
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa
File: 28664a9a-e120-3701-b0b7-b5858658be81.roa (raw, json)
Hash identifier: dh5oXTeqH0In/l2pAJIEZ8AtDVC28QEvgJnTzA2eCn4=
Subject key identifier: AB:76:BA:27:40:80:F0:10:A3:2B:68:DB:AF:7A:EB:39:9F:BE:E9:42
Certificate issuer: /CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98
Certificate serial: 010D0C9F4328584BB45D1093E34A9871D93015A0
Authority key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa
Signing time: Fri 31 Oct 2025 13:00:39 +0000
ROA not before: Fri 31 Oct 2025 13:00:39 +0000
ROA not after: Thu 29 Jan 2026 14:00:39 +0000
asID: 14618
IP address blocks: 52.144.58.0/24 maxlen: 24
168.245.151.0/24 maxlen: 24
192.139.134.0/24 maxlen: 24
199.19.89.0/24 maxlen: 24
199.19.90.0/24 maxlen: 24
199.19.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b4:5d:10:93:e3:4a:98:71:d9:30:15:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98
Validity
Not Before: Oct 31 13:00:39 2025 GMT
Not After : Jan 29 14:00:39 2026 GMT
Subject: CN=973a29ce-3f29-4f1c-9e58-3c8a9b45cf3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bd:7b:14:bf:57:30:f9:07:db:d0:13:8c:99:
ab:d2:53:3d:80:e0:ef:82:75:6e:76:01:3d:a9:a9:
24:a3:08:a5:74:aa:e2:55:ec:39:79:35:8f:1c:8b:
ad:94:50:42:b5:20:bf:86:e2:b6:72:ea:43:be:ac:
7c:cc:0f:d4:78:44:7b:82:6a:53:62:bc:90:43:54:
f7:ae:25:4b:2b:95:19:77:b1:e2:d3:c6:e3:a9:8a:
50:6a:9f:86:aa:e2:13:f4:11:b3:fe:3e:d2:56:bf:
00:a6:3f:08:15:4d:e3:e9:3e:39:78:2d:97:00:2a:
54:04:a2:30:d7:8e:8c:c9:ee:d9:9c:2c:2d:ce:2c:
63:34:f3:c4:97:a6:82:7c:22:74:a7:4b:63:cb:8e:
c1:f4:da:a7:3d:f8:56:76:05:4c:ef:73:ac:b9:72:
23:8d:01:9d:6b:ce:3d:16:df:a1:ab:f7:5d:3f:3a:
91:63:f0:02:4e:22:9f:35:ac:36:1b:99:b2:f4:0b:
0b:60:42:28:66:2f:7f:df:37:c0:e2:5b:8d:78:5e:
8f:34:fc:7e:97:1f:6e:c0:cd:6e:a4:e1:ad:d6:00:
aa:1e:2b:74:45:80:64:0a:23:a7:f1:17:1c:55:f2:
f1:23:5c:83:8b:a7:70:03:10:fb:03:42:e4:0a:7c:
fd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:76:BA:27:40:80:F0:10:A3:2B:68:DB:AF:7A:EB:39:9F:BE:E9:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl
X509v3 Authority Key Identifier:
keyid:C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer
sbgp-ipAddrBlock: critical
IPv4:
52.144.58.0/24
168.245.151.0/24
192.139.134.0/24
199.19.89.0-199.19.91.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:fb:ca:25:83:4b:1f:79:96:75:4b:61:91:f2:c2:b1:09:c3:
0f:17:5e:76:27:fa:61:b6:44:40:29:a9:51:22:f7:8f:25:92:
d2:1a:57:e3:b2:a5:0a:ee:0c:c9:09:fb:e7:9e:8b:80:f2:c2:
67:43:94:7e:26:b6:87:46:35:c1:e1:d3:c7:22:3f:6c:da:95:
9b:8c:7f:9e:cd:32:0c:95:18:d0:d3:f2:ad:29:76:fc:ee:75:
10:9c:bf:1f:28:c9:4d:af:70:2b:52:04:3a:98:29:ae:4f:3a:
ed:5b:6d:c3:aa:81:ef:6c:26:81:6b:a6:ee:cb:77:b7:19:4b:
da:cb:3c:9a:64:57:d8:25:cf:d5:ca:0e:de:74:91:ad:ad:98:
83:f4:dd:ef:3b:7a:b0:d4:11:cd:8a:bb:4d:ea:d3:42:fb:29:
ee:67:4d:bf:21:68:a4:a1:cd:5a:2f:a5:e8:0f:2a:b3:7a:bf:
da:ae:9f:18:1f:cb:86:13:d1:9b:d7:94:33:2b:94:8a:db:fe:
8f:06:3a:74:dd:ad:36:3c:c3:82:13:f6:d5:0a:a0:e7:d6:0b:
9a:31:b2:42:b0:71:70:bf:64:af:3b:7a:1a:4c:b9:73:53:87:
fd:9e:2d:63:d3:1f:4b:4f:2a:ad:d9:d1:dd:e5:d3:be:bf:a3:
76:1a:05:90
-----BEGIN CERTIFICATE-----
MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWEu0XRCT40qYcdkwFaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzJlM2EzYWQtYjFhYy00MTNkLThmOTgtYTY5NDI5YTZj
YTk4MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk
OTczYTI5Y2UtM2YyOS00ZjFjLTllNTgtM2M4YTliNDVjZjNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr17FL9XMPkH29ATjJmr0lM9gODvgnVudgE9
qakkowildKriVew5eTWPHIutlFBCtSC/huK2cupDvqx8zA/UeER7gmpTYryQQ1T3
riVLK5UZd7Hi08bjqYpQap+GquIT9BGz/j7SVr8Apj8IFU3j6T45eC2XACpUBKIw
146Mye7ZnCwtzixjNPPEl6aCfCJ0p0tjy47B9NqnPfhWdgVM73OsuXIjjQGda849
Ft+hq/ddPzqRY/ACTiKfNaw2G5my9AsLYEIoZi9/3zfA4luNeF6PNPx+lx9uwM1u
pOGt1gCqHit0RYBkCiOn8RccVfLxI1yDi6dwAxD7A0LkCnz9nQIDAQABo4IDbzCC
A2swHQYDVR0OBBYEFKt2uidAgPAQoyto26966zmfvulCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUz
YTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0MjlhNmNhOTgvMjg2NjRhOWEtZTEyMC0z
NzAxLWIwYjctYjU4NTg2NThiZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJlM2EzYWQtYjFhYy00MTNkLThm
OTgtYTY5NDI5YTZjYTk4LzMyZTNhM2FkLWIxYWMtNDEzZC04Zjk4LWE2OTQyOWE2
Y2E5OC5jcmwwHwYDVR0jBBgwFoAUyZVUezn1d+0L44pwe/Z3Q/qsyX0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUzYTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0
MjlhNmNhOTguY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQANJA6AwQA
qPWXAwQAwIuGMAwDBADHE1kDBALHE1gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAR/vKJYNLH3mWdUthkfLC
sQnDDxdedif6YbZEQCmpUSL3jyWS0hpX47KlCu4MyQn7556LgPLCZ0OUfia2h0Y1
weHTxyI/bNqVm4x/ns0yDJUY0NPyrSl2/O51EJy/HyjJTa9wK1IEOpgprk867Vtt
w6qB72wmgWum7st3txlL2ss8mmRX2CXP1coO3nSRra2Yg/Td7zt6sNQRzYq7TerT
Qvsp7mdNvyFopKHNWi+l6A8qs3q/2q6fGB/LhhPRm9eUMyuUitv+jwY6dN2tNjzD
ghP21Qqg59YLmjGyQrBxcL9krzt6Gky5c1OH/Z4tY9MfS08qrdnR3eXTvr+jdhoF
kA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:45:14 2025 by rpki-client