$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/559851e2-825a-350f-a3ac-2c9e80f12a3c.roa File: 559851e2-825a-350f-a3ac-2c9e80f12a3c.roa (raw, json) Hash identifier: NsgmGH5VvYz8A639/pf9EeNO+YRFa7Ub8dUglqJWS/o= Subject key identifier: 03:10:B8:B7:A2:5F:D1:43:E5:40:5E:3C:05:48:7C:DF:2C:E5:0F:14 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584AE89130BF00B56A99029A1E00 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/559851e2-825a-350f-a3ac-2c9e80f12a3c.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 33494 IP address blocks: 174.136.24.0/24 maxlen: 24 174.136.32.0/24 maxlen: 24 174.136.34.0/23 maxlen: 24 174.136.41.0/24 maxlen: 24 174.136.42.0/24 maxlen: 24 174.136.50.0/24 maxlen: 24 174.136.55.0/24 maxlen: 24 174.136.56.0/24 maxlen: 24 174.136.58.0/23 maxlen: 24 174.136.60.0/23 maxlen: 24 174.136.62.0/24 maxlen: 24 174.136.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:30:bf:00:b5:6a:99:02:9a:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=737e2f2a-f15a-49df-a4c9-36fb2e12f114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:af:94:37:95:0b:f1:d8:1d:3e:c0:ff:68:3e: 74:13:c0:71:54:c5:25:23:b4:e1:18:0a:4e:ab:e8: 2f:6b:4e:27:fb:5d:ae:59:a6:84:e0:19:a2:48:45: 89:4e:c5:44:8d:c9:31:62:2a:c0:fd:36:b1:37:13: ea:c4:db:24:be:b8:a4:aa:3a:fa:41:98:c9:65:33: da:96:ac:54:17:56:05:39:df:3a:e6:a2:7c:26:ca: 26:3f:b6:c8:ad:c7:23:0e:bf:a0:20:d2:a1:bb:0c: e9:2f:8b:c4:ff:38:77:e6:f5:64:4c:1c:00:5c:15: 12:4b:30:97:48:78:a1:4c:04:89:82:46:d3:b1:e9: 10:ae:14:77:35:ec:17:14:a2:bb:d5:64:5b:93:eb: db:cc:2e:9d:16:a8:c6:0c:2a:53:f1:15:e3:91:5c: c0:67:c4:89:e6:73:af:77:c7:7a:5f:18:66:47:b0: c3:6e:f0:20:a2:8a:c8:8b:55:77:57:95:0c:aa:c4: dd:b6:f0:2b:f9:7c:ea:0e:ff:20:02:ef:ea:3c:71: 1b:64:4b:a5:5b:7d:43:58:2a:95:50:e6:11:21:47: 1a:9d:c3:3f:77:42:3b:31:8c:c1:c6:06:d0:7a:ec: 51:bc:51:91:16:7d:eb:96:71:f6:76:f8:9b:71:de: 2d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:10:B8:B7:A2:5F:D1:43:E5:40:5E:3C:05:48:7C:DF:2C:E5:0F:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/559851e2-825a-350f-a3ac-2c9e80f12a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 174.136.24.0/24 174.136.32.0/24 174.136.34.0/23 174.136.41.0-174.136.42.255 174.136.50.0/24 174.136.55.0-174.136.56.255 174.136.58.0-174.136.63.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:51:32:99:74:f3:10:db:4a:1b:b3:cd:d9:07:ef:9f:d9:7f: 0c:05:8b:e0:7a:23:a1:f2:d6:42:0a:50:bd:de:0b:f9:bd:08: 24:48:4c:65:78:76:19:fc:65:d5:06:e5:88:a0:63:62:d6:43: b3:1f:b7:63:32:ff:e2:32:10:5f:1a:14:59:5e:0b:fa:85:b3: 20:e8:9b:87:bf:2c:bc:a3:8b:08:06:a9:6c:b0:f5:a4:0b:84: 81:e8:66:ea:80:84:13:ce:e6:64:dd:ff:3f:1d:ab:3d:e9:a9: c9:7c:51:91:4e:59:df:bc:f0:72:14:5e:73:04:5d:48:f7:c1: db:8b:9f:53:88:07:22:88:07:27:7f:4e:c1:42:4c:c8:28:46: 2a:66:df:9b:3d:66:3c:30:e5:ba:af:40:c6:ce:a7:56:5f:29: aa:73:23:12:80:32:38:16:a6:d9:f9:ef:e2:97:1c:83:76:e1: 88:49:f4:5d:64:52:c8:b9:d2:5a:44:4a:c0:4e:29:9e:7a:af: 8b:f6:6c:66:3d:45:b4:fb:c7:52:87:49:29:91:67:4b:f9:f3: e2:03:62:5d:99:06:a4:42:5b:7d:88:04:4e:64:22:c8:f1:1c: 08:63:38:9e:08:5c:05:ef:f5:d0:9e:dc:6b:db:c9:60:25:e6: ce:17:ed:76 -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWErokTC/ALVqmQKaHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NzM3ZTJmMmEtZjE1YS00OWRmLWE0YzktMzZmYjJlMTJmMTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1a+UN5UL8dgdPsD/aD50E8BxVMUlI7ThGApO q+gva04n+12uWaaE4BmiSEWJTsVEjckxYirA/TaxNxPqxNskvrikqjr6QZjJZTPa lqxUF1YFOd865qJ8JsomP7bIrccjDr+gINKhuwzpL4vE/zh35vVkTBwAXBUSSzCX SHihTASJgkbTsekQrhR3NewXFKK71WRbk+vbzC6dFqjGDCpT8RXjkVzAZ8SJ5nOv d8d6XxhmR7DDbvAgoorIi1V3V5UMqsTdtvAr+XzqDv8gAu/qPHEbZEulW31DWCqV UOYRIUcancM/d0I7MYzBxgbQeuxRvFGRFn3rlnH2dvibcd4t5QIDAQABo4IDkTCC A40wHQYDVR0OBBYEFAMQuLeiX9FD5UBePAVIfN8s5Q8UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvNTU5ODUxZTItODI1YS0z NTBmLWEzYWMtMmM5ZTgwZjEyYTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQArogYAwQA roggAwQBrogiMAwDBACuiCkDBACuiCoDBACuiDIwDAMEAK6INwMEAK6IODAMAwQB rog6AwQGrogAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGZRMpl08xDbShuzzdkH75/ZfwwFi+B6I6Hy1kIK UL3eC/m9CCRITGV4dhn8ZdUG5YigY2LWQ7Mft2My/+IyEF8aFFleC/qFsyDom4e/ LLyjiwgGqWyw9aQLhIHoZuqAhBPO5mTd/z8dqz3pqcl8UZFOWd+88HIUXnMEXUj3 wduLn1OIByKIByd/TsFCTMgoRipm35s9Zjww5bqvQMbOp1ZfKapzIxKAMjgWptn5 7+KXHIN24YhJ9F1kUsi50lpESsBOKZ56r4v2bGY9RbT7x1KHSSmRZ0v58+IDYl2Z BqRCW32IBE5kIsjxHAhjOJ4IXAXv9dCe3GvbyWAl5s4X7XY= -----END CERTIFICATE-----Generated at Sun Aug 24 01:12:31 2025 by rpki-client