This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bf475d03-436a-3341-a882-e4bd4a170795.roa
File: bf475d03-436a-3341-a882-e4bd4a170795.roa (raw, json)
Hash identifier: h1ldR+v270+Vqapb0xBtZNL7mkvmHpsS5HWVVlg1wjo=
Subject key identifier: 64:B0:DB:1D:90:7A:86:CE:0F:EC:35:CF:EE:3A:13:C6:DA:F9:18:EE
Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial: 010D0C9F4328584C3916645FC851FC0941FFBC80
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bf475d03-436a-3341-a882-e4bd4a170795.roa
Signing time: Thu 18 Dec 2025 02:00:31 +0000
ROA not before: Thu 18 Dec 2025 02:00:31 +0000
ROA not after: Wed 18 Mar 2026 01:00:31 +0000
asID: 53437
IP address blocks: 206.167.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:39:16:64:5f:c8:51:fc:09:41:ff:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
Validity
Not Before: Dec 18 02:00:31 2025 GMT
Not After : Mar 18 01:00:31 2026 GMT
Subject: CN=7bf3f6a9-6b1d-4941-9957-30180ea489c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:98:9b:c4:9f:8e:63:59:d0:fa:5c:ce:83:35:
c0:e8:19:dd:48:c4:7b:c2:39:ea:ec:3e:9d:58:e4:
cc:45:b0:73:17:4e:1b:cc:fa:d7:b7:af:2e:e9:93:
fa:97:87:03:9d:9b:b7:e8:92:f3:2a:cf:db:be:1a:
58:ec:ff:d2:37:1a:e6:7c:97:ae:fb:0a:7d:0a:b9:
09:2b:2f:ad:ca:71:77:8f:b6:f9:48:58:69:8f:9f:
0c:db:21:06:67:a4:97:00:78:e2:b5:f9:1c:83:3a:
f0:da:2d:27:2d:7b:34:81:23:61:3f:c6:e5:2d:fe:
10:ee:8b:2a:b0:65:bc:f0:db:4e:8e:5e:7d:d4:a9:
ed:cd:12:d5:bf:40:13:16:4e:78:84:f8:b2:e9:bd:
e9:2d:d0:ec:c6:89:f9:5f:b1:13:87:26:4b:7e:81:
db:b0:43:77:47:cf:17:90:53:4a:8c:02:b7:75:37:
77:c2:ec:1d:5e:f2:22:c1:43:b3:a2:bf:ba:2e:dc:
a1:46:e1:f6:df:38:9c:a9:ec:91:39:27:37:1e:1b:
c1:31:74:af:04:7e:f0:3b:ee:00:b2:b8:42:57:06:
84:57:d4:a5:5c:d7:94:c5:07:df:6e:75:2d:41:5d:
0e:2c:2c:69:9d:bf:7b:fd:08:24:61:8a:bb:4c:13:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B0:DB:1D:90:7A:86:CE:0F:EC:35:CF:EE:3A:13:C6:DA:F9:18:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bf475d03-436a-3341-a882-e4bd4a170795.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
X509v3 Authority Key Identifier:
keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
sbgp-ipAddrBlock: critical
IPv4:
206.167.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:ab:b1:c4:d1:c8:d3:b2:24:5d:b9:81:c1:a6:96:e8:82:52:
e6:be:d2:63:ea:a7:c4:2f:a6:6e:0e:83:33:db:45:ca:81:29:
70:a8:de:dc:ae:da:45:d3:a6:5d:71:35:1e:ab:db:ed:e9:08:
f2:35:f3:b3:c2:48:7f:79:b3:1e:2d:ec:3c:08:28:d5:ec:af:
4d:1c:8d:f7:b4:7b:7e:4a:3a:24:12:80:0b:47:d6:d4:67:9e:
41:89:fc:7e:f5:07:7b:ec:f8:a8:c7:56:55:68:e9:70:22:0d:
80:85:fd:f0:67:18:de:33:9d:d3:be:da:e9:43:93:bf:cb:d0:
d7:94:35:b7:5d:8c:7b:b0:d6:6f:a8:27:a0:f7:c2:7d:81:52:
08:00:88:4d:40:8e:4c:36:76:a2:fe:b6:e3:ba:ef:aa:db:44:
c0:ec:8c:ed:dc:bf:98:50:3d:0f:ab:a5:c1:02:76:4d:8e:b6:
2a:17:6f:f4:92:19:9f:90:24:2f:24:ac:f3:66:4d:2c:65:ad:
4c:90:24:e7:22:e0:cf:84:93:5b:84:18:a9:ce:d9:2f:a0:26:
ec:ff:62:2d:0a:5c:07:b9:95:b8:16:94:15:ad:d4:04:f4:90:
e1:2c:fc:0a:d2:7d:a6:6b:44:71:91:e8:67:24:cb:15:37:e6:
89:b1:2c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 21:07:56 2025 by rpki-client