:89:0d:e0:3d:6b:f2: c9:fb:29:09:19:04:2c:23:1d:5d:3d:35:3d:7d:50: d0:de:75:85:2a:c4:02:4c:cf:53:3c:eb:a8:b2:67: 48:05:5d:8a:cf:87:54:03:a4:53:be:2c:af:f8:0f: db:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:11:D8:46:EE:2E:73:AC:8B:08:A2:80:F0:64:8C:81:63:70:4C:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 174.32.76.0/24 174.32.81.0/24 174.32.92.0/24 174.32.107.0-174.32.127.255 174.32.129.0-174.32.131.255 174.32.133.0-174.32.145.255 174.32.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:cf:cb:8e:0f:a4:a2:da:89:77:89:32:09:a0:d6:5b:2f:26: af:b2:c0:e0:f8:16:e3:30:ed:12:87:24:bf:19:fe:ba:52:15: 0f:75:37:37:8f:27:62:f8:e8:0a:be:54:1b:af:89:50:ee:4e: 43:74:ff:73:15:a0:17:a8:47:94:50:14:86:9e:e8:1b:ed:d3: e5:a9:76:e6:38:c2:c8:45:2c:d0:2d:07:05:ed:51:d4:32:2b: 0c:47:a7:28:3b:c4:22:f8:e0:b8:f7:55:78:d8:38:a9:5c:55: 97:32:bf:b4:6f:86:84:36:3a:7d:64:73:ea:28:6e:dc:ae:3a: 0b:7f:9a:ca:54:22:72:f0:12:aa:fe:d6:11:1c:1a:4d:54:69: 32:c2:52:d0:6b:25:b1:b1:be:ab:e1:9b:ce:db:36:2e:ea:05: 6c:ec:10:d1:48:13:59:7b:f4:0b:6e:57:ec:cc:ca:d2:12:cf: 2a:fa:6a:39:31:31:90:23:61:7b:2c:7c:8c:b4:78:73:c0:cc: 89:39:36:67:e7:a4:65:23:63:89:d7:dc:36:c0:11:c2:31:18: 97:a4:d7:38:ea:ed:59:21:d1:8f:3b:05:23:b7:09:4c:1c:02: 45:55:7f:bb:f7:85:72:cc:1e:0d:e2:8f:2a:21:9e:13:28:d5: 65:b5:26:5c -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWEpR0GVbUjF3Pn3Yu8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk NTUzNmJjNzEtMDMwNS00M2M4LWI3NWMtZTYzOGU3ODcxYTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizmaa9UD/5LjBSG1/s6cAy30CqsVQpnEKte0 Xfo0tlYLDfdiCpOMdYUY0koVNyQIqA1o3/wAf8rbBpin3LX76AjED37YPLaHmSU/ +LtPZnJyouyqSIebX93mka2KNtqqllCP+zIftl1i8aNs8F970Zl0OE1DAbfNfYzr wny25hfGhJksh/jpkB/927xkrAbqQiytGF6xtvg6hpg+uQlCC1f1TQjDT+iCnuMe xPxECDyishwoVeImg7ILOgtx0QwX/9i6kmXO+F8GzvmJDeA9a/LJ+ykJGQQsIx1d PTU9fVDQ3nWFKsQCTM9TPOuosmdIBV2Kz4dUA6RTviyv+A/bvQIDAQABo4IDkTCC A40wHQYDVR0OBBYEFIMR2EbuLnOsiwiigPBkjIFjcExbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvZWZhY2JhYWYtNDQ0YS0z MmZiLThlZTAtZTE4MmJkOWU1NWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAriBMAwQA riBRAwQAriBcMAwDBACuIGsDBAeuIAAwDAMEAK4ggQMEAq4ggDAMAwQAriCFAwQB riCQAwQEriCgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAArPy44PpKLaiXeJMgmg1lsvJq+ywOD4FuMw7RKH JL8Z/rpSFQ91NzePJ2L46Aq+VBuviVDuTkN0/3MVoBeoR5RQFIae6Bvt0+WpduY4 wshFLNAtBwXtUdQyKwxHpyg7xCL44Lj3VXjYOKlcVZcyv7RvhoQ2On1kc+oobtyu Ogt/mspUInLwEqr+1hEcGk1UaTLCUtBrJbGxvqvhm87bNi7qBWzsENFIE1l79Atu V+zMytISzyr6ajkxMZAjYXssfIy0eHPAzIk5NmfnpGUjY4nX3DbAEcIxGJek1zjq 7Vkh0Y87BSO3CUwcAkVVf7v3hXLMHg3ijyohnhMo1WW1Jlw= -----END CERTIFICATE-----Generated at Tue Jul 1 16:53:29 2025 by rpki-client