$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/284ff20b-9b60-357c-9299-01e652bbeb85.roa File: 284ff20b-9b60-357c-9299-01e652bbeb85.roa (raw, json) Hash identifier: bQ4EVwhyRtEHz3mTkjS7p1hSiFW/k83p4ojvqlJu/Fg= Subject key identifier: A3:12:10:27:8A:1C:8B:5C:48:BE:45:FA:6D:2B:8C:05:8A:32:D0:48 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD195DD20F74BA551FD9E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/284ff20b-9b60-357c-9299-01e652bbeb85.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:19:5d:d2:0f:74:ba:55:1f:d9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=6b03499f-ffb9-4965-92b7-e44b70ee596e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fd:b9:4b:89:32:3e:4a:8c:2a:1d:01:7c:5c: 01:45:eb:d5:b0:57:50:b4:82:b0:28:a6:f9:a7:c1: c3:46:66:6f:b9:99:f7:06:44:95:48:9f:b5:84:89: 8a:f4:e1:ff:4d:94:16:b0:92:8a:90:71:b8:6b:12: 2e:ea:ff:59:4f:17:ae:20:b3:94:65:da:b5:fc:9e: c2:cc:6f:d8:41:4c:f1:03:22:d1:16:12:00:37:0e: a9:31:b0:cb:23:21:82:68:6c:79:87:8f:3f:21:36: 9b:9e:1e:4d:28:32:06:a3:58:94:b6:01:90:03:b2: 43:af:f6:97:c3:18:e3:65:af:df:4f:ef:bd:79:bf: d7:2f:cf:b3:88:b1:40:c1:52:99:a6:21:41:3c:c9: d6:35:a4:f7:8b:ff:5a:2c:b6:0e:b2:2f:10:83:14: 5a:5f:1b:3c:f2:57:ba:9c:02:8f:bd:46:1a:08:e3: ea:f6:cf:15:ff:b8:f8:df:a8:91:f4:55:41:54:82: cb:80:c6:16:c6:82:ce:a9:62:31:8d:0b:45:22:0f: 29:65:93:8d:bc:7a:5d:7f:37:63:58:fa:ba:84:9b: f0:c6:31:59:84:ae:3e:d3:7a:d3:c7:69:0d:0d:92: 13:d5:53:a4:c0:9b:49:4e:8e:0c:b9:d0:91:27:bc: 36:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:12:10:27:8A:1C:8B:5C:48:BE:45:FA:6D:2B:8C:05:8A:32:D0:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/284ff20b-9b60-357c-9299-01e652bbeb85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:95:51:69:a4:9b:72:b4:af:73:f5:f7:3a:ac:c4:57:d8:e4: ac:40:e0:09:f3:82:22:09:66:79:3e:6a:3a:ad:f2:0e:a8:35: f3:e3:36:48:f9:3e:c9:91:45:af:22:4b:df:86:e8:f9:a4:b1: 17:7e:ce:c8:8b:9d:26:2e:0d:53:5f:a9:b1:a3:c6:0c:9c:0f: bf:09:64:33:33:2d:6c:d8:64:f0:8e:3f:fd:bf:e6:d2:8a:92: 44:32:38:6b:e5:0e:73:88:a7:42:cf:a5:3f:19:47:53:2b:2d: 0c:9b:67:21:64:a7:fe:ca:b7:45:56:2e:56:5c:f8:02:5f:98: 80:44:04:ad:0f:c5:35:1a:01:87:31:1c:af:5f:77:a4:a4:46: 96:6d:f5:95:a0:7f:66:e5:33:61:fc:1d:f1:3c:be:bf:3a:3a: fa:d8:ae:7a:9c:b4:c6:54:4f:d2:49:6b:c1:3f:c2:62:14:94: f9:b9:df:54:56:fb:46:b7:1f:0c:99:5e:cd:14:9d:1c:aa:5e: b2:de:83:62:35:59:c5:42:ff:9c:13:a9:9b:e8:e9:da:51:8e: 8d:f9:18:03:08:49:1e:e3:6b:31:54:b1:11:d2:85:a5:be:0a: 8b:3e:f7:48:d0:c9:be:64:0c:55:f2:19:80:ab:40:58:bd:b9: 2e:69:99:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzRld0g90ulUf2eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NmIwMzQ5OWYtZmZiOS00OTY1LTkyYjctZTQ0YjcwZWU1OTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/25S4kyPkqMKh0BfFwBRevVsFdQtIKwKKb5 p8HDRmZvuZn3BkSVSJ+1hImK9OH/TZQWsJKKkHG4axIu6v9ZTxeuILOUZdq1/J7C zG/YQUzxAyLRFhIANw6pMbDLIyGCaGx5h48/ITabnh5NKDIGo1iUtgGQA7JDr/aX wxjjZa/fT++9eb/XL8+ziLFAwVKZpiFBPMnWNaT3i/9aLLYOsi8QgxRaXxs88le6 nAKPvUYaCOPq9s8V/7j436iR9FVBVILLgMYWxoLOqWIxjQtFIg8pZZONvHpdfzdj WPq6hJvwxjFZhK4+03rTx2kNDZIT1VOkwJtJTo4MudCRJ7w2IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMSECeKHItcSL5F+m0rjAWKMtBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjg0ZmYyMGItOWI2MC0z NTdjLTkyOTktMDFlNjUyYmJlYjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmVUWmkm3K0r3P19zqsxFfY5KxA4AnzgiIJZnk+ajqt8g6oNfPjNkj5 PsmRRa8iS9+G6PmksRd+zsiLnSYuDVNfqbGjxgycD78JZDMzLWzYZPCOP/2/5tKK kkQyOGvlDnOIp0LPpT8ZR1MrLQybZyFkp/7Kt0VWLlZc+AJfmIBEBK0PxTUaAYcx HK9fd6SkRpZt9ZWgf2blM2H8HfE8vr86OvrYrnqctMZUT9JJa8E/wmIUlPm531RW +0a3HwyZXs0UnRyqXrLeg2I1WcVC/5wTqZvo6dpRjo35GAMISR7jazFUsRHShaW+ Cos+90jQyb5kDFXyGYCrQFi9uS5pmX8= -----END CERTIFICATE-----Generated at Sun Oct 19 23:55:32 2025 by rpki-client