
$ rpki-client -vvvf rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3232382e302f32322d3234203d3e20383334.roa
File: 3230392e3130322e3232382e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: /U8vFxzhRmilvKGASeitX39Iyfw378KzzKUIyXKgbgo=
Subject key identifier: 69:34:89:85:6C:80:7B:FA:C2:11:EC:24:0D:32:0D:0B:53:32:56:60
Certificate issuer: /CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83
Certificate serial: 6C5464F9B0CEB8A7131BCDF19929933B78506134
Authority key identifier: 2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
Subject info access: rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3232382e302f32322d3234203d3e20383334.roa
Signing time: Thu 05 Nov 2026 14:57:10 +0000
ROA not before: Thu 05 Nov 2026 14:52:10 +0000
ROA not after: Thu 04 Nov 2027 14:57:10 +0000
asID: 834
IP address blocks: 209.102.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl
rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Nov 2026 05:17:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:54:64:f9:b0:ce:b8:a7:13:1b:cd:f1:99:29:93:3b:78:50:61:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83
Validity
Not Before: Nov 5 14:52:10 2026 GMT
Not After : Nov 4 14:57:10 2027 GMT
Subject: CN=693489856C807BFAC211EC240D320D0B53325660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:26:a6:ee:bd:b9:bd:a3:d9:8c:b0:4f:7c:6b:
c7:73:a3:e9:c6:81:9d:eb:0d:00:e1:c8:fd:c4:b6:
7d:1f:cb:c5:7d:ce:25:a9:01:ac:52:5d:76:44:f5:
24:99:f9:e3:af:16:00:69:b3:9a:1e:34:91:e1:1b:
b0:2a:5a:57:6f:65:20:a7:61:28:0d:3a:67:ac:0f:
3e:73:87:d4:c5:83:f5:d1:ab:6a:b1:f6:bd:c0:72:
81:f9:a0:52:63:a1:14:fb:79:1e:fc:58:b9:06:31:
a6:86:17:21:94:5d:59:ba:f2:10:26:a3:81:23:fc:
48:7f:da:0b:94:eb:82:ea:ae:44:b5:7a:6a:8c:3b:
3c:25:b9:50:f3:d0:f3:dc:05:cc:20:71:d3:c1:6e:
44:92:6e:66:12:bc:8a:8e:7e:56:19:e7:55:0e:c7:
e9:f1:7f:da:be:81:6a:7c:38:9a:ea:98:ee:bf:bd:
c4:ae:1f:bd:21:7c:3e:ba:70:84:15:db:a8:ea:00:
cb:20:52:a1:5a:8d:27:f8:8e:7c:4c:78:cd:cb:c3:
2f:5b:39:ee:96:4c:32:54:d1:6b:a4:de:fe:f6:a7:
bf:0f:c1:d1:78:1b:fd:5e:af:24:c6:65:53:45:27:
b8:bc:4c:81:7f:3f:de:de:a2:70:4a:e6:2c:6d:55:
b8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:34:89:85:6C:80:7B:FA:C2:11:EC:24:0D:32:0D:0B:53:32:56:60
X509v3 Authority Key Identifier:
keyid:2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3232382e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.102.228.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:b3:d3:a4:76:20:57:6b:9b:31:57:e0:a9:38:a0:27:f7:15:
f0:9c:09:da:b0:49:47:d9:fb:0c:9d:5d:d2:2e:1e:fa:b7:23:
86:96:3a:5a:65:66:c5:ce:47:57:32:c6:cd:51:93:99:0c:cd:
03:3f:fc:22:30:36:fe:69:47:d6:8b:68:a0:4e:db:17:f8:92:
51:72:03:3a:3e:18:fd:e1:43:0a:65:1b:db:e2:65:13:82:bd:
52:2a:2c:e2:90:f7:9a:85:13:0b:9c:24:d2:81:20:69:86:dd:
c1:4f:66:61:21:3d:a3:98:f1:b9:cb:42:62:5b:9a:15:c2:28:
c4:2d:73:00:b7:78:78:2b:5c:0a:a9:b6:da:a3:91:a1:e6:43:
85:c4:f8:84:31:fe:bd:7e:62:9f:f0:4e:44:5d:11:92:58:7d:
b8:3c:df:c1:8a:6f:54:49:16:89:d0:0a:5c:9c:43:f5:38:b3:
20:62:1d:24:e9:52:21:98:c5:c5:5d:c7:81:ac:f2:93:cb:f9:
0b:4f:3b:8b:d7:dd:af:99:c1:e0:df:5e:a2:71:eb:16:43:12:
fa:8c:9f:33:c5:c0:10:6d:93:a4:f9:0a:05:2a:e8:7c:dd:3b:
4a:b2:ee:c3:60:95:d7:1e:5d:04:3b:86:dd:cc:8b:fa:86:e7:
8a:04:21:fd
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUbFRk+bDOuKcTG83xmSmTO3hQYTQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjQxZGM4MGFjNDMwNWM0ZWJkMTMxZGE3MTk2ZGUxNTYw
YjU5ZTFhMmZmNjM0OWRlODMwHhcNMjYxMTA1MTQ1MjEwWhcNMjcxMTA0MTQ1NzEw
WjAzMTEwLwYDVQQDEyg2OTM0ODk4NTZDODA3QkZBQzIxMUVDMjQwRDMyMEQwQjUz
MzI1NjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyam7r25vaPZ
jLBPfGvHc6PpxoGd6w0A4cj9xLZ9H8vFfc4lqQGsUl12RPUkmfnjrxYAabOaHjSR
4RuwKlpXb2Ugp2EoDTpnrA8+c4fUxYP10atqsfa9wHKB+aBSY6EU+3ke/Fi5BjGm
hhchlF1ZuvIQJqOBI/xIf9oLlOuC6q5EtXpqjDs8JblQ89Dz3AXMIHHTwW5Ekm5m
EryKjn5WGedVDsfp8X/avoFqfDia6pjuv73Erh+9IXw+unCEFduo6gDLIFKhWo0n
+I58THjNy8MvWznulkwyVNFrpN7+9qe/D8HReBv9Xq8kxmVTRSe4vEyBfz/e3qJw
SuYsbVW41QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFGk0iYVsgHv6whHsJA0yDQtT
MlZgMB8GA1UdIwQYMBaAFC5pLDfOKCN9QreUS8ey/adgyDbkMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2NhNzA1ZDkwOWVkMTQxYmM5OGYxNjA3MDY3N2QzYjQzLzAv
MkU2OTJDMzdDRTI4MjM3RDQyQjc5NDRCQzdCMkZEQTc2MEM4MzZFNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5LzlmNjZiMWY1LWJiMTYtNDlkNS1iNjdiLWIzZjI3ZjhkNTZjOC82NDFk
YzgwYWM0MzA1YzRlYmQxMzFkYTcxOTZkZTE1NjBiNTllMWEyZmY2MzQ5ZGU4My5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jYTcwNWQ5MDllZDE0MWJjOThmMTYw
NzA2NzdkM2I0My8wLzMyMzAzOTJlMzEzMDMyMmUzMjMyMzgyZTMwMmYzMjMyMmQz
MjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALRZuQwDQYJKoZIhvcNAQELBQAD
ggEBAJuz06R2IFdrmzFX4Kk4oCf3FfCcCdqwSUfZ+wydXdIuHvq3I4aWOlplZsXO
R1cyxs1Rk5kMzQM//CIwNv5pR9aLaKBO2xf4klFyAzo+GP3hQwplG9viZROCvVIq
LOKQ95qFEwucJNKBIGmG3cFPZmEhPaOY8bnLQmJbmhXCKMQtcwC3eHgrXAqpttqj
kaHmQ4XE+IQx/r1+Yp/wTkRdEZJYfbg838GKb1RJFonQClycQ/U4syBiHSTpUiGY
xcVdx4Gs8pPL+QtPO4vX3a+ZweDfXqJx6xZDEvqMnzPFwBBtk6T5CgUq6HzdO0qy
7sNgldceXQQ7ht3Mi/qG54oEIf0=
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:50:02 2026 by rpki-client