
$ rpki-client -vvvf rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3233362e302f32322d3234203d3e20383334.roa
File: 3230392e3130322e3233362e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: TSpphCwvxN0PdNz1kpjKyMMCg4A3v0V8176E2QGmUOg=
Subject key identifier: 79:58:52:71:85:22:35:4D:AA:3D:7F:89:FD:F5:95:11:D6:AE:51:D2
Certificate issuer: /CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83
Certificate serial: 4E687ABD9BCC5A463D57BBD204DF7CBD064CEF2C
Authority key identifier: 2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
Subject info access: rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3233362e302f32322d3234203d3e20383334.roa
Signing time: Sun 08 Nov 2026 09:42:24 +0000
ROA not before: Sun 08 Nov 2026 09:37:24 +0000
ROA not after: Sun 07 Nov 2027 09:42:24 +0000
asID: 834
IP address blocks: 209.102.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl
rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Nov 2026 05:17:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:68:7a:bd:9b:cc:5a:46:3d:57:bb:d2:04:df:7c:bd:06:4c:ef:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83
Validity
Not Before: Nov 8 09:37:24 2026 GMT
Not After : Nov 7 09:42:24 2027 GMT
Subject: CN=795852718522354DAA3D7F89FDF59511D6AE51D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:f0:5a:e3:c7:f9:e8:1c:8c:9e:84:0b:d2:
88:01:37:34:54:a5:3e:75:ed:b0:e6:7e:e0:4a:27:
05:a4:27:ea:aa:4c:29:da:37:56:62:8e:32:a5:3b:
e9:79:d6:25:5f:93:93:78:f4:84:b3:6a:fc:2e:b6:
36:8e:4f:2c:0d:78:72:51:ca:12:ce:86:a3:78:9b:
87:e5:ae:8c:64:d0:72:8e:04:8c:64:e8:92:d0:1a:
43:62:75:de:15:6f:5a:24:e1:f8:ec:00:56:be:c3:
a9:16:e8:48:93:8a:27:9e:ab:9e:6d:fb:5a:67:c3:
f8:af:5d:cb:72:76:a7:e1:99:70:29:9d:42:ea:d3:
f7:ff:4e:f4:10:5c:32:66:ff:b8:00:71:40:5a:f3:
95:ef:d4:8c:94:5e:ae:57:46:63:21:cd:a8:66:7a:
64:d5:2b:ad:18:81:0c:56:a6:7f:62:e3:41:ff:d9:
d8:31:f7:19:30:d3:96:97:b3:50:2e:ee:02:ca:7d:
02:56:86:c9:07:9c:ed:e9:85:36:99:70:d1:67:30:
ad:de:a2:4f:75:ac:c5:bc:8e:32:b2:64:69:9b:60:
f1:df:71:37:f3:1c:e8:92:07:56:9c:7c:c2:1e:3f:
0a:4d:17:40:55:3a:4d:c8:bc:ca:13:d2:69:eb:e7:
66:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:58:52:71:85:22:35:4D:AA:3D:7F:89:FD:F5:95:11:D6:AE:51:D2
X509v3 Authority Key Identifier:
keyid:2E:69:2C:37:CE:28:23:7D:42:B7:94:4B:C7:B2:FD:A7:60:C8:36:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/2E692C37CE28237D42B7944BC7B2FDA760C836E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f66b1f5-bb16-49d5-b67b-b3f27f8d56c8/641dc80ac4305c4ebd131da7196de1560b59e1a2ff6349de83.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca705d909ed141bc98f16070677d3b43/0/3230392e3130322e3233362e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.102.236.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:c4:a3:36:87:7b:dd:38:ce:90:f6:4b:d0:a3:61:8c:17:d4:
db:f3:04:52:d1:fc:34:49:ec:c4:4a:77:7c:65:c6:8b:ac:8a:
73:7b:e9:24:62:84:ab:ff:83:b2:26:5c:d0:18:17:7d:bc:8d:
97:64:fa:b1:e1:a4:44:d1:7a:bd:20:dc:cc:46:38:ad:e3:cd:
dd:fa:9d:54:b1:42:d5:ee:35:e1:9a:a8:d6:80:db:e7:74:e4:
eb:69:7c:70:21:18:93:dc:8b:78:f7:48:c8:8b:7b:a1:f3:79:
9a:1a:8b:32:fd:36:2d:f9:92:ce:6e:4f:ca:b7:1e:d7:19:d9:
4a:b1:d5:a1:8e:ae:d5:d3:42:63:a9:39:53:e6:e9:c9:4f:0a:
d2:e4:76:c7:a6:07:29:3b:b7:95:27:18:f1:b2:e6:c7:9f:82:
00:6f:ff:f8:96:7f:1e:75:ee:a4:9f:ce:a4:4b:02:1a:1a:cb:
ec:80:37:3e:77:35:87:c6:4d:89:8f:eb:d8:46:b7:47:dd:f5:
9c:44:d6:6b:ef:00:db:6c:e3:5b:6a:70:3c:72:f6:ee:7d:fe:
bc:a5:f7:c6:cb:fe:4b:5d:0c:15:68:2b:9c:3f:6c:c3:e0:d7:
85:74:db:be:93:72:46:7a:2c:a1:51:d4:f3:e6:1a:e2:6d:5a:
f0:f1:7c:9b
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUTmh6vZvMWkY9V7vSBN98vQZM7ywwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjQxZGM4MGFjNDMwNWM0ZWJkMTMxZGE3MTk2ZGUxNTYw
YjU5ZTFhMmZmNjM0OWRlODMwHhcNMjYxMTA4MDkzNzI0WhcNMjcxMTA3MDk0MjI0
WjAzMTEwLwYDVQQDEyg3OTU4NTI3MTg1MjIzNTREQUEzRDdGODlGREY1OTUxMUQ2
QUU1MUQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw3wWuPH+egc
jJ6EC9KIATc0VKU+de2w5n7gSicFpCfqqkwp2jdWYo4ypTvpedYlX5OTePSEs2r8
LrY2jk8sDXhyUcoSzoajeJuH5a6MZNByjgSMZOiS0BpDYnXeFW9aJOH47ABWvsOp
FuhIk4onnquebftaZ8P4r13Lcnan4ZlwKZ1C6tP3/070EFwyZv+4AHFAWvOV79SM
lF6uV0ZjIc2oZnpk1SutGIEMVqZ/YuNB/9nYMfcZMNOWl7NQLu4Cyn0CVobJB5zt
6YU2mXDRZzCt3qJPdazFvI4ysmRpm2Dx33E38xzokgdWnHzCHj8KTRdAVTpNyLzK
E9Jp6+dmDQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFHlYUnGFIjVNqj1/if31lRHW
rlHSMB8GA1UdIwQYMBaAFC5pLDfOKCN9QreUS8ey/adgyDbkMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2NhNzA1ZDkwOWVkMTQxYmM5OGYxNjA3MDY3N2QzYjQzLzAv
MkU2OTJDMzdDRTI4MjM3RDQyQjc5NDRCQzdCMkZEQTc2MEM4MzZFNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5LzlmNjZiMWY1LWJiMTYtNDlkNS1iNjdiLWIzZjI3ZjhkNTZjOC82NDFk
YzgwYWM0MzA1YzRlYmQxMzFkYTcxOTZkZTE1NjBiNTllMWEyZmY2MzQ5ZGU4My5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jYTcwNWQ5MDllZDE0MWJjOThmMTYw
NzA2NzdkM2I0My8wLzMyMzAzOTJlMzEzMDMyMmUzMjMzMzYyZTMwMmYzMjMyMmQz
MjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALRZuwwDQYJKoZIhvcNAQELBQAD
ggEBAGrEozaHe904zpD2S9CjYYwX1NvzBFLR/DRJ7MRKd3xlxousinN76SRihKv/
g7ImXNAYF328jZdk+rHhpETRer0g3MxGOK3jzd36nVSxQtXuNeGaqNaA2+d05Otp
fHAhGJPci3j3SMiLe6HzeZoaizL9Ni35ks5uT8q3HtcZ2Uqx1aGOrtXTQmOpOVPm
6clPCtLkdsemByk7t5UnGPGy5sefggBv//iWfx517qSfzqRLAhoay+yANz53NYfG
TYmP69hGt0fd9ZxE1mvvANts41tqcDxy9u59/ryl98bL/ktdDBVoK5w/bMPg14V0
276TckZ6LKFR1PPmGuJtWvDxfJs=
-----END CERTIFICATE-----
Generated at Sun Nov 15 09:50:34 2026 by rpki-client