$ rpki-client -vvvf rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3233322e302f32332d3234203d3e20383334.roa File: 3230392e3130322e3233322e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: Er7Y4NIvjsru5VZsgUlS+ofVBKIwOiPcbf6aEH28UHc= Subject key identifier: 5E:77:AA:E4:11:1D:0F:7C:B7:20:46:F7:E4:B7:B7:FA:F3:8D:DF:24 Certificate issuer: /CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83 Certificate serial: 2DFF967EF6314D5C5846F93670D10D6EE517BCF2 Authority key identifier: 2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer Subject info access: rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3233322e302f32332d3234203d3e20383334.roa Signing time: Thu 05 Nov 2026 14:57:10 +0000 ROA not before: Thu 05 Nov 2026 14:52:10 +0000 ROA not after: Thu 04 Nov 2027 14:57:10 +0000 asID: 834 IP address blocks: 209.102.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Nov 2026 10:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ff:96:7e:f6:31:4d:5c:58:46:f9:36:70:d1:0d:6e:e5:17:bc:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83 Validity Not Before: Nov 5 14:52:10 2026 GMT Not After : Nov 4 14:57:10 2027 GMT Subject: CN=5E77AAE4111D0F7CB72046F7E4B7B7FAF38DDF24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:64:e2:b0:a1:3a:98:a4:31:08:27:1f:a6:77: b7:29:b7:5e:e5:75:2a:0e:fe:ec:4d:5b:a9:53:a1: 1d:cc:e0:33:e3:f9:0f:0a:da:84:b6:cd:c5:2a:cb: 66:37:c4:d6:65:d8:0f:77:38:ea:90:90:ee:3e:1d: 7a:1c:fc:44:43:63:ba:d9:9c:aa:a4:70:af:01:4d: 82:6f:3c:20:a1:fa:28:36:83:e8:dc:ce:74:78:e1: b0:4a:da:ae:56:fc:89:70:8a:62:a5:f3:70:7a:9a: db:31:f6:9a:a0:c7:fd:8a:1a:a0:c6:8e:cb:7a:87: e5:2e:13:aa:21:c5:4b:f6:9a:14:82:04:14:f2:79: 66:09:53:19:39:bc:df:d2:6a:62:4c:3a:4b:4c:ff: 87:a4:2b:27:55:d1:18:0e:e3:df:a6:4d:d7:00:1b: 3a:e5:b1:76:c9:46:4e:58:52:22:8f:1a:94:6f:9e: e4:49:12:bf:12:73:59:e4:f9:53:e3:f4:00:58:cb: 6e:1c:f7:19:45:98:75:a7:ff:81:04:9d:7f:6f:64: 21:9a:ca:01:c7:4f:b4:9b:a8:60:94:9c:e4:5d:d9: 6e:4c:05:cc:fa:7e:9b:85:ce:95:ec:2d:f8:3f:41: 8f:1c:b4:fc:d4:11:51:46:0b:61:77:88:9d:82:be: 22:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:77:AA:E4:11:1D:0F:7C:B7:20:46:F7:E4:B7:B7:FA:F3:8D:DF:24 X509v3 Authority Key Identifier: keyid:2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3233322e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.102.232.0/23 Signature Algorithm: sha256WithRSAEncryption 36:aa:71:67:48:f1:a5:76:4c:df:bb:38:2b:6c:07:d8:a2:48: b3:eb:04:76:87:4e:dc:9a:5b:fa:82:57:d8:d0:c3:30:0e:8a: 88:3d:d0:8a:48:ab:48:6c:c0:ac:48:df:9f:bc:8f:2f:87:f0: 94:8c:fa:e6:46:22:f6:58:91:6d:68:47:d5:16:01:24:8a:9e: 34:1b:c2:dc:11:6f:d7:74:bf:f2:b7:05:fe:31:18:e3:5d:22: 4e:ad:0d:f2:43:d7:ab:4b:50:00:56:16:6c:f8:43:9f:10:7f: ee:ec:bd:54:dd:d2:4d:4a:5f:62:fe:74:c8:ea:de:34:a9:61: cf:bb:ad:b5:b1:da:11:55:70:4c:71:f1:83:95:ec:0f:79:20: f0:05:58:3b:d2:31:29:5e:ee:b1:5c:99:a6:59:0d:1d:40:21: 7a:25:51:27:a8:6f:33:f5:6e:43:12:db:7c:9d:82:27:99:40: 47:83:af:69:d9:a2:c8:94:62:4e:36:af:4c:37:ee:f7:02:c8: a4:67:a8:5d:4c:e4:fe:b0:d0:ea:e3:f2:af:b7:41:43:fa:fa: b5:96:ca:f9:61:ce:68:1b:97:dc:b3:72:88:3f:0a:40:99:a0: 38:90:4f:94:ab:c6:3e:a1:74:95:c6:5d:2e:1a:38:c6:91:23: ce:33:8e:27 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgIULf+WfvYxTVxYRvk2cNENbuUXvPIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjQxZGM4MGFjNDMwNWM0ZWJkMTMxZGE3MTk2ZGUxNTYw YjU5ZTFhMmZmNjM0OWRlODMwHhcNMjYxMTA1MTQ1MjEwWhcNMjcxMTA0MTQ1NzEw WjAzMTEwLwYDVQQDEyg1RTc3QUFFNDExMUQwRjdDQjcyMDQ2RjdFNEI3QjdGQUYz OERERjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWTisKE6mKQx CCcfpne3Kbde5XUqDv7sTVupU6EdzOAz4/kPCtqEts3FKstmN8TWZdgPdzjqkJDu Ph16HPxEQ2O62ZyqpHCvAU2CbzwgofooNoPo3M50eOGwStquVvyJcIpipfNweprb MfaaoMf9ihqgxo7LeoflLhOqIcVL9poUggQU8nlmCVMZObzf0mpiTDpLTP+HpCsn VdEYDuPfpk3XABs65bF2yUZOWFIijxqUb57kSRK/EnNZ5PlT4/QAWMtuHPcZRZh1 p/+BBJ1/b2QhmsoBx0+0m6hglJzkXdluTAXM+n6bhc6V7C34P0GPHLT81BFRRgth d4idgr4ipQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFF53quQRHQ98tyBG9+S3t/rz jd8kMB8GA1UdIwQYMBaAFC5pLDfOKCN9QreUS8ey/adgyDbkMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5L2NhNzA1ZDkwOWVkMTQxYmM5OGYxNjA3MDY3N2QzYjQzLzAv MkU2OTJDMzdDRTI4MjM3RDQyQjc5NDRCQzdCMkZEQTc2MEM4MzZFNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh M2FkOTE5LzlmNjZiMWY1LWJiMTYtNDlkNS1iNjdiLWIzZjI3ZjhkNTZjOC82NDFk YzgwYWM0MzA1YzRlYmQxMzFkYTcxOTZkZTE1NjBiNTllMWEyZmY2MzQ5ZGU4My5j ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jYTcwNWQ5MDllZDE0MWJjOThmMTYw NzA2NzdkM2I0My8wLzMyMzAzOTJlMzEzMDMyMmUzMjMzMzIyZTMwMmYzMjMzMmQz MjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHRZugwDQYJKoZIhvcNAQELBQAD ggEBADaqcWdI8aV2TN+7OCtsB9iiSLPrBHaHTtyaW/qCV9jQwzAOiog90IpIq0hs wKxI35+8jy+H8JSM+uZGIvZYkW1oR9UWASSKnjQbwtwRb9d0v/K3Bf4xGONdIk6t DfJD16tLUABWFmz4Q58Qf+7svVTd0k1KX2L+dMjq3jSpYc+7rbWx2hFVcExx8YOV 7A95IPAFWDvSMSle7rFcmaZZDR1AIXolUSeobzP1bkMS23ydgieZQEeDr2nZosiU Yk42r0w37vcCyKRnqF1M5P6w0Orj8q+3QUP6+rWWyvlhzmgbl9yzcog/CkCZoDiQ T5Srxj6hdJXGXS4aOMaRI84zjic= -----END CERTIFICATE-----Generated at Sun Nov 15 06:23:10 2026 by rpki-client