This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa
File: c1af7f83-54d1-3637-b23a-1fac1823fd70.roa (raw, json)
Hash identifier: VaMnzEybKnl+KJ5ij2fVStUIVP6nFdeBdc6OobHKntY=
Subject key identifier: 41:E0:43:F1:DF:09:F8:7A:DA:23:78:B6:02:1E:5E:A4:41:C8:3D:33
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F4328584C28565A251F67A6797860DF80
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa
Signing time: Fri 12 Dec 2025 02:00:30 +0000
ROA not before: Fri 12 Dec 2025 02:00:30 +0000
ROA not after: Thu 12 Mar 2026 01:00:30 +0000
asID: 21949
IP address blocks: 65.97.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:28:56:5a:25:1f:67:a6:79:78:60:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Dec 12 02:00:30 2025 GMT
Not After : Mar 12 01:00:30 2026 GMT
Subject: CN=7f746327-7c97-4429-b008-bef6d19da6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d4:10:02:22:3b:47:01:1d:aa:90:c9:f2:2a:
df:0d:4b:5e:be:ca:4d:4c:99:69:df:df:cb:67:1c:
ad:f7:43:58:b4:f1:ac:73:9e:be:ee:51:3f:b2:32:
bc:72:ec:05:43:83:e7:c6:a0:c3:96:50:00:02:0e:
38:66:d1:d2:d7:d6:6c:ee:94:51:6f:86:d2:0c:67:
39:38:54:e8:1a:82:c0:1e:9c:fb:b9:bf:88:8f:a1:
10:21:52:91:d0:da:f1:fe:ea:25:ec:f0:bf:be:0c:
fd:59:34:16:95:4b:8b:d1:c3:78:43:8f:62:e1:ee:
38:55:86:71:91:8e:e5:de:d8:d7:17:ed:e5:ec:bd:
cf:2c:61:d4:f6:18:0b:ba:31:06:39:b3:7b:9a:a8:
75:bd:a1:15:b0:ee:d1:8c:ac:8b:bc:74:d9:b4:de:
7e:82:87:9c:5a:65:a4:e5:99:55:3f:c8:33:ca:f0:
7a:0e:ea:00:64:c2:02:30:6a:2a:33:ee:34:ee:d8:
1b:c7:77:9f:c5:a0:e7:a0:37:89:68:81:c9:8b:3c:
a6:67:12:4b:5b:b6:b5:3a:6d:3b:16:62:49:dd:8a:
0f:7b:f7:6b:f5:49:64:38:23:17:10:f2:f3:26:d6:
e8:11:d0:22:66:c3:06:c3:b2:95:d9:2d:de:1c:25:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E0:43:F1:DF:09:F8:7A:DA:23:78:B6:02:1E:5E:A4:41:C8:3D:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
65.97.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:fa:dd:ff:f2:f5:38:04:0d:7b:63:21:cf:28:04:71:e9:79:
70:fc:96:08:1c:4a:ed:8c:cc:e7:e4:35:13:44:90:f8:6e:03:
e6:2b:79:16:64:cd:a2:5d:60:97:ca:52:c9:56:cb:84:e1:5c:
7c:65:e7:70:7c:18:43:44:2c:ef:df:70:40:ae:c0:1e:46:3a:
e5:cb:ab:b7:ba:8f:59:ee:8b:21:9c:cc:c1:09:a3:89:c8:c8:
df:68:b7:b1:7c:b8:11:f5:ad:ee:8d:d0:3c:0f:bf:1c:d1:78:
9b:99:e9:86:fb:65:24:c0:36:f2:c5:42:04:0c:0b:cf:20:46:
80:a2:32:04:16:17:ab:b7:cc:d4:69:be:1b:20:ca:ac:ac:9f:
80:b2:f8:09:4e:4c:0b:08:94:4e:e8:d9:ed:a9:aa:ee:8c:e5:
07:e8:5b:44:34:6c:7a:b1:9b:46:e5:b0:02:c7:b5:46:63:f2:
1f:dc:1e:3b:63:a5:a1:c8:25:6b:67:ad:96:50:1b:09:25:a7:
8e:89:ea:82:d2:d0:20:b3:ed:44:33:83:b5:6a:44:0c:37:00:
7b:c2:5f:63:dc:26:86:2e:10:7a:00:af:ce:c1:8a:fb:0a:2c:
2c:0c:c3:b0:9a:b0:6f:5a:89:8d:6b:77:0f:86:5e:2f:fb:12:
7c:41:f1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 08:52:06 2025 by rpki-client