
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/2c8c1985-c38d-3eaa-9e08-51dbdc534e7c.roa
File: 2c8c1985-c38d-3eaa-9e08-51dbdc534e7c.roa (raw, json)
Hash identifier: sk12q19wZWZFLcHOzSiXLyuw14t4edxfB3lGf503j1U=
Subject key identifier: 2D:BB:84:60:4C:AD:18:17:17:0B:D8:0D:1F:B3:2E:8A:DD:A7:41:55
Certificate issuer: /CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919
Certificate serial: 010D0C9F4328584CBF172BCF087270261A88CE28
Authority key identifier: 13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/2c8c1985-c38d-3eaa-9e08-51dbdc534e7c.roa
Signing time: Wed 04 Feb 2026 02:00:31 +0000
ROA not before: Wed 04 Feb 2026 02:00:31 +0000
ROA not after: Tue 05 May 2026 01:00:31 +0000
asID: 203
IP address blocks: 205.233.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:bf:17:2b:cf:08:72:70:26:1a:88:ce:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919
Validity
Not Before: Feb 4 02:00:31 2026 GMT
Not After : May 5 01:00:31 2026 GMT
Subject: CN=3474773f-3169-4156-aac5-57c6d5bfbed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c8:f3:af:9a:34:8b:57:cd:cc:69:5f:c0:46:
6d:c1:d6:44:d3:c5:98:b9:4e:0f:32:c9:1a:73:d3:
42:28:cf:fd:be:82:12:4e:2c:d6:1a:86:2a:c8:1b:
cb:65:b8:77:0b:07:78:32:f9:c8:46:09:d9:07:b6:
67:91:4d:e2:d7:6f:7d:d0:c7:93:12:63:a9:de:35:
ce:83:83:f2:49:6b:ee:17:7e:02:fa:91:ae:b5:33:
f3:fd:1b:61:57:3b:98:f8:55:f9:19:21:2c:d2:c2:
5f:ac:9f:5b:6b:5a:cc:c5:10:8e:a8:89:37:35:ca:
21:9b:7c:0c:dc:3d:fa:89:49:f6:40:54:89:da:00:
43:bf:f5:41:7b:e1:75:fb:f1:a0:5f:d4:48:23:dd:
38:d1:44:93:b9:08:08:42:3b:7d:3a:dd:0f:b2:14:
35:16:07:9d:e7:6e:a9:9e:03:ff:3e:5a:98:15:ab:
f2:4e:3d:ee:d7:92:44:63:81:e1:cb:4c:87:3f:7b:
a7:c8:9d:2a:e5:74:ea:df:c0:65:15:1c:02:13:30:
36:3d:1a:ff:9c:ee:e4:9b:a8:e7:ed:d8:5b:17:55:
af:aa:db:55:61:37:72:f1:d4:74:82:af:00:4d:1f:
5a:8a:c2:f7:64:b6:0d:ee:e0:62:35:9b:13:1f:97:
05:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BB:84:60:4C:AD:18:17:17:0B:D8:0D:1F:B3:2E:8A:DD:A7:41:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/2c8c1985-c38d-3eaa-9e08-51dbdc534e7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl
X509v3 Authority Key Identifier:
keyid:13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer
sbgp-ipAddrBlock: critical
IPv4:
205.233.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:d4:09:d6:35:31:ab:4a:82:9d:7b:73:82:4d:26:7e:b0:3f:
b1:48:31:8e:b0:2e:dc:35:75:eb:85:02:ad:7b:cd:35:8a:39:
85:e0:0d:3b:d7:ff:b2:31:f6:1c:92:87:be:60:a9:75:06:f9:
ba:51:30:2b:51:cd:b5:c7:96:83:05:a3:8b:34:7c:da:72:04:
9d:4d:37:a8:7a:59:7f:3a:1f:ad:52:33:c1:af:ba:32:72:8b:
66:40:2c:f5:6c:a4:b6:3b:59:37:71:12:5f:2b:6a:a3:da:a5:
ac:72:47:c7:21:e5:f2:cb:08:9f:a0:40:37:e3:f2:43:48:8c:
93:6f:ff:26:26:08:87:06:df:16:01:b6:0e:1a:04:01:70:8b:
80:e7:c4:36:03:93:97:b0:df:7c:bf:ef:97:66:e0:3f:6e:65:
16:90:85:69:6a:28:3d:36:08:2e:9d:46:6e:8c:fb:05:0d:89:
a5:5e:da:01:5b:31:f8:27:83:08:28:a8:05:e3:20:e7:79:a5:
60:94:e8:67:79:c6:4d:cf:95:98:5b:1c:e0:d5:2e:58:ec:c2:
3d:9a:68:14:20:6a:fc:ac:ce:7e:69:9a:ab:e4:2a:20:fe:8b:
83:78:b2:b7:bf:e8:a7:d4:a9:ff:42:55:f1:cb:92:47:75:27:
62:e3:44:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:10 2026 by rpki-client