This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ffc3504f-fa71-3e08-a7b4-8e5ec8391ce7.roa
File: ffc3504f-fa71-3e08-a7b4-8e5ec8391ce7.roa (raw, json)
Hash identifier: d32RfgEuMj9pVmH2wJlTO0zWhqtYqr4uTc41OJYGO6w=
Subject key identifier: 9F:36:2D:BB:1F:11:70:74:1E:7C:F6:2F:31:4D:AB:63:57:64:68:7E
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F4328584BFFADF969F3C8482EE9363E40
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ffc3504f-fa71-3e08-a7b4-8e5ec8391ce7.roa
Signing time: Thu 27 Nov 2025 12:29:22 +0000
ROA not before: Thu 27 Nov 2025 12:29:22 +0000
ROA not after: Wed 25 Feb 2026 12:29:22 +0000
asID: 4637
IP address blocks: 173.239.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ff:ad:f9:69:f3:c8:48:2e:e9:36:3e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Nov 27 12:29:22 2025 GMT
Not After : Feb 25 12:29:22 2026 GMT
Subject: CN=a05db2b7-d126-4745-a97e-88bd3789f3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:60:b8:ee:a4:64:51:ec:d2:f9:50:cc:37:91:
38:a2:e3:08:5b:76:12:d3:59:ee:c7:01:ec:2b:78:
29:20:7d:f2:92:f9:53:22:7f:55:a0:13:99:0a:23:
e8:63:e0:df:a1:38:5d:70:37:e2:46:6c:61:fb:c4:
e4:b4:3f:26:ba:67:a6:19:d1:ab:94:27:97:b1:f5:
7e:2e:c6:d6:35:46:cf:85:a6:7f:2c:ba:c3:f2:7b:
f5:3c:ba:22:a5:30:42:e5:4e:10:3c:0b:0f:f9:08:
d5:22:5a:74:1d:97:9b:8e:97:c1:d7:3a:ee:3a:1c:
9d:c5:7d:00:02:25:cc:56:d1:2d:1c:4e:f2:d1:40:
e7:4b:80:06:a3:e3:85:c4:e2:3a:02:14:66:70:7e:
34:9d:15:5c:c8:ad:66:03:9a:f5:cc:a3:e0:e4:7e:
7d:4e:b2:45:f7:3e:b4:c8:2e:ce:0f:d6:47:af:8c:
58:55:6b:75:54:ee:e1:a7:2e:78:c7:31:f4:72:52:
e2:ab:d1:56:31:c2:2b:93:62:5e:87:07:65:37:7a:
f4:68:f2:a8:bc:7e:0f:35:ad:e3:ea:5a:82:de:2c:
ad:2d:f0:07:0e:ac:86:ce:53:99:06:38:88:11:ce:
20:7d:cd:d7:ae:51:33:b8:b9:43:40:49:18:5b:15:
4a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:36:2D:BB:1F:11:70:74:1E:7C:F6:2F:31:4D:AB:63:57:64:68:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ffc3504f-fa71-3e08-a7b4-8e5ec8391ce7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
173.239.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:9c:57:d3:40:45:6a:c9:97:09:65:0d:ff:fb:c1:71:6d:7f:
18:d5:72:e1:da:ea:f4:75:98:f6:db:8e:fb:25:bb:d1:3c:7d:
92:07:22:41:2a:7c:1c:2a:33:8e:23:66:69:2f:ee:17:87:e3:
64:43:d0:d2:44:5c:36:6c:60:b9:9f:93:ee:31:51:de:c3:4a:
03:f4:3a:88:1d:65:1d:a2:85:b5:cf:e3:11:a2:48:87:4a:3e:
99:c2:69:a7:35:d4:a5:39:2c:ad:ed:09:ff:91:13:28:54:5c:
74:c5:d1:f0:ff:7c:ab:8a:13:c3:0e:61:82:05:94:44:52:94:
ec:b0:62:59:35:0d:10:04:e3:07:20:88:04:3c:42:23:d2:12:
c6:9b:70:22:af:1c:c7:f5:98:4c:67:ad:76:94:ef:af:d0:54:
c0:9c:79:9f:23:0b:95:6d:83:d3:96:75:15:f7:95:46:29:b2:
92:1e:a3:04:96:e7:01:91:1d:4e:d6:07:f4:5e:33:60:c1:60:
2d:22:29:7c:bd:ca:22:d3:c5:d2:f5:bb:22:0a:43:9a:d4:88:
bb:c1:c5:38:d5:4c:64:0c:69:c6:e5:2c:bd:a4:68:97:f2:ed:
4d:63:67:3a:9d:cd:49:b5:87:82:0b:e5:36:08:fb:ee:89:6a:
45:a5:91:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/rflp88hILuk2PkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI1MTEyNzEyMjkyMloXDTI2MDIyNTEyMjkyMlowLzEtMCsGA1UEAxMk
YTA1ZGIyYjctZDEyNi00NzQ1LWE5N2UtODhiZDM3ODlmM2UxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWC47qRkUezS+VDMN5E4ouMIW3YS01nuxwHs
K3gpIH3ykvlTIn9VoBOZCiPoY+DfoThdcDfiRmxh+8TktD8mumemGdGrlCeXsfV+
LsbWNUbPhaZ/LLrD8nv1PLoipTBC5U4QPAsP+QjVIlp0HZebjpfB1zruOhydxX0A
AiXMVtEtHE7y0UDnS4AGo+OFxOI6AhRmcH40nRVcyK1mA5r1zKPg5H59TrJF9z60
yC7OD9ZHr4xYVWt1VO7hpy54xzH0clLiq9FWMcIrk2JehwdlN3r0aPKovH4PNa3j
6lqC3iytLfAHDqyGzlOZBjiIEc4gfc3XrlEzuLlDQEkYWxVKNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ82LbsfEXB0Hnz2LzFNq2NXZGh+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvZmZjMzUwNGYtZmE3MS0z
ZTA4LWE3YjQtOGU1ZWM4MzkxY2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/pMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMGcV9NARWrJlwllDf/7wXFtfxjVcuHa6vR1mPbbjvslu9E8fZIHIkEq
fBwqM44jZmkv7heH42RD0NJEXDZsYLmfk+4xUd7DSgP0OogdZR2ihbXP4xGiSIdK
PpnCaac11KU5LK3tCf+REyhUXHTF0fD/fKuKE8MOYYIFlERSlOywYlk1DRAE4wcg
iAQ8QiPSEsabcCKvHMf1mExnrXaU76/QVMCceZ8jC5Vtg9OWdRX3lUYpspIeowSW
5wGRHU7WB/ReM2DBYC0iKXy9yiLTxdL1uyIKQ5rUiLvBxTjVTGQMacblLL2kaJfy
7U1jZzqdzUm1h4IL5TYI++6JakWlkZo=
-----END CERTIFICATE-----
Generated at Fri Dec 5 20:06:42 2025 by rpki-client