
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/f924133a-b5ad-36f1-8a45-c86dbeb1db1d.roa
File: f924133a-b5ad-36f1-8a45-c86dbeb1db1d.roa (raw, json)
Hash identifier: rtxJyXeFq/T86FJd5HD6U0paRyGrVxCJ9Hb8MqzPjkU=
Subject key identifier: 4B:4E:9A:5E:55:CF:23:AC:F6:37:84:80:7A:1E:F7:97:04:21:1D:5F
Certificate issuer: /CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a
Certificate serial: 010D0C9F4328584B1AD189FC086AB6B740D35120
Authority key identifier: F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/f924133a-b5ad-36f1-8a45-c86dbeb1db1d.roa
Signing time: Sat 06 Sep 2025 13:00:41 +0000
ROA not before: Sat 06 Sep 2025 13:00:41 +0000
ROA not after: Fri 05 Dec 2025 14:00:41 +0000
asID: 15100
IP address blocks: 216.38.32.0/20 maxlen: 20
216.38.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:1a:d1:89:fc:08:6a:b6:b7:40:d3:51:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a
Validity
Not Before: Sep 6 13:00:41 2025 GMT
Not After : Dec 5 14:00:41 2025 GMT
Subject: CN=3768232f-9713-443a-9018-181984e8c75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:85:5f:30:37:79:b5:a2:42:e2:3d:7a:c5:49:
23:d0:2e:49:31:3f:96:ed:a7:19:07:a7:fa:d6:54:
8e:eb:32:25:38:51:51:72:c2:cc:d7:55:73:77:25:
c6:76:51:dc:45:e9:84:0b:f8:7f:15:95:09:6d:ad:
e3:dc:45:48:70:50:4b:c1:10:4a:ee:5e:ce:9a:b8:
4c:99:89:1e:40:07:31:43:0d:dc:d3:1f:36:33:8a:
c7:5b:ee:d1:23:27:99:66:d4:19:d2:07:64:d6:88:
4a:05:a5:6d:70:eb:53:a5:09:8f:90:12:ae:bd:aa:
da:88:c8:eb:e3:1c:f3:e6:28:d5:87:d3:01:31:ba:
d7:df:d0:39:bf:5b:b3:a3:57:0c:8e:fe:c4:70:bc:
b0:1c:93:49:b1:19:ff:a6:0c:96:ed:67:00:7e:9a:
42:dc:4c:ac:6d:2a:fa:2a:2e:52:bd:c2:ce:88:3a:
4e:04:c8:5c:f9:e7:66:dc:78:59:80:61:ae:8d:e9:
88:bf:c2:c5:b2:09:82:b1:4b:7a:f8:e5:0a:0f:7d:
fd:38:0a:f5:30:6a:75:f9:c2:76:67:9e:6b:b5:4f:
06:13:6e:20:93:c7:e2:01:8b:c2:b6:e5:b4:54:d6:
f9:cc:15:a7:80:6f:a1:a3:ef:f9:a9:7b:58:6e:f7:
44:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4E:9A:5E:55:CF:23:AC:F6:37:84:80:7A:1E:F7:97:04:21:1D:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/f924133a-b5ad-36f1-8a45-c86dbeb1db1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl
X509v3 Authority Key Identifier:
keyid:F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer
sbgp-ipAddrBlock: critical
IPv4:
216.38.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:9c:b9:6e:19:f9:aa:fa:f2:04:86:60:58:96:e0:bf:89:3c:
0d:db:44:48:f1:86:57:29:ea:3e:ee:07:ce:d8:9c:ad:25:e8:
31:34:c2:75:5b:9f:aa:b3:ce:1f:b7:fb:4b:35:f2:32:db:63:
af:0c:36:fa:fc:60:1b:03:ec:f3:3b:5b:a9:ec:dd:a4:4b:34:
4e:18:61:14:00:f1:0e:26:31:b3:6d:89:54:89:3c:3b:4d:6a:
f0:47:b5:20:29:a9:a4:58:69:22:f5:c0:50:bf:7b:ba:05:d5:
3b:c9:7d:ca:bd:b6:3f:19:72:03:b1:83:2b:10:e4:a9:ab:fa:
cb:2a:bd:ee:f3:93:c2:d9:56:19:cf:b5:fa:c6:43:ae:78:7e:
f2:4b:07:78:63:2c:eb:53:6a:bf:6d:59:87:fc:8f:58:fd:5c:
25:65:fc:66:41:98:b0:4f:ba:56:b2:c0:e5:25:1d:3c:b6:b1:
02:a5:86:f2:a6:60:a8:d3:85:04:de:dd:b2:d0:88:31:0d:c6:
87:20:b3:a8:6f:c1:b3:42:3b:b6:26:c9:64:c7:3e:d6:ee:59:
f0:b6:49:69:0e:94:6d:bc:2b:99:fa:7b:a2:b5:a2:07:e3:e2:
0c:be:88:e4:e7:02:bd:61:29:60:23:4a:83:ea:31:71:f0:0e:
11:b6:fe:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Yn8CGq2t0DTUSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGRhZTUyYTUtY2RiNy00MTVjLWFkNDQtNTEyNWJiMTIz
YTdhMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
Mzc2ODIzMmYtOTcxMy00NDNhLTkwMTgtMTgxOTg0ZThjNzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYVfMDd5taJC4j16xUkj0C5JMT+W7acZB6f6
1lSO6zIlOFFRcsLM11VzdyXGdlHcRemEC/h/FZUJba3j3EVIcFBLwRBK7l7OmrhM
mYkeQAcxQw3c0x82M4rHW+7RIyeZZtQZ0gdk1ohKBaVtcOtTpQmPkBKuvaraiMjr
4xzz5ijVh9MBMbrX39A5v1uzo1cMjv7EcLywHJNJsRn/pgyW7WcAfppC3EysbSr6
Ki5SvcLOiDpOBMhc+edm3HhZgGGujemIv8LFsgmCsUt6+OUKD339OAr1MGp1+cJ2
Z55rtU8GE24gk8fiAYvCtuW0VNb5zBWngG+ho+/5qXtYbvdEJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEtOml5VzyOs9jeEgHoe95cEIR1fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZGFl
NTJhNS1jZGI3LTQxNWMtYWQ0NC01MTI1YmIxMjNhN2EvZjkyNDEzM2EtYjVhZC0z
NmYxLThhNDUtYzg2ZGJlYjFkYjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGRhZTUyYTUtY2RiNy00MTVjLWFk
NDQtNTEyNWJiMTIzYTdhL2RkYWU1MmE1LWNkYjctNDE1Yy1hZDQ0LTUxMjViYjEy
M2E3YS5jcmwwHwYDVR0jBBgwFoAU8OMjUuuNKxXWUGX45vcgpyceMvowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZGFlNTJhNS1jZGI3LTQxNWMtYWQ0NC01MTI1
YmIxMjNhN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2CYgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABGcuW4Z+ar68gSGYFiW4L+JPA3bREjxhlcp6j7uB87YnK0l6DE0wnVb
n6qzzh+3+0s18jLbY68MNvr8YBsD7PM7W6ns3aRLNE4YYRQA8Q4mMbNtiVSJPDtN
avBHtSApqaRYaSL1wFC/e7oF1TvJfcq9tj8ZcgOxgysQ5Kmr+ssqve7zk8LZVhnP
tfrGQ654fvJLB3hjLOtTar9tWYf8j1j9XCVl/GZBmLBPulaywOUlHTy2sQKlhvKm
YKjThQTe3bLQiDENxocgs6hvwbNCO7YmyWTHPtbuWfC2SWkOlG28K5n6e6K1ogfj
4gy+iOTnAr1hKWAjSoPqMXHwDhG2/k4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:56:46 2025 by rpki-client