This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89fa7171-bce0-3688-ab6e-27f3cac68965.roa
File: 89fa7171-bce0-3688-ab6e-27f3cac68965.roa (raw, json)
Hash identifier: dzchx5/tybNwmETDPEXYCTUE0/CnqJx/L0RAUc1ykTI=
Subject key identifier: 75:1B:78:58:FD:99:AD:E2:9F:D6:FE:7C:22:5E:EA:03:E6:39:6E:10
Certificate issuer: /CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9
Certificate serial: 010D0C9F4328584BEC5083258593319BE6888F00
Authority key identifier: F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89fa7171-bce0-3688-ab6e-27f3cac68965.roa
Signing time: Thu 20 Nov 2025 14:00:39 +0000
ROA not before: Thu 20 Nov 2025 14:00:39 +0000
ROA not after: Wed 18 Feb 2026 14:00:39 +0000
asID: 12243
IP address blocks: 2606:1040::/32 maxlen: 32
2620:11f:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 06 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ec:50:83:25:85:93:31:9b:e6:88:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9
Validity
Not Before: Nov 20 14:00:39 2025 GMT
Not After : Feb 18 14:00:39 2026 GMT
Subject: CN=00e7d823-3e36-453e-bf6b-dd77091e3dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7f:1f:6a:a6:6b:53:28:3d:48:c7:18:d2:14:
88:8f:f0:68:23:d0:74:09:8f:c3:11:9c:9a:d1:53:
58:35:1d:c2:ad:85:a1:12:95:7b:1e:8a:59:a9:26:
9b:a5:67:9e:4e:57:04:06:d0:ab:dd:9c:0a:c4:5b:
06:3c:af:02:08:19:77:a1:38:d2:db:b2:3d:f9:85:
eb:30:27:7a:f2:33:89:10:fd:b3:02:00:5a:a2:f7:
20:d4:72:08:ab:33:18:e4:7b:22:93:48:3a:5f:82:
c3:1b:93:17:b6:a0:e6:5a:3d:40:00:88:5a:2e:db:
d9:03:30:8d:9d:cd:60:42:76:ca:7b:ad:f8:92:0c:
ef:47:9c:ca:38:72:c9:47:30:16:08:ad:ac:c5:bd:
38:7f:35:bd:c9:d6:8b:cc:2d:6d:d0:a5:5c:1d:b9:
84:1b:24:4d:16:18:b4:fb:b1:d1:92:f1:c7:df:4a:
46:9b:12:6c:e8:41:c6:a5:69:f1:eb:38:f8:fe:f5:
b8:45:b2:62:8b:1e:4c:a1:82:9a:11:6b:59:cb:3e:
d5:2e:13:d9:9f:e6:36:69:f5:f9:59:9f:80:d4:62:
20:5c:fd:37:74:74:a2:77:7d:e1:6b:91:5a:61:15:
6f:5c:42:f1:fd:4e:ba:fb:45:6d:e7:4e:65:b4:d7:
de:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1B:78:58:FD:99:AD:E2:9F:D6:FE:7C:22:5E:EA:03:E6:39:6E:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89fa7171-bce0-3688-ab6e-27f3cac68965.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl
X509v3 Authority Key Identifier:
keyid:F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:1040::/32
2620:11f:e000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:0d:4c:39:89:4b:ec:65:14:51:5a:15:e5:47:d4:18:77:9a:
e5:93:fc:d3:bd:fd:49:15:b1:58:f7:60:e6:77:61:ad:df:6b:
71:69:90:4f:08:7c:57:77:97:a6:3e:a9:e6:6b:bd:bd:a4:24:
39:94:26:9d:e2:52:fb:a7:60:42:9a:78:7f:0d:db:d5:d5:e8:
59:da:3d:a6:22:57:22:f7:29:09:97:84:45:22:ee:7e:d0:09:
11:06:97:42:2a:47:23:12:70:e3:cc:97:ab:37:f2:ca:3e:33:
2a:2c:a9:ba:e8:68:c0:1c:24:93:ae:e9:b6:dd:fb:bb:39:14:
5c:37:34:89:92:e5:1e:af:7e:14:b8:dd:9a:d5:9b:96:96:cb:
cf:8d:52:14:c0:9c:98:cb:a1:2f:a2:f8:1a:e9:c6:cf:59:0d:
c5:ca:5e:58:1b:04:a3:c2:33:79:65:d2:0f:1a:1f:f2:fc:c8:
0e:e4:c3:23:46:df:94:36:44:f7:81:76:54:e0:14:16:4d:79:
7a:60:6f:b9:ce:75:99:65:27:4b:cb:8e:d8:96:31:38:c0:43:
af:b4:8a:c1:7a:dd:a0:ad:34:1e:d1:97:63:68:53:c3:23:86:
2b:b6:f0:0f:25:0d:eb:93:12:23:40:22:94:32:ee:20:57:4c:
91:55:a9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:17:06 2025 by rpki-client