This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b3aac99b-7bab-3e36-80d2-01ac734cbbdc.roa
File: b3aac99b-7bab-3e36-80d2-01ac734cbbdc.roa (raw, json)
Hash identifier: UnJPaB524e5hbyCpt9KSmTeAI4W/FEjOj2PPYfsw5WQ=
Subject key identifier: 23:C3:08:D6:7C:1C:85:5A:E5:18:38:C7:49:23:E9:36:5B:6E:55:EC
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584BC270E6A2D8D1427CCAE99F00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b3aac99b-7bab-3e36-80d2-01ac734cbbdc.roa
Signing time: Wed 05 Nov 2025 14:00:38 +0000
ROA not before: Wed 05 Nov 2025 14:00:38 +0000
ROA not after: Tue 03 Feb 2026 14:00:38 +0000
asID: 36522
IP address blocks: 207.61.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c2:70:e6:a2:d8:d1:42:7c:ca:e9:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Nov 5 14:00:38 2025 GMT
Not After : Feb 3 14:00:38 2026 GMT
Subject: CN=23a3c3c2-6744-4694-b860-22f683735a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:91:82:44:6f:12:53:4f:8d:de:89:33:00:5d:
1b:a5:1c:ee:f9:9b:16:98:ff:6f:b8:3c:55:d2:98:
15:cb:c7:6d:e8:c8:d3:0c:3c:ea:f6:8f:00:29:4f:
dd:22:01:bc:af:ce:91:61:6a:50:c6:93:f9:0f:c8:
aa:d4:1c:d4:26:72:a9:c2:11:c4:79:7d:bc:de:fc:
54:7f:49:45:f3:86:7d:05:11:90:96:7c:a3:02:b0:
1d:df:45:e2:bd:e1:ab:bf:c5:e8:84:9b:8b:99:ad:
58:ce:02:a0:85:74:81:9c:f6:56:c4:63:2f:ae:cb:
1c:0c:7e:cf:e9:7a:df:4e:73:a8:d3:82:69:0b:de:
fe:f7:9e:d8:7b:ce:30:5f:a5:94:a8:70:6e:02:90:
fd:a7:81:af:cc:e3:4d:f1:85:d7:c9:03:09:29:d8:
4d:60:a8:86:ad:d8:7e:1d:19:68:df:2c:6f:c9:a9:
23:7e:28:fb:5a:03:a5:44:82:b4:f7:01:70:08:c5:
f7:70:8e:13:c0:84:27:ca:8a:04:71:ce:20:04:cb:
e1:2e:68:6d:aa:fb:88:62:a8:e5:ac:17:c2:b5:8f:
18:9a:28:5a:2e:d2:b2:c4:fd:b6:83:a0:f9:dc:77:
3d:66:ec:91:17:96:ac:85:9a:d9:24:ce:8e:fd:c4:
2b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C3:08:D6:7C:1C:85:5A:E5:18:38:C7:49:23:E9:36:5B:6E:55:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b3aac99b-7bab-3e36-80d2-01ac734cbbdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.61.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:6c:f5:89:0f:48:1b:67:d0:59:f0:ad:09:70:e9:68:be:e6:
c1:a3:72:52:21:b9:d4:95:d9:98:ec:f8:5d:1f:b5:12:c3:00:
ac:1f:78:a6:ad:99:ee:e6:3e:20:4b:d8:74:4d:6a:af:c8:56:
1e:2c:f7:5d:80:8d:41:51:52:c5:08:ce:73:0f:59:ed:10:55:
4f:8c:20:3d:5c:84:6e:49:ba:d8:74:32:10:6c:1e:ee:90:85:
a6:26:cd:86:30:67:d1:5c:de:db:cb:89:3e:9b:82:43:29:a0:
ac:41:80:91:08:dd:90:e6:5f:6c:e7:53:32:19:89:1f:d1:00:
5f:fc:5d:be:76:73:5e:f7:b8:63:0c:6d:e5:20:a2:1c:9d:e0:
a7:93:e2:67:ec:ae:90:b0:5a:64:93:2d:46:ca:7b:5c:30:6e:
74:f8:51:24:d7:74:4b:74:ff:30:a2:6f:bd:8d:60:85:2e:4b:
8a:1d:90:3c:a3:34:c5:d8:f1:c2:11:b6:18:ea:5b:35:4d:07:
02:c0:82:27:32:05:bf:f1:34:95:48:f7:17:7f:6f:0f:af:6d:
42:e3:03:f2:ce:af:07:4a:27:a4:48:8a:d6:53:e1:0e:2c:0b:
29:c9:08:79:ed:6d:ad:17:e8:ba:50:9b:31:b8:17:5e:58:6a:
ad:bd:c6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 13:00:48 2025 by rpki-client