$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/2c8c1985-c38d-3eaa-9e08-51dbdc534e7c.roa File: 2c8c1985-c38d-3eaa-9e08-51dbdc534e7c.roa (raw, json) Hash identifier: 4MP+OscMHj1gX88xS6h5mPRlv1wvOtpNew/MavumA30= Subject key identifier: D7:32:24:CA:54:88:56:CE:25:39:33:60:3E:2A:40:F0:0B:09:45:96 Certificate issuer: /CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919 Certificate serial: 010D0C9F4328584D9FB56F4E8F015187AD086040 Authority key identifier: 13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/2c8c1985-c38d-3eaa-9e08-51dbdc534e7c.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 203 IP address blocks: 205.233.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:6f:4e:8f:01:51:87:ad:08:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919 Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=2868c5ae-1735-4d65-b06f-5ad175c214c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b0:6d:e1:ba:53:8c:af:5f:a8:9f:b8:2e:cb: 9f:e8:fa:8b:f1:0a:5b:cf:4d:2d:ce:85:1e:b2:1d: 6a:55:d0:27:69:f4:1b:d3:59:a5:96:82:e1:b7:e3: 8d:de:12:4a:ab:f9:7b:37:15:61:ec:ca:f7:25:e9: 8f:3e:45:bc:eb:6b:81:08:a6:88:2a:19:3a:9c:96: 8f:cc:61:68:db:e1:c3:50:27:48:ad:18:1d:3f:fe: 1e:50:4a:43:dc:e1:75:0d:9d:9a:bf:a8:a9:33:07: 47:7c:70:7a:e5:b8:90:b1:43:26:90:ab:45:86:09: f3:ef:0e:c3:9a:65:fa:9f:e6:29:6e:66:fd:3d:7a: 5c:8c:82:63:0f:c3:b4:da:e1:fd:bd:86:22:33:a5: 56:e9:78:6e:08:7d:de:2b:5f:43:e5:b0:87:0c:d5: c6:ff:60:37:a5:f1:8e:ab:0f:ea:c0:cf:59:3f:7c: b0:86:2c:60:71:7b:6d:ec:65:87:37:2d:be:49:b6: 00:70:5e:fe:73:1c:87:f4:52:46:49:fd:ca:27:5a: b8:a5:09:95:a3:72:12:96:54:ef:aa:5c:7c:f2:9d: bf:34:f2:f2:e2:06:0a:32:e1:52:19:51:60:8a:fc: 98:34:3f:a0:3a:6f:bc:02:29:81:b6:31:b3:1c:c1: 8f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:32:24:CA:54:88:56:CE:25:39:33:60:3E:2A:40:F0:0B:09:45:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/2c8c1985-c38d-3eaa-9e08-51dbdc534e7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl X509v3 Authority Key Identifier: keyid:13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer sbgp-ipAddrBlock: critical IPv4: 205.233.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:5d:30:a2:bb:0b:7a:76:bd:7b:a4:29:4e:9b:5b:b2:60:3b: 46:67:c9:3a:0b:d6:5d:0c:3d:63:17:50:61:b9:7b:69:c9:33: 88:b9:1e:d8:e9:d5:5a:a1:35:3c:93:fa:e3:9f:41:a0:61:2c: 00:08:e6:dc:89:67:90:52:41:4d:83:2e:5b:01:0e:0b:e8:a5: 4c:11:2d:70:b6:69:89:67:a9:4d:d1:25:4f:52:c1:14:9a:6b: 36:d7:01:6b:59:aa:e3:29:67:9d:73:e2:c0:17:2d:67:2c:01: 9e:21:2f:38:40:49:18:ed:72:10:4f:af:d4:77:51:de:d6:9a: 71:c2:38:ad:16:08:6b:b3:5a:64:0f:f9:52:ba:41:63:59:1c: 61:10:8e:9d:92:85:27:03:b9:d4:ed:5b:7f:fd:f3:e7:93:fa: cf:08:6d:ee:ee:6c:41:95:7c:1f:36:f4:85:66:6e:fa:3c:24: 27:1f:ef:44:e5:c9:51:4c:be:fc:e0:1d:ab:d4:c5:cd:92:dc: 8d:f7:12:3c:24:1a:43:81:0f:d1:18:f5:6f:00:3e:67:08:fb: 5c:87:f5:a3:b7:4d:1e:df:ec:7f:ca:d9:76:6a:43:79:1d:f5: a5:2c:7b:6f:81:b5:e0:25:1c:09:38:d3:74:b1:fb:84:5b:1b: dd:3f:b4:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftW9OjwFRh60IYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVhMDg0OTItYjNiMS00YWExLWI1NmQtMDFhOThmN2Qw OTE5MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk Mjg2OGM1YWUtMTczNS00ZDY1LWIwNmYtNWFkMTc1YzIxNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7Bt4bpTjK9fqJ+4Lsuf6PqL8Qpbz00tzoUe sh1qVdAnafQb01mlloLht+ON3hJKq/l7NxVh7Mr3JemPPkW862uBCKaIKhk6nJaP zGFo2+HDUCdIrRgdP/4eUEpD3OF1DZ2av6ipMwdHfHB65biQsUMmkKtFhgnz7w7D mmX6n+Ypbmb9PXpcjIJjD8O02uH9vYYiM6VW6XhuCH3eK19D5bCHDNXG/2A3pfGO qw/qwM9ZP3ywhixgcXtt7GWHNy2+SbYAcF7+cxyH9FJGSf3KJ1q4pQmVo3ISllTv qlx88p2/NPLy4gYKMuFSGVFgivyYND+gOm+8AimBtjGzHMGPFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcyJMpUiFbOJTkzYD4qQPALCUWWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNWEw ODQ5Mi1iM2IxLTRhYTEtYjU2ZC0wMWE5OGY3ZDA5MTkvMmM4YzE5ODUtYzM4ZC0z ZWFhLTllMDgtNTFkYmRjNTM0ZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjVhMDg0OTItYjNiMS00YWExLWI1 NmQtMDFhOThmN2QwOTE5LzI1YTA4NDkyLWIzYjEtNGFhMS1iNTZkLTAxYTk4Zjdk MDkxOS5jcmwwHwYDVR0jBBgwFoAUEwn6IXzXjp6k3qQG3jOvyyTaawYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNWEwODQ5Mi1iM2IxLTRhYTEtYjU2ZC0wMWE5 OGY3ZDA5MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzen0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJdMKK7C3p2vXukKU6bW7JgO0ZnyToL1l0MPWMXUGG5e2nJM4i5Htjp 1VqhNTyT+uOfQaBhLAAI5tyJZ5BSQU2DLlsBDgvopUwRLXC2aYlnqU3RJU9SwRSa azbXAWtZquMpZ51z4sAXLWcsAZ4hLzhASRjtchBPr9R3Ud7WmnHCOK0WCGuzWmQP +VK6QWNZHGEQjp2ShScDudTtW3/98+eT+s8Ibe7ubEGVfB829IVmbvo8JCcf70Tl yVFMvvzgHavUxc2S3I33EjwkGkOBD9EY9W8APmcI+1yH9aO3TR7f7H/K2XZqQ3kd 9aUse2+BteAlHAk403Sx+4RbG90/tAg= -----END CERTIFICATE-----Generated at Wed May 13 07:28:27 2026 by rpki-client