
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/39180b00-aeca-33d4-9a03-d7d925444ce2.roa
File: 39180b00-aeca-33d4-9a03-d7d925444ce2.roa (raw, json)
Hash identifier: NJg5r5TikqkSpeza0165qB0Br+e9YOGCc6cdcLcy7K8=
Subject key identifier: B8:EC:B8:A7:33:8C:F3:DD:2D:5F:AE:28:5B:31:0E:A3:37:A9:92:56
Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial: 010D0C9F4328584BB88D177A1FEBFCA72BD445F0
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/39180b00-aeca-33d4-9a03-d7d925444ce2.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 399629
IP address blocks: 64.52.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:17:7a:1f:eb:fc:a7:2b:d4:45:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=ea8c45b3-45de-4b98-bbbb-7d9f05b076ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:54:23:55:93:a5:06:fe:97:64:da:52:1b:4d:
ac:41:22:f5:c9:ea:7d:57:63:d1:68:fb:ad:b7:bc:
2d:6f:b6:fd:d4:63:8b:67:c9:e0:b9:2f:73:b1:ca:
dc:56:21:53:ff:97:1a:c8:e8:00:f0:a2:26:9d:0d:
f7:4f:47:db:00:74:af:eb:bb:5c:6a:13:e5:8d:53:
94:a6:64:bb:5c:d2:14:79:96:93:7a:19:df:c8:82:
88:f0:99:b9:aa:01:8d:c2:07:25:06:ff:83:4d:eb:
92:91:1e:91:59:7f:3e:6c:13:69:51:4d:4f:c9:4d:
da:9e:4b:27:04:9d:2d:65:89:3f:41:81:56:16:c6:
42:93:0e:c5:c3:4d:42:eb:1d:a6:81:64:a6:7c:94:
a2:0f:35:9c:6a:b1:b1:74:f2:62:b1:3c:f4:8f:77:
3c:5f:d6:2a:19:22:08:0e:e0:bd:9e:43:4f:d1:b3:
25:85:7e:92:0c:78:bd:cc:a0:a9:a0:ea:d9:2f:92:
d0:89:c7:9a:9d:7f:72:4d:77:8b:52:06:76:1a:60:
bc:bc:09:82:41:b5:0b:03:c3:e1:0b:a4:91:05:36:
54:03:7d:70:2b:4c:7d:ea:a1:19:29:09:6c:e7:7f:
c0:cd:3c:5e:04:ca:02:33:22:82:4b:8b:19:9c:36:
a1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EC:B8:A7:33:8C:F3:DD:2D:5F:AE:28:5B:31:0E:A3:37:A9:92:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/39180b00-aeca-33d4-9a03-d7d925444ce2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
X509v3 Authority Key Identifier:
keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
sbgp-ipAddrBlock: critical
IPv4:
64.52.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:c4:6e:63:14:65:44:01:26:e9:50:21:08:8c:dd:30:b1:0f:
be:ce:4e:0c:d0:7a:ee:b8:2a:f4:ce:cc:f0:1d:d9:b6:b4:84:
f8:22:bf:f3:5d:bd:86:2c:14:be:c4:c7:e9:35:c4:b5:25:21:
16:70:c8:d6:0e:c5:3a:33:97:47:f8:ab:8b:9f:dd:68:dc:57:
12:7e:da:63:9a:7e:cf:ce:d4:26:30:88:b1:d6:e8:cd:a0:cb:
b4:0b:0f:2f:bf:8f:80:73:1e:dc:8c:b4:40:a5:e3:fd:57:8b:
5b:d6:e6:42:a3:7c:4f:ae:0f:50:9f:e2:d1:00:c0:c9:cf:88:
bc:08:65:4c:d3:6e:c6:95:21:45:a2:89:f9:8d:73:72:9a:48:
bf:95:a1:23:0d:cb:07:d5:97:7c:4c:61:23:b2:84:0e:65:91:
a0:f6:cc:19:ac:61:d9:23:70:21:68:1e:28:7a:09:0f:66:8c:
ee:ff:df:a3:37:e4:e0:d2:c0:2f:46:a2:b5:8e:fc:68:e4:cb:
10:ab:4f:26:c2:a8:a1:73:7b:4c:75:8a:9c:69:e7:f3:2a:0f:
b2:1d:29:22:55:ec:1b:0a:9d:38:47:be:a0:97:a4:b9:09:f3:
2e:dc:f5:f4:ce:33:5c:40:21:20:c6:65:96:41:65:4f:aa:eb:
88:2b:3e:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRd6H+v8pyvURfAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm
MTAzMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
ZWE4YzQ1YjMtNDVkZS00Yjk4LWJiYmItN2Q5ZjA1YjA3NmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylQjVZOlBv6XZNpSG02sQSL1yep9V2PRaPut
t7wtb7b91GOLZ8nguS9zscrcViFT/5cayOgA8KImnQ33T0fbAHSv67tcahPljVOU
pmS7XNIUeZaTehnfyIKI8Jm5qgGNwgclBv+DTeuSkR6RWX8+bBNpUU1PyU3anksn
BJ0tZYk/QYFWFsZCkw7Fw01C6x2mgWSmfJSiDzWcarGxdPJisTz0j3c8X9YqGSII
DuC9nkNP0bMlhX6SDHi9zKCpoOrZL5LQiceanX9yTXeLUgZ2GmC8vAmCQbULA8Ph
C6SRBTZUA31wK0x96qEZKQls53/AzTxeBMoCMyKCS4sZnDahzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLjsuKczjPPdLV+uKFsxDqM3qZJWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz
ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvMzkxODBiMDAtYWVjYS0z
M2Q0LTlhMDMtZDdkOTI1NDQ0Y2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl
MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj
ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4
Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDRQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELEbmMUZUQBJulQIQiM3TCxD77OTgzQeu64KvTOzPAd2ba0hPgiv/Nd
vYYsFL7Ex+k1xLUlIRZwyNYOxTozl0f4q4uf3WjcVxJ+2mOafs/O1CYwiLHW6M2g
y7QLDy+/j4BzHtyMtECl4/1Xi1vW5kKjfE+uD1Cf4tEAwMnPiLwIZUzTbsaVIUWi
ifmNc3KaSL+VoSMNywfVl3xMYSOyhA5lkaD2zBmsYdkjcCFoHih6CQ9mjO7/36M3
5ODSwC9GorWO/GjkyxCrTybCqKFze0x1ipxp5/MqD7IdKSJV7BsKnThHvqCXpLkJ
8y7c9fTOM1xAISDGZZZBZU+q64grPpA=
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:33:36 2025 by rpki-client