$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa File: efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa (raw, json) Hash identifier: GZR9QQT3HrT1EqB2WH5Jxsh6SOEZWMC7B7kNA1BQnqE= Subject key identifier: 95:F3:E4:0E:EF:FD:66:31:DC:F2:25:0E:F8:B5:E6:ED:3D:16:04:1D Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584EA788049DD6E99C11CA04B800 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 6621 IP address blocks: 174.32.76.0/24 maxlen: 24 174.32.81.0/24 maxlen: 24 174.32.92.0/24 maxlen: 24 174.32.107.0/24 maxlen: 24 174.32.108.0/22 maxlen: 22 174.32.112.0/20 maxlen: 20 174.32.129.0/24 maxlen: 24 174.32.130.0/23 maxlen: 23 174.32.133.0/24 maxlen: 24 174.32.134.0/23 maxlen: 23 174.32.136.0/21 maxlen: 21 174.32.144.0/23 maxlen: 23 174.32.160.0/22 maxlen: 22 174.32.164.0/22 maxlen: 22 174.32.168.0/22 maxlen: 22 174.32.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:04:9d:d6:e9:9c:11:ca:04:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=32d7adca-542f-4697-886a-13e8e66dac82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9e:4e:5b:dd:01:7f:6b:76:78:d6:7e:34:bd: 25:b5:52:b4:57:67:2c:73:61:96:17:8e:18:84:af: 81:7c:c1:d0:03:53:ae:e9:58:9d:0f:c3:b7:21:5f: a8:1f:6e:95:f5:44:da:fa:f5:73:0a:35:71:21:ef: af:9a:b8:a1:0e:ef:b1:d2:77:6d:cd:41:3f:62:6f: 45:76:64:c5:33:5c:9f:bf:ba:9f:0a:cd:3d:10:c8: 4e:2a:f7:54:3f:35:f4:bc:ad:cb:cd:e8:d1:6f:7b: 98:b1:0f:2d:38:3d:93:d8:71:ae:a9:d5:73:23:7d: 12:78:31:b6:09:e6:9f:68:bd:9a:fd:b7:2b:7c:83: bd:06:43:aa:ee:dc:8f:1a:a3:b7:ce:6d:72:e3:a7: 27:35:de:e1:0c:3a:e2:01:d8:47:83:15:27:a5:11: 3a:50:0d:51:6d:b0:8b:d2:9d:40:ad:23:22:a0:ed: 66:01:be:5f:a9:61:35:0c:7b:a2:dd:55:9a:f3:cf: e8:cd:20:df:e2:a6:58:9a:e6:1f:98:6e:77:67:3e: ad:8c:99:57:cd:b3:9f:1e:8d:0c:aa:47:0f:9a:69: 0a:3c:1b:b9:3d:67:3f:09:67:ff:fa:6c:bc:91:5a: b7:47:76:c0:36:4c:a9:fb:b0:6b:cb:e8:2e:4c:7a: 5a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F3:E4:0E:EF:FD:66:31:DC:F2:25:0E:F8:B5:E6:ED:3D:16:04:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 174.32.76.0/24 174.32.81.0/24 174.32.92.0/24 174.32.107.0-174.32.127.255 174.32.129.0-174.32.131.255 174.32.133.0-174.32.145.255 174.32.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:29:5f:c2:a2:db:ae:56:b4:31:32:84:c8:01:92:b0:aa:3d: b3:5f:04:48:12:d8:7c:6e:d2:64:5d:97:9f:cf:68:8f:b6:f3: 3b:98:14:74:b3:69:e1:ef:a7:5c:96:59:4e:a7:59:e1:60:ff: 05:bf:a6:16:e5:78:c9:93:a9:be:d7:b4:75:cd:91:5e:c4:11: f9:af:49:c2:95:92:38:bb:c3:f6:98:89:25:58:d5:7b:5b:cf: f1:99:6f:96:13:93:d5:6c:bb:0e:48:05:07:ce:7a:48:95:5d: 3f:d5:54:88:c0:19:f1:c1:b2:10:27:fc:4f:96:00:fe:c8:1d: 4e:65:b3:32:99:f0:c6:75:22:88:66:b0:de:a9:bd:58:64:ba: b3:cf:17:35:80:8c:2f:9c:b0:4f:cd:0f:2f:35:21:e8:cb:07: 93:ce:ab:d9:48:6b:bf:15:7e:8a:f3:c9:96:4a:47:7f:da:21: 1d:7d:23:89:69:da:2f:3d:cd:54:c9:c1:05:9b:26:53:a5:a1: 59:e4:17:29:a5:03:3f:fe:2b:0d:f1:bc:79:99:4a:d9:68:92: 81:dc:9f:73:15:12:38:7d:6a:b3:48:b1:0c:9d:08:48:a5:1f: ba:a7:f8:e5:ee:6a:6a:71:e0:90:83:a9:cf:3c:e0:86:c8:c8: 0f:dc:88:e9 -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWE6niASd1umcEcoEuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzJkN2FkY2EtNTQyZi00Njk3LTg4NmEtMTNlOGU2NmRhYzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Z5OW90Bf2t2eNZ+NL0ltVK0V2csc2GWF44Y hK+BfMHQA1Ou6VidD8O3IV+oH26V9UTa+vVzCjVxIe+vmrihDu+x0ndtzUE/Ym9F dmTFM1yfv7qfCs09EMhOKvdUPzX0vK3LzejRb3uYsQ8tOD2T2HGuqdVzI30SeDG2 CeafaL2a/bcrfIO9BkOq7tyPGqO3zm1y46cnNd7hDDriAdhHgxUnpRE6UA1RbbCL 0p1ArSMioO1mAb5fqWE1DHui3VWa88/ozSDf4qZYmuYfmG53Zz6tjJlXzbOfHo0M qkcPmmkKPBu5PWc/CWf/+my8kVq3R3bANkyp+7Bry+guTHpaPQIDAQABo4IDkTCC A40wHQYDVR0OBBYEFJXz5A7v/WYx3PIlDvi15u09FgQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvZWZhY2JhYWYtNDQ0YS0z MmZiLThlZTAtZTE4MmJkOWU1NWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAriBMAwQA riBRAwQAriBcMAwDBACuIGsDBAeuIAAwDAMEAK4ggQMEAq4ggDAMAwQAriCFAwQB riCQAwQEriCgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAKQpX8Ki265WtDEyhMgBkrCqPbNfBEgS2Hxu0mRd l5/PaI+28zuYFHSzaeHvp1yWWU6nWeFg/wW/phbleMmTqb7XtHXNkV7EEfmvScKV kji7w/aYiSVY1Xtbz/GZb5YTk9Vsuw5IBQfOekiVXT/VVIjAGfHBshAn/E+WAP7I HU5lszKZ8MZ1IohmsN6pvVhkurPPFzWAjC+csE/NDy81IejLB5POq9lIa78Vforz yZZKR3/aIR19I4lp2i89zVTJwQWbJlOloVnkFymlAz/+Kw3xvHmZStlokoHcn3MV Ejh9arNIsQydCEilH7qn+OXuampx4JCDqc884IbIyA/ciOk= -----END CERTIFICATE-----Generated at Wed Jul 29 11:14:17 2026 by rpki-client