
$ rpki-client -vvvf rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3232382e302f32342d3234203d3e20323135363037.roa
File: 3230392e3130322e3232382e302f32342d3234203d3e20323135363037.roa (raw, json)
Hash identifier: w/ma0QyCBe0umJqfKhdznB/Uyao9sFR2Mev5xMxitcc=
Subject key identifier: ED:39:E2:19:46:FE:C4:BB:E3:FE:BF:7D:01:37:FE:70:F3:42:84:89
Certificate issuer: /CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83
Certificate serial: 583252F0E75DFB3159301671E08615292932EBE7
Authority key identifier: 2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
Subject info access: rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3232382e302f32342d3234203d3e20323135363037.roa
Signing time: Mon 05 Oct 2026 15:00:47 +0000
ROA not before: Mon 05 Oct 2026 14:55:47 +0000
ROA not after: Mon 04 Oct 2027 15:00:47 +0000
asID: 215607
IP address blocks: 209.102.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl
rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 21 Oct 2026 21:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:32:52:f0:e7:5d:fb:31:59:30:16:71:e0:86:15:29:29:32:eb:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83
Validity
Not Before: Oct 5 14:55:47 2026 GMT
Not After : Oct 4 15:00:47 2027 GMT
Subject: CN=ED39E21946FEC4BBE3FEBF7D0137FE70F3428489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dc:93:42:41:8f:5b:83:d5:9d:20:4f:14:9a:
75:5b:2e:79:87:fe:33:75:a4:06:b6:b6:a5:bf:22:
b7:a9:1d:a7:d8:e6:a5:d4:d0:c8:57:23:76:d3:37:
31:9a:24:b7:43:22:e6:5e:e1:df:19:ea:dd:47:52:
a6:73:15:ce:a2:32:fb:e0:af:7e:f2:a7:00:aa:0a:
ef:cf:a0:72:bf:92:e5:04:6c:74:3c:8e:96:0d:87:
33:5c:94:8b:d5:9d:63:57:20:d2:9d:6b:fb:69:79:
0f:46:2f:e8:d7:ab:dc:2c:e3:34:ff:6f:7e:09:05:
8a:85:81:f3:5b:20:59:89:8a:93:04:a9:80:4f:17:
84:7a:28:6f:76:47:6d:7f:f3:2a:1b:6b:f2:fd:77:
78:98:d3:a3:e5:97:97:f3:e7:a3:de:1e:8f:b2:98:
fc:c7:fa:91:f9:86:1f:62:5a:13:bd:6a:53:6a:a8:
b3:45:6b:ef:73:db:e8:ca:02:25:8b:34:62:eb:e8:
1f:14:16:e0:1e:56:ca:8c:3f:6e:2b:26:2e:1b:88:
3e:81:91:6c:c5:2b:2f:bd:df:94:ed:23:55:d1:c2:
6b:2b:91:a8:86:d6:61:30:5e:81:c2:06:12:bf:a6:
b6:09:85:f7:49:21:26:08:3c:c1:ab:fa:0f:b3:dd:
83:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:39:E2:19:46:FE:C4:BB:E3:FE:BF:7D:01:37:FE:70:F3:42:84:89
X509v3 Authority Key Identifier:
keyid:2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3232382e302f32342d3234203d3e20323135363037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.102.228.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:5b:04:74:aa:f6:f4:68:95:9a:4e:f1:d6:42:04:76:0d:f5:
44:72:29:30:ce:09:ec:43:01:30:f3:94:16:7f:77:20:33:66:
80:a5:54:92:fd:c7:0c:33:26:fb:f7:83:63:d8:37:d6:cd:e1:
d6:db:d7:70:7b:3f:6d:1d:55:12:b7:30:e9:a6:32:d2:aa:b2:
4d:b8:62:de:b3:9a:8b:8e:ef:16:62:fb:5d:c5:d0:90:3b:07:
ad:d6:cc:02:01:ee:9e:3c:f2:9a:50:a1:51:e7:6e:78:46:87:
24:b1:66:23:c4:ef:a4:f1:8b:49:4b:6b:ad:36:76:bb:67:a7:
9b:24:23:92:40:86:ca:0c:e1:3d:c7:2b:1a:4a:e2:e1:4e:ab:
69:0e:60:24:e0:ee:7c:32:6a:16:28:ff:a1:0c:54:05:87:32:
68:2d:35:f0:d4:28:7e:aa:0e:ac:37:3f:af:a3:91:8c:e5:a0:
5c:19:36:c6:35:1a:27:96:2b:4a:88:b5:2a:34:12:de:ce:da:
4d:76:fa:aa:c5:37:27:b4:85:e2:fb:82:9c:d8:68:55:19:66:
bb:ee:0f:50:ec:80:3c:64:d1:51:6b:fb:f2:40:27:37:56:3e:
27:3d:69:ae:40:a2:46:cb:d9:53:aa:1d:73:a7:c6:1c:cd:5a:
0c:13:6f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 15:22:25 2026 by rpki-client