$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b242522d-2590-316e-941b-9b6cbc93ed22.roa File: b242522d-2590-316e-941b-9b6cbc93ed22.roa (raw, json) Hash identifier: GvGKGYbk7K4pMMmD8xen56Z90PlPj1fLs6zsmjrZJRE= Subject key identifier: 37:F0:1B:F5:01:74:F9:DB:66:11:31:CB:8F:90:41:D5:D4:7F:40:F6 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584BB2F7C0F808AEEC7AD0AE4480 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b242522d-2590-316e-941b-9b6cbc93ed22.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 13445 IP address blocks: 144.196.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:c0:f8:08:ae:ec:7a:d0:ae:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=1bc2774b-e933-4483-9b3d-df43fe2ced2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9e:e1:79:03:59:bc:40:00:93:1e:83:aa:54: da:f8:b2:7a:26:e1:82:55:33:bd:84:95:ec:31:ba: f9:19:ce:88:59:a9:7e:20:9b:4d:de:18:fc:01:68: 72:7a:0e:90:f7:e5:84:63:2f:fc:09:bf:ae:b4:3f: 92:5e:a1:78:b7:50:0b:55:14:f2:41:7c:3e:46:68: 14:6a:ec:2f:01:da:65:fb:0f:c1:90:7d:de:b4:2c: ce:30:1c:25:eb:47:81:2a:fa:56:22:50:b2:97:f3: 4c:e1:1a:d2:86:84:02:6b:ce:fb:de:74:ec:4f:4f: 9a:d7:b8:72:3d:c7:51:c2:9f:c5:1a:28:af:8b:a4: 7a:00:a2:0d:b8:f9:01:5f:fa:56:81:32:c3:54:00: 26:1e:eb:69:db:81:e1:6a:2a:d8:94:00:32:49:c7: 49:2c:f0:7d:e6:f0:d7:7f:85:de:66:92:c2:83:79: 32:1f:01:be:4e:0c:5c:07:d6:c0:70:97:6c:9c:44: aa:7f:87:df:33:76:86:1b:22:ff:5d:c4:61:1d:fb: ee:62:2f:9b:f2:60:81:56:a9:79:90:00:81:55:70: 94:3c:fb:3a:6b:7a:dc:ef:c4:f1:1f:23:41:1a:21: 23:21:ec:10:f4:d9:b5:0b:2d:9c:ef:6e:61:34:6a: e0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F0:1B:F5:01:74:F9:DB:66:11:31:CB:8F:90:41:D5:D4:7F:40:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b242522d-2590-316e-941b-9b6cbc93ed22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:9e:7d:a8:18:97:8d:f4:16:a2:a6:d3:7c:43:44:be:c1:67: 55:e6:a1:3b:af:c3:78:f7:4e:2a:26:4f:d4:89:bb:8c:70:11: 83:85:61:f3:fc:31:27:d5:9c:03:b2:93:20:bc:26:55:28:e0: b8:27:ad:2c:5a:fa:46:27:a0:2a:3c:1f:92:be:41:3c:9f:2d: e3:eb:36:e2:50:85:3b:6c:38:41:5a:c0:e6:8a:bd:d3:73:9e: a1:89:14:2d:bc:de:26:1b:da:83:08:e7:d3:8e:f1:07:67:21: 04:bc:f5:7a:11:59:67:07:2c:20:0f:f0:85:96:f7:1d:37:29: 5f:59:38:3d:32:75:79:b2:a6:8a:f8:b8:f2:f8:cb:e3:12:d6: 0f:c7:35:eb:06:29:d8:14:1c:88:8e:e6:f6:7d:70:ae:79:3e: 4e:27:92:52:89:aa:10:7a:1c:02:c6:18:45:8f:80:33:8a:a7: 77:a7:56:d7:df:d2:8b:d5:6a:2a:92:a9:20:08:b7:e4:ed:72: 1e:7a:b9:f0:77:21:e5:99:0d:90:05:d1:98:a0:5e:37:7a:74: ee:b2:c9:8c:e4:1e:bc:6b:dd:0f:32:92:17:2e:b6:eb:b3:4d: 69:fd:c2:1d:cc:63:8b:d5:9e:78:10:d4:39:4d:1e:e0:a5:e0: 48:a4:5a:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy98D4CK7setCuRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MWJjMjc3NGItZTkzMy00NDgzLTliM2QtZGY0M2ZlMmNlZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ7heQNZvEAAkx6DqlTa+LJ6JuGCVTO9hJXs Mbr5Gc6IWal+IJtN3hj8AWhyeg6Q9+WEYy/8Cb+utD+SXqF4t1ALVRTyQXw+RmgU auwvAdpl+w/BkH3etCzOMBwl60eBKvpWIlCyl/NM4RrShoQCa8773nTsT0+a17hy PcdRwp/FGiivi6R6AKINuPkBX/pWgTLDVAAmHutp24HhairYlAAyScdJLPB95vDX f4XeZpLCg3kyHwG+TgxcB9bAcJdsnESqf4ffM3aGGyL/XcRhHfvuYi+b8mCBVql5 kACBVXCUPPs6a3rc78TxHyNBGiEjIewQ9Nm1Cy2c725hNGrgoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfwG/UBdPnbZhExy4+QQdXUf0D2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYjI0MjUyMmQtMjU5MC0z MTZlLTk0MWItOWI2Y2JjOTNlZDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkMR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqefagYl430FqKm03xDRL7BZ1XmoTuvw3j3TiomT9SJu4xwEYOFYfP8 MSfVnAOykyC8JlUo4LgnrSxa+kYnoCo8H5K+QTyfLePrNuJQhTtsOEFawOaKvdNz nqGJFC283iYb2oMI59OO8QdnIQS89XoRWWcHLCAP8IWW9x03KV9ZOD0ydXmypor4 uPL4y+MS1g/HNesGKdgUHIiO5vZ9cK55Pk4nklKJqhB6HALGGEWPgDOKp3enVtff 0ovVaiqSqSAIt+Ttch56ufB3IeWZDZAF0ZigXjd6dO6yyYzkHrxr3Q8ykhcutuuz TWn9wh3MY4vVnngQ1DlNHuCl4EikWo8= -----END CERTIFICATE-----Generated at Wed Nov 5 06:20:43 2025 by rpki-client