This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/36342e34392e32382e302f32342d3234203d3e203633303038.roa
File: 36342e34392e32382e302f32342d3234203d3e203633303038.roa (raw, json)
Hash identifier: 6smw3TWs8mFSua+pwWl0bN6b2ndZBrl87dJ00F4xXXs=
Subject key identifier: 3C:25:6E:81:5B:D7:15:DA:04:00:25:08:EE:EA:3C:42:8C:12:1D:A0
Certificate issuer: /CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Certificate serial: 4EB7401DEBE1E563A6A5BAF75849B161F748FAE7
Authority key identifier: A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/36342e34392e32382e302f32342d3234203d3e203633303038.roa
Signing time: Thu 04 Dec 2025 13:33:36 +0000
ROA not before: Thu 04 Dec 2025 13:28:36 +0000
ROA not after: Thu 03 Dec 2026 13:33:36 +0000
asID: 63008
IP address blocks: 64.49.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 06 Dec 2025 17:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:b7:40:1d:eb:e1:e5:63:a6:a5:ba:f7:58:49:b1:61:f7:48:fa:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Validity
Not Before: Dec 4 13:28:36 2025 GMT
Not After : Dec 3 13:33:36 2026 GMT
Subject: CN=3C256E815BD715DA04002508EEEA3C428C121DA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6b:29:03:ac:1f:d8:35:fb:c9:f7:48:ff:04:
08:c2:a9:44:c8:43:24:ac:ab:98:c4:4b:53:61:75:
53:ea:e5:27:67:95:0a:d4:a7:0f:51:60:e6:7b:4c:
b8:66:87:48:0e:c3:06:3d:97:af:8c:15:33:6d:6b:
db:d2:10:0b:85:21:68:35:e1:6a:57:d9:1f:79:7f:
f5:3f:93:8e:63:69:93:01:51:5a:74:2e:54:c1:7d:
3b:23:33:74:4b:31:00:a8:d0:c6:f3:82:fd:d4:d5:
f1:48:28:fa:bc:d0:ea:c0:48:63:14:9e:cd:74:b8:
cc:15:13:39:70:39:09:c2:b6:7e:0b:f4:e2:cc:a4:
62:ec:8b:cd:8d:05:6f:6c:9f:20:ce:9a:da:dc:38:
7e:d8:3d:23:f6:ab:32:7b:ff:e5:a5:4f:cc:45:67:
bf:45:27:8c:17:01:2f:10:d4:4c:ca:3d:55:98:2d:
09:41:13:9c:26:f3:8f:a1:ce:d7:78:f1:46:20:ff:
11:fa:ca:80:d5:a4:be:9d:6b:cf:a8:d5:4d:86:03:
27:fb:57:de:d1:c7:b7:d1:70:f0:f9:d7:3e:7b:2f:
ab:92:a2:c1:76:d1:40:a6:83:5c:5c:e9:b4:d6:dd:
6b:21:a9:a7:44:5b:ec:70:20:8d:b4:11:24:35:dd:
1f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:25:6E:81:5B:D7:15:DA:04:00:25:08:EE:EA:3C:42:8C:12:1D:A0
X509v3 Authority Key Identifier:
keyid:A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/36342e34392e32382e302f32342d3234203d3e203633303038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.49.28.0/24
Signature Algorithm: sha256WithRSAEncryption
35:06:4f:e2:3d:48:dc:04:b4:63:25:22:00:07:16:75:d1:1b:
ee:9a:28:eb:e3:5a:91:2a:05:8e:51:ca:25:39:d0:3a:96:de:
52:17:f5:53:93:0a:04:02:ce:55:a2:a1:d3:03:54:ab:d7:7f:
a4:e2:1a:7e:fb:4e:dd:b6:40:09:60:76:ed:1c:ec:07:d7:0b:
f7:50:80:e6:0a:c0:cd:b2:9e:d6:2d:3f:00:bd:dd:ec:f9:92:
c6:19:b9:a8:d5:20:53:5d:f3:97:72:60:cd:c1:b0:2c:a7:80:
59:09:f6:cd:9f:f1:ea:de:08:a3:6f:ba:6d:7f:d7:b1:7f:0c:
8e:b8:a7:3f:3c:36:2d:f9:ff:b9:4c:df:be:09:c4:99:76:5e:
0d:39:16:e7:1c:0e:71:86:71:31:84:20:34:eb:78:a1:5e:8b:
7d:21:25:23:f4:05:96:ed:d9:77:f3:0a:7f:d7:ef:2c:65:33:
e7:d0:3a:8d:ad:26:85:ce:e1:a4:67:50:ad:ce:ac:ab:b9:69:
db:ee:12:5c:4e:a3:a7:b2:13:02:6e:57:c0:04:26:ec:dc:a1:
b3:52:28:aa:22:d3:e1:71:6d:0f:1a:24:4e:4b:8e:85:be:b3:
d0:d1:f6:43:b8:8b:25:c5:a6:20:9d:71:23:9c:4a:e6:d4:fd:
ff:56:7f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:27:36 2025 by rpki-client