This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/2bceb09a-8c68-38f7-9325-555d892ae3b0.roa
File: 2bceb09a-8c68-38f7-9325-555d892ae3b0.roa (raw, json)
Hash identifier: PminDRldNkl9UsGFtR6BjeCPyGClYq8UkObk3j7f8mI=
Subject key identifier: E9:77:19:E5:4D:0C:0E:8A:E9:1F:5C:19:A8:34:7B:D0:CE:9E:8F:27
Certificate issuer: /CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Certificate serial: 010D0C9F4328584C1FF6238238293F2667E3C440
Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/2bceb09a-8c68-38f7-9325-555d892ae3b0.roa
Signing time: Tue 09 Dec 2025 02:00:31 +0000
ROA not before: Tue 09 Dec 2025 02:00:31 +0000
ROA not after: Mon 09 Mar 2026 01:00:31 +0000
asID: 394453
IP address blocks: 199.253.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:1f:f6:23:82:38:29:3f:26:67:e3:c4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Validity
Not Before: Dec 9 02:00:31 2025 GMT
Not After : Mar 9 01:00:31 2026 GMT
Subject: CN=10fe5157-be22-4835-8f46-4f6867330c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:1e:9a:e6:94:f8:5b:c7:6c:2e:08:4d:9b:
71:63:94:33:63:7e:77:a1:b9:be:d5:9a:39:44:61:
c3:0b:fc:51:ca:f7:14:40:38:84:2b:a5:dd:2c:d5:
a1:87:bc:a2:0c:3d:36:b2:ef:a1:10:59:1d:b7:e4:
09:d3:16:71:80:1f:52:63:71:b2:49:97:ab:d4:90:
76:87:6d:e3:31:11:6e:c5:ac:c3:a6:ef:8d:13:e1:
a0:1c:46:5c:3c:a6:35:56:8b:32:55:09:90:89:17:
57:29:4d:87:bd:2a:a0:73:96:f9:b1:0f:05:44:e6:
3d:36:40:f5:02:ee:15:03:9f:90:15:41:4d:15:48:
16:4f:48:d2:a7:d3:67:bd:6e:99:0b:f0:2a:f3:4b:
df:59:b5:7c:69:26:80:72:32:7e:a6:c1:d5:1c:8e:
de:bc:09:48:5b:82:1b:98:bb:15:c6:ab:ea:1a:6e:
89:c6:a9:4b:ed:d0:38:59:ae:3b:27:7b:db:e5:41:
e1:ec:af:59:d1:d7:52:50:26:8f:fd:75:00:b8:dd:
fa:f2:74:57:69:1d:ca:5c:c2:7b:89:79:de:26:f7:
7c:4a:7c:a6:2b:6d:f7:c7:ba:15:0c:8f:e1:f6:ee:
c9:a8:24:11:67:75:0c:f9:fa:2f:5b:ef:b7:a8:94:
61:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:77:19:E5:4D:0C:0E:8A:E9:1F:5C:19:A8:34:7B:D0:CE:9E:8F:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/2bceb09a-8c68-38f7-9325-555d892ae3b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl
X509v3 Authority Key Identifier:
keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
sbgp-ipAddrBlock: critical
IPv4:
199.253.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:83:07:b2:0b:c7:88:b2:6d:a9:2a:d3:6d:3d:44:45:15:77:
b0:4c:3b:09:55:6a:0a:dd:4d:8a:3d:90:42:ad:28:04:43:60:
85:63:f9:b6:37:ed:6b:db:b1:1a:90:2a:ee:47:21:dd:88:60:
08:7a:50:a2:45:b3:f2:b8:71:a1:5f:15:c8:ba:77:a1:f4:1a:
76:03:47:d7:af:50:23:a5:88:19:7d:c5:75:4e:c0:d6:07:e4:
51:2f:f7:02:d4:82:85:8a:cd:f9:25:7d:49:e0:ea:cc:91:fc:
d0:58:f0:b3:c1:93:54:b4:41:7f:a3:00:51:5b:04:7f:a8:1f:
49:8a:77:cd:fa:09:23:20:4d:9a:5c:b8:a4:2d:cf:29:b8:99:
5e:dc:cd:7b:db:37:f2:25:75:c2:13:e0:5f:66:62:22:56:42:
16:60:1c:4e:df:74:06:aa:17:e6:53:5f:a6:7f:0f:f2:8c:89:
94:13:39:d6:c1:ed:39:dc:ad:14:af:04:06:47:20:16:7b:c4:
ac:02:cf:f9:05:c0:8f:9d:cc:ad:98:06:ed:57:af:a8:c6:62:
9b:35:55:64:38:ed:61:ce:86:81:a9:f2:6e:22:5c:e4:5f:14:
1a:95:03:22:76:c6:15:90:dc:a2:b3:66:c0:26:c9:39:5c:6b:
9c:b2:58:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 13:27:18 2025 by rpki-client