$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/a35b35d7-1b98-343e-bb13-d4cb3acfc202.roa File: a35b35d7-1b98-343e-bb13-d4cb3acfc202.roa (raw, json) Hash identifier: DACORB5AqVU6z8DSqqp79VRVTPTO58Z/PxiUdDdKUm4= Subject key identifier: F5:A0:2A:5E:C5:D9:33:3A:94:D8:5B:E5:83:0D:F0:47:FA:7E:B0:2E Certificate issuer: /CN=60200506-e0ba-4a7d-b096-a86957fd76ee Certificate serial: 010D0C9F4328584B110C0F55CEB616322FB13140 Authority key identifier: CE:43:ED:FD:A2:97:AD:00:6A:E5:9C:26:E1:DF:AC:97:8C:DF:A5:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/a35b35d7-1b98-343e-bb13-d4cb3acfc202.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 32157 IP address blocks: 205.211.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:0f:55:ce:b6:16:32:2f:b1:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60200506-e0ba-4a7d-b096-a86957fd76ee Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=b966d21a-b962-4629-8000-7b0eaec7c70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:de:b4:e5:6b:f4:87:d1:48:87:52:f8:7d:2a: 96:4c:72:2d:81:7b:79:41:07:df:16:3e:c2:57:76: a9:1b:54:1e:31:01:59:1d:37:74:bb:0e:86:db:ed: 3e:38:aa:d6:0c:50:f6:63:72:08:09:ff:ac:9a:cd: 37:f9:2c:8b:36:ce:4e:dd:73:41:16:4c:c7:09:70: 7c:b2:c7:0c:98:e9:bb:2d:54:f6:30:46:c3:79:26: ad:c8:49:e1:06:93:3b:24:1b:83:43:47:af:57:bb: 05:5a:07:26:7e:25:32:85:ac:fe:93:f9:f2:60:8a: f7:8d:5d:e7:cd:62:54:06:25:32:2e:77:ee:d7:f0: d4:e5:d5:72:88:66:b7:6d:b2:3f:5e:fd:fc:7a:5d: be:c3:14:fc:7b:b1:cd:dc:d8:41:c1:b1:d8:40:e6: a0:7e:f5:35:e2:ba:91:27:15:a3:94:4d:93:3d:34: ac:27:04:d4:98:c8:30:53:32:7d:58:bf:5a:9f:ef: b3:39:e8:d6:c1:39:a6:80:05:7b:77:89:f3:0f:b8: ec:07:cc:1e:74:e1:1f:f7:01:58:66:9f:ae:ea:98: c6:f8:2f:65:d1:98:d8:54:81:e5:c1:f1:c2:33:a7: 2c:99:17:f8:31:4c:2b:1a:da:73:ae:75:d4:b4:1b: 6f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A0:2A:5E:C5:D9:33:3A:94:D8:5B:E5:83:0D:F0:47:FA:7E:B0:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/a35b35d7-1b98-343e-bb13-d4cb3acfc202.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.crl X509v3 Authority Key Identifier: keyid:CE:43:ED:FD:A2:97:AD:00:6A:E5:9C:26:E1:DF:AC:97:8C:DF:A5:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer sbgp-ipAddrBlock: critical IPv4: 205.211.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:76:02:b4:5e:81:1e:21:dc:53:58:bf:22:4a:1d:74:c0:48: 46:1d:92:ba:03:f0:fc:79:b9:00:dd:9b:3c:a8:a3:6e:59:af: da:fb:ca:a2:4c:6a:49:94:99:d2:30:0e:db:dd:d1:c3:3f:c5: fc:64:8e:d9:7b:1f:34:aa:b9:4d:67:89:ff:56:ed:0f:32:a3: 5b:60:8f:08:62:ab:e2:ce:c0:78:40:39:77:d5:81:b5:9a:31: 75:a4:5b:a7:22:6e:13:c0:5d:7a:97:b3:18:1e:e3:7d:d0:77: 64:74:17:71:bd:40:3e:22:08:19:c4:15:57:a7:28:63:b0:a5: e3:1b:e9:2d:20:f7:f6:87:7b:0e:3f:be:80:c6:b5:c2:b7:b8: ef:39:05:28:07:58:8d:6a:65:19:9c:9f:3d:4a:a5:fb:de:5f: e4:09:10:55:1f:26:88:f6:b5:2b:94:53:11:ef:76:63:91:b0: 21:91:53:e6:2c:4e:2f:f9:c8:99:3a:6c:a6:33:e9:33:bd:21: e0:e5:13:27:4b:e3:19:c3:6e:97:90:e9:be:0d:48:c1:c4:0c: 9a:48:31:4e:85:a3:f1:ef:aa:80:c7:b6:05:52:b3:64:6e:3f: 12:bd:d3:49:dc:df:57:5b:f0:ea:d7:59:9f:7e:8a:6f:24:fd: e6:38:bb:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDA9VzrYWMi+xMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAyMDA1MDYtZTBiYS00YTdkLWIwOTYtYTg2OTU3ZmQ3 NmVlMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk Yjk2NmQyMWEtYjk2Mi00NjI5LTgwMDAtN2IwZWFlYzdjNzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht605Wv0h9FIh1L4fSqWTHItgXt5QQffFj7C V3apG1QeMQFZHTd0uw6G2+0+OKrWDFD2Y3IICf+sms03+SyLNs5O3XNBFkzHCXB8 sscMmOm7LVT2MEbDeSatyEnhBpM7JBuDQ0evV7sFWgcmfiUyhaz+k/nyYIr3jV3n zWJUBiUyLnfu1/DU5dVyiGa3bbI/Xv38el2+wxT8e7HN3NhBwbHYQOagfvU14rqR JxWjlE2TPTSsJwTUmMgwUzJ9WL9an++zOejWwTmmgAV7d4nzD7jsB8wedOEf9wFY Zp+u6pjG+C9l0ZjYVIHlwfHCM6csmRf4MUwrGtpzrnXUtBtviwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWgKl7F2TM6lNhb5YMN8Ef6frAuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82MDIw MDUwNi1lMGJhLTRhN2QtYjA5Ni1hODY5NTdmZDc2ZWUvYTM1YjM1ZDctMWI5OC0z NDNlLWJiMTMtZDRjYjNhY2ZjMjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjAyMDA1MDYtZTBiYS00YTdkLWIw OTYtYTg2OTU3ZmQ3NmVlLzYwMjAwNTA2LWUwYmEtNGE3ZC1iMDk2LWE4Njk1N2Zk NzZlZS5jcmwwHwYDVR0jBBgwFoAUzkPt/aKXrQBq5Zwm4d+sl4zfpTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82MDIwMDUwNi1lMGJhLTRhN2QtYjA5Ni1hODY5 NTdmZDc2ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzdO0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp2ArRegR4h3FNYvyJKHXTASEYdkroD8Px5uQDdmzyoo25Zr9r7yqJM akmUmdIwDtvd0cM/xfxkjtl7HzSquU1nif9W7Q8yo1tgjwhiq+LOwHhAOXfVgbWa MXWkW6cibhPAXXqXsxge433Qd2R0F3G9QD4iCBnEFVenKGOwpeMb6S0g9/aHew4/ voDGtcK3uO85BSgHWI1qZRmcnz1KpfveX+QJEFUfJoj2tSuUUxHvdmORsCGRU+Ys Ti/5yJk6bKYz6TO9IeDlEydL4xnDbpeQ6b4NSMHEDJpIMU6Fo/HvqoDHtgVSs2Ru PxK900nc31db8OrXWZ9+im8k/eY4u2A= -----END CERTIFICATE-----Generated at Wed Nov 5 06:22:29 2025 by rpki-client