This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/352fec1d-a1e9-34f2-a19a-27fca9fd7f6e.roa
File: 352fec1d-a1e9-34f2-a19a-27fca9fd7f6e.roa (raw, json)
Hash identifier: S2S0vpt8fUbLn4+S7m+gq43OQoOrI2rG01ukx+KweHQ=
Subject key identifier: 35:77:38:BD:22:77:EB:B5:B1:35:14:42:62:5A:DA:8D:1C:9A:E4:38
Certificate issuer: /CN=f509b96c-10eb-4731-ae65-8d698aade657
Certificate serial: 010D0C9F4328584BEC508A45AECE31985EC97180
Authority key identifier: 88:F1:2C:29:3C:34:F2:31:35:BB:BA:B2:23:D4:80:4C:D5:05:62:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/352fec1d-a1e9-34f2-a19a-27fca9fd7f6e.roa
Signing time: Thu 20 Nov 2025 14:00:39 +0000
ROA not before: Thu 20 Nov 2025 14:00:39 +0000
ROA not after: Wed 18 Feb 2026 14:00:39 +0000
asID: 8075
IP address blocks: 208.66.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 05 Dec 2025 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ec:50:8a:45:ae:ce:31:98:5e:c9:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f509b96c-10eb-4731-ae65-8d698aade657
Validity
Not Before: Nov 20 14:00:39 2025 GMT
Not After : Feb 18 14:00:39 2026 GMT
Subject: CN=64c75ddf-c780-4e52-9486-06bf4083904f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:86:a0:90:e0:2f:11:a7:0d:34:5d:ca:2d:4c:
ec:e0:2d:d1:63:46:ac:02:19:22:80:87:e6:eb:f0:
e3:93:a0:09:6b:12:19:5b:25:f5:5e:3f:f6:ea:82:
ec:c7:dc:69:c1:7b:05:5f:73:be:43:01:bd:ca:f3:
7c:3d:f4:8d:3b:46:d8:b7:38:6a:fb:b7:24:6d:20:
24:6e:58:2f:92:8d:a1:ee:c6:05:7f:c0:c5:ba:0e:
91:26:41:75:dc:5a:1c:1d:29:a0:a7:dc:81:b1:9e:
17:33:ce:ea:29:c8:6c:a7:5e:8b:fd:da:73:54:32:
45:00:71:a6:99:94:67:b5:f4:1c:fd:f0:85:53:84:
9e:04:eb:f8:61:59:48:cb:78:6a:07:3c:12:81:aa:
79:5c:7c:1b:24:b8:b5:3e:47:cf:0e:d6:07:1a:a9:
d8:40:35:9a:c8:34:9a:80:94:d6:cb:a5:06:95:a0:
30:ab:2a:c5:72:6a:35:b8:3d:08:15:7e:97:b6:93:
49:ea:9c:24:02:8e:96:14:ef:00:bc:ba:a0:60:b6:
e0:fd:af:8b:2c:5f:28:74:a9:7a:f3:a4:57:e7:b4:
74:72:d3:d3:a6:3f:a3:be:af:05:1a:b2:cf:67:56:
23:d7:71:cd:c5:39:5b:10:71:56:7c:9d:28:ec:74:
54:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:77:38:BD:22:77:EB:B5:B1:35:14:42:62:5A:DA:8D:1C:9A:E4:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/352fec1d-a1e9-34f2-a19a-27fca9fd7f6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.crl
X509v3 Authority Key Identifier:
keyid:88:F1:2C:29:3C:34:F2:31:35:BB:BA:B2:23:D4:80:4C:D5:05:62:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer
sbgp-ipAddrBlock: critical
IPv4:
208.66.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:14:a4:05:b0:86:c8:1c:f4:06:31:01:68:68:07:16:55:bb:
df:38:4f:9e:4e:6a:c3:06:53:b8:c3:92:07:39:ca:07:ff:39:
a3:61:c1:46:b3:f2:c7:35:7f:a0:d5:3d:42:f2:88:03:af:a7:
aa:7c:3c:ce:0a:ec:68:0d:18:f4:69:ed:6c:9f:71:d8:0e:95:
48:c7:aa:2c:d2:48:6f:6a:55:43:2e:00:b2:15:85:80:ff:7e:
9c:25:79:d9:3f:fa:a2:7f:e0:ec:45:66:bf:59:c2:25:f6:97:
0a:65:2d:69:7f:76:19:99:58:f2:73:7a:2b:81:15:b2:6a:b8:
d7:7d:6b:7b:19:e7:75:bc:d9:f3:d1:fe:ba:a0:dd:82:49:ed:
71:a7:7c:ce:06:c8:14:73:03:06:bc:70:bc:7d:80:85:b2:ae:
6a:98:22:9f:4f:5e:24:bb:a9:58:2e:85:86:23:ff:c2:30:97:
7e:03:90:91:62:b0:fa:de:18:35:0f:f6:1c:22:01:75:1e:e2:
b3:d0:23:de:a2:f8:80:f6:64:c5:bf:a9:94:fa:34:e0:0a:be:
5b:c5:fd:54:71:7d:aa:85:27:31:83:3c:bd:83:39:a5:22:d5:
87:ba:fb:a6:da:e8:da:ad:cc:64:21:ac:17:79:67:4b:e8:f6:
90:6d:2d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 10:29:52 2025 by rpki-client