
$ rpki-client -vvvf rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3232342e302f32342d3234203d3e20343032383939.roa
File: 3230392e3130322e3232342e302f32342d3234203d3e20343032383939.roa (raw, json)
Hash identifier: XXYsxRKpi0jglDGHrPFqG6FuJtfptoxjUzM1ltfFt50=
Subject key identifier: 88:ED:6A:4E:87:DF:B4:AE:E7:3F:6D:B9:EC:3A:11:C6:5A:F8:37:94
Certificate issuer: /CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83
Certificate serial: 5A83F6B2F9BF5E2D5902522911BEEC24F49FA812
Authority key identifier: 2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
Subject info access: rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3232342e302f32342d3234203d3e20343032383939.roa
Signing time: Sun 04 Oct 2026 15:48:08 +0000
ROA not before: Sun 04 Oct 2026 15:43:08 +0000
ROA not after: Sun 03 Oct 2027 15:48:08 +0000
asID: 402899
IP address blocks: 209.102.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl
rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Oct 2026 17:55:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:83:f6:b2:f9:bf:5e:2d:59:02:52:29:11:be:ec:24:f4:9f:a8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83
Validity
Not Before: Oct 4 15:43:08 2026 GMT
Not After : Oct 3 15:48:08 2027 GMT
Subject: CN=88ED6A4E87DFB4AEE73F6DB9EC3A11C65AF83794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:16:a6:b5:6b:04:7f:6b:5c:2b:25:79:58:8a:
d4:f0:db:dd:80:c9:63:e4:e0:3f:85:4e:f2:59:44:
16:1c:7b:ee:52:2a:40:e8:8d:31:1a:6b:0a:70:40:
0f:a4:2e:48:16:3c:f7:ea:05:13:c4:12:35:0f:7c:
4b:2f:d2:a0:c7:21:7f:12:6f:0e:35:e5:86:9b:92:
a3:14:af:bb:ed:cd:5a:17:00:5d:d1:a7:c1:1a:30:
fc:37:cc:d8:90:9f:09:c6:86:65:c3:ec:16:f4:3c:
dc:35:21:11:e9:fb:0b:ea:9d:de:39:af:35:c9:8d:
97:33:20:3b:9d:f2:31:c4:ad:16:e7:da:ea:ca:72:
ad:5d:8c:18:8c:0b:55:30:6e:fc:c3:f7:d2:53:01:
a1:7e:7f:8c:52:18:3d:4e:e8:44:76:e3:21:66:5f:
85:8c:ae:ea:54:4b:82:c9:41:8c:8d:04:65:ce:0c:
d0:60:14:33:8d:03:0c:b2:3f:4f:f4:ea:9e:ec:7a:
fc:c5:37:e8:be:9f:19:09:88:db:11:0b:ef:87:58:
cc:f1:95:28:ea:5c:01:95:a6:ab:83:48:80:91:6f:
e7:bd:bd:8a:f0:ef:f1:03:ef:5c:30:69:60:87:68:
66:ff:42:a5:28:4f:86:eb:a5:f0:83:e4:2f:75:e5:
f6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:ED:6A:4E:87:DF:B4:AE:E7:3F:6D:B9:EC:3A:11:C6:5A:F8:37:94
X509v3 Authority Key Identifier:
keyid:2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3232342e302f32342d3234203d3e20343032383939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.102.224.0/24
Signature Algorithm: sha256WithRSAEncryption
70:9e:06:d6:8f:01:2b:f4:8b:f1:b0:f0:f3:a7:3f:bb:f1:1f:
22:e0:cc:8e:9a:8e:2a:87:40:de:4a:34:ef:48:a1:d3:4f:52:
29:25:60:32:c3:47:fc:69:0a:45:e1:ca:48:6d:8f:70:56:ef:
94:0a:b1:1a:c9:47:ea:4a:5d:65:7b:38:b8:68:5f:28:9c:3c:
4b:e0:e9:a2:fb:52:ae:ae:08:3c:e4:8e:8d:8a:2c:10:45:9f:
16:c5:f9:4c:a5:34:e3:cb:5e:8f:09:43:b6:63:02:0d:2f:8d:
6d:4b:cd:c5:51:da:df:0e:6d:c7:b2:62:1f:92:6c:c0:5a:36:
12:ab:bd:83:89:60:58:32:c0:e2:78:b0:84:4b:2f:74:29:09:
7b:97:93:d3:97:50:1c:7a:28:9e:d8:12:9f:4a:49:0c:56:c2:
a9:32:cc:dc:ac:0b:cc:f6:9d:1b:00:40:70:49:75:13:1f:8d:
17:c9:49:92:96:57:75:fc:cc:a6:b6:b7:4f:5f:dc:3e:cb:65:
53:b0:d0:87:c1:d8:99:8d:c6:b2:84:a1:69:5c:1b:f7:1c:11:
77:28:8f:27:c1:96:a7:ed:68:4c:67:90:df:7e:d8:d2:1c:8c:
60:e9:c4:84:42:cc:5c:3c:70:08:b5:17:81:81:d5:ae:d8:4f:
0d:18:79:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:14:14 2026 by rpki-client