This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4bb37a6c-860d-3b0e-84c6-51847d2cc0e0.roa
File: 4bb37a6c-860d-3b0e-84c6-51847d2cc0e0.roa (raw, json)
Hash identifier: wmgr+tqH5OwcHC3GV4J8Ghyu43epLBPvp/Z0ho0mg+A=
Subject key identifier: 0E:84:34:81:A5:F7:17:AD:1E:6F:5B:B1:4D:C5:42:BE:0F:9B:24:8C
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584BCF00605BE4C265FD73965D00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4bb37a6c-860d-3b0e-84c6-51847d2cc0e0.roa
Signing time: Mon 10 Nov 2025 02:00:31 +0000
ROA not before: Mon 10 Nov 2025 02:00:31 +0000
ROA not after: Sun 08 Feb 2026 02:00:31 +0000
asID: 9009
IP address blocks: 172.111.211.0/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Dec 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:cf:00:60:5b:e4:c2:65:fd:73:96:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Nov 10 02:00:31 2025 GMT
Not After : Feb 8 02:00:31 2026 GMT
Subject: CN=69a38cc9-1d57-440d-88f3-d78c08d28afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f0:ec:99:ce:43:27:c3:69:3d:06:e0:db:45:
8c:0a:49:cb:80:f5:1f:ea:e6:36:00:84:cc:8f:9b:
9e:19:df:48:9f:ba:56:02:d9:d5:3c:f9:58:6a:ab:
af:26:b0:f4:95:22:9a:fa:8d:d0:20:c8:33:ee:d8:
db:07:c9:6b:eb:04:98:47:77:3f:d5:6f:08:93:25:
b8:7f:87:2d:cb:0b:79:d5:3e:f3:eb:b5:2c:fc:2f:
84:47:33:7b:a9:62:18:31:98:e5:b1:b0:ef:37:9b:
38:0b:46:7c:f5:7f:80:a4:a7:23:bb:7a:06:85:39:
59:9c:5c:6d:d8:df:4a:6e:fb:23:ce:7d:62:f5:ba:
b1:4e:a4:7a:4f:95:e5:9b:cb:5b:24:a7:cf:21:0f:
4f:01:e5:00:fd:95:72:f8:8a:db:54:61:8a:54:98:
28:6f:52:5b:24:00:62:93:0d:90:c9:ac:7d:0d:bc:
5e:d9:6c:e0:18:ba:cc:c7:9d:46:af:6b:4a:d5:22:
1a:07:4d:d4:3b:d2:b6:8c:00:90:e2:e6:60:a6:76:
fd:1e:46:9e:18:a6:5c:da:f7:0d:cb:d2:b3:0b:24:
ab:6b:74:9d:49:cb:8a:83:de:9f:c3:ee:48:25:16:
38:95:19:49:ba:fc:ed:9b:7f:09:b7:e1:8f:7f:29:
64:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:84:34:81:A5:F7:17:AD:1E:6F:5B:B1:4D:C5:42:BE:0F:9B:24:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4bb37a6c-860d-3b0e-84c6-51847d2cc0e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.211.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:38:a3:fa:27:7d:55:e1:59:d2:15:f2:7c:71:2b:bb:dd:8e:
a1:8a:9f:56:ba:94:9c:30:17:38:76:e1:6c:a8:80:89:65:c6:
c1:63:0d:1c:bd:c1:06:90:06:da:e7:cb:06:31:0d:24:e1:5b:
87:a0:3f:c9:20:d4:39:d8:bf:b5:97:63:1a:ab:75:bf:a8:9c:
29:92:88:3e:c5:13:7a:89:ad:b7:70:27:1d:46:55:0f:55:ae:
77:fa:8a:8c:f6:4f:3c:cb:fb:26:4d:a9:9a:72:e5:ab:bc:cb:
b8:b1:34:7e:05:88:e7:31:5f:93:ca:4d:22:4e:03:df:75:48:
33:ff:b4:91:99:54:e4:22:41:46:bb:34:81:04:41:77:d7:e9:
44:88:49:5f:57:77:93:17:eb:19:b9:ff:df:ac:2e:99:6a:ea:
13:36:04:0c:49:a6:1e:c8:9f:0d:ba:51:16:9f:3d:c4:ee:03:
87:ae:ba:ba:74:62:c5:6d:06:3e:c2:45:cc:75:ce:f6:d7:fc:
b5:17:7f:e0:b8:01:33:d9:9a:8c:61:83:2c:8f:ee:e4:6e:ee:
a5:51:60:33:0f:2e:6a:ea:b6:1d:1c:b8:83:8d:30:0b:09:c2:
54:98:7a:25:ee:55:23:d1:b1:fa:44:cb:da:67:f9:4a:df:a3:
b0:fa:b9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:48:38 2025 by rpki-client