This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/06feaff0-5e9d-35f1-933b-85c5422bbda2.roa
File: 06feaff0-5e9d-35f1-933b-85c5422bbda2.roa (raw, json)
Hash identifier: yZpR69A1uA1piEHHJdSPmoUcJuJHpNCFq6nPVAqKd5Q=
Subject key identifier: D1:5F:C5:2E:60:44:63:27:82:92:66:AB:B5:22:E5:5A:0F:88:95:BE
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F4328584C4CA125667CD8613ADF2FD380
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/06feaff0-5e9d-35f1-933b-85c5422bbda2.roa
Signing time: Thu 25 Dec 2025 02:00:31 +0000
ROA not before: Thu 25 Dec 2025 02:00:31 +0000
ROA not after: Wed 25 Mar 2026 01:00:31 +0000
asID: 11090
IP address blocks: 216.137.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4c:a1:25:66:7c:d8:61:3a:df:2f:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Dec 25 02:00:31 2025 GMT
Not After : Mar 25 01:00:31 2026 GMT
Subject: CN=b418d650-7d11-4ef5-a6fb-fa499632640b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e8:40:11:41:6d:fb:b9:48:7b:56:5a:ae:6b:
72:0e:d9:75:1f:04:ac:03:8c:38:f7:95:51:d6:63:
bb:63:6d:55:ad:0d:91:c4:6c:34:73:98:50:b6:48:
06:93:31:13:0e:30:0f:bb:b8:4a:aa:86:80:73:df:
e9:f8:ff:89:f9:4c:84:72:e9:10:c2:ae:cc:66:39:
63:c7:45:18:f4:81:49:a8:4f:b2:cc:0a:a7:1e:09:
1f:c2:45:f8:a2:d7:e0:b2:7c:81:12:ec:15:10:2c:
15:1a:78:c9:d3:a3:1c:28:30:69:27:fb:0f:14:81:
0b:3c:78:b0:00:e8:22:8d:a8:ce:38:a7:48:f9:06:
69:52:a7:fc:18:b7:ad:98:1f:4c:0d:30:fc:4a:44:
73:8e:30:ce:c1:87:25:cd:cf:31:d5:6a:a4:26:a7:
e3:e5:e2:30:fc:34:f5:f9:30:fa:6c:94:9c:61:71:
a3:9c:22:26:08:0c:3c:77:ef:fb:23:fa:b6:9f:b0:
07:6b:0f:a9:57:8e:4d:31:32:b9:28:75:12:f8:20:
a3:9e:91:f9:df:01:68:7d:30:8d:48:7e:a8:d6:a0:
de:c7:e5:57:45:60:bb:02:b1:5f:f3:a3:21:19:ff:
8c:fd:82:dd:d0:82:fc:02:cb:29:9f:c1:7c:52:79:
40:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5F:C5:2E:60:44:63:27:82:92:66:AB:B5:22:E5:5A:0F:88:95:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/06feaff0-5e9d-35f1-933b-85c5422bbda2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.137.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:6d:62:15:d6:4e:89:a3:97:cb:9e:17:31:d3:25:1f:ca:44:
bf:3e:06:b3:f8:c4:a6:87:81:19:26:e4:ce:e4:3b:d0:6b:82:
1b:cf:54:75:44:70:f2:d6:d9:10:a1:fa:32:3c:c9:db:b1:f8:
f7:ca:33:e4:02:96:98:b9:02:42:80:41:ff:95:11:ab:1d:9a:
c0:f7:7c:57:98:61:5c:02:9e:65:8b:3e:bc:9b:7a:8f:b0:b1:
b3:e3:f7:77:61:16:05:e0:71:75:c4:c6:0f:24:47:e2:e6:2d:
33:5d:b0:f7:cd:af:b2:b7:f2:d1:a9:fb:8a:38:ff:86:73:cd:
20:49:0f:36:7d:5a:79:a9:ca:1e:2a:fa:14:51:58:f7:21:b2:
c1:4f:30:b0:aa:0d:84:b4:f3:ea:77:2c:c1:29:de:26:89:24:
97:7a:a4:3a:e0:08:0f:f4:8f:51:d3:64:0c:d5:8d:95:f0:03:
6d:18:e6:ca:8e:d3:ba:88:ac:a8:20:1a:76:d5:dc:51:a1:60:
fd:ad:7d:89:b4:a2:4a:9b:43:8b:eb:42:2e:24:e2:01:da:0e:
2e:b9:bf:42:7f:3f:11:80:2a:63:25:db:a9:df:93:19:d1:ed:
a7:f5:7c:50:d3:43:68:b7:ba:58:58:f2:d4:67:db:c9:fa:79:
b0:88:83:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 18:30:38 2026 by rpki-client