This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/0dfa09dd-8c83-31be-b25b-bfcfd3f10baf.roa
File: 0dfa09dd-8c83-31be-b25b-bfcfd3f10baf.roa (raw, json)
Hash identifier: QqiuEih09LKjFhRKqGCC/u4/2Ynz0txOjzO2+MIpMz8=
Subject key identifier: 6C:18:BB:10:08:07:70:41:95:EC:1B:94:29:F4:71:A5:3F:AA:3A:C4
Certificate issuer: /CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2
Certificate serial: 010D0C9F4328584C338119EC653D9C8E73687580
Authority key identifier: 68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/0dfa09dd-8c83-31be-b25b-bfcfd3f10baf.roa
Signing time: Tue 16 Dec 2025 02:00:31 +0000
ROA not before: Tue 16 Dec 2025 02:00:31 +0000
ROA not after: Mon 16 Mar 2026 01:00:31 +0000
asID: 16509
IP address blocks: 204.128.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 17 Dec 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:33:81:19:ec:65:3d:9c:8e:73:68:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2
Validity
Not Before: Dec 16 02:00:31 2025 GMT
Not After : Mar 16 01:00:31 2026 GMT
Subject: CN=49931f10-8a46-4b20-844e-ee0808bdf0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0a:d7:35:e4:70:3a:4a:88:a6:88:b2:c7:be:
8a:47:91:5f:94:31:f2:2f:71:51:fb:c2:bd:00:d2:
0e:ef:f2:a0:fc:10:55:8b:14:b3:3d:27:76:b0:3c:
a5:f2:07:1c:5f:6e:65:f0:75:8c:e9:75:0f:7c:c1:
18:26:75:09:6c:2c:bf:ee:d8:0b:11:59:94:00:11:
45:53:c0:a6:e4:8c:f7:47:30:7a:44:26:b7:17:fa:
be:c2:85:83:b0:03:ae:08:d9:35:a4:62:d7:39:00:
11:01:3b:26:70:d4:46:d6:3c:83:73:28:f1:22:b5:
3c:3b:76:5e:ce:d5:d7:3e:e7:ef:3a:0a:fd:2b:6e:
a2:5b:5b:42:f6:ff:0d:7d:ba:61:ac:6b:a0:9c:01:
40:8f:63:f8:3b:9d:bb:86:e3:f6:6f:6d:fe:75:70:
94:d2:2d:b8:b2:8e:58:bb:c8:9b:98:b5:26:25:a1:
ad:f1:17:61:c8:6b:26:5d:e2:09:40:95:a6:89:8b:
5b:17:13:68:e8:78:dc:ad:50:a7:bb:09:15:3f:6b:
a1:7b:a6:10:48:31:91:01:1f:8b:94:3f:6c:95:b2:
98:b1:0d:62:c9:d2:07:30:a1:a7:c8:63:e1:dd:8c:
0c:4d:02:bb:3d:cb:01:6d:81:8f:ed:00:52:c6:dd:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:18:BB:10:08:07:70:41:95:EC:1B:94:29:F4:71:A5:3F:AA:3A:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/0dfa09dd-8c83-31be-b25b-bfcfd3f10baf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.crl
X509v3 Authority Key Identifier:
keyid:68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer
sbgp-ipAddrBlock: critical
IPv4:
204.128.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:96:02:59:49:1e:e1:94:cf:ec:07:3a:ac:f7:3b:8c:56:99:
6a:7f:39:a3:31:35:b2:6d:0f:9c:50:6c:a1:f0:df:0c:59:29:
66:1d:de:e6:a6:8d:0c:bb:8b:dc:17:4a:c6:2f:d5:0b:47:f8:
90:4a:ba:3c:14:29:1b:73:33:2f:f9:d2:76:39:0a:f1:60:1c:
56:58:73:ec:0a:ea:34:7f:e5:77:6d:16:21:9b:50:26:c3:96:
02:cc:3b:69:97:f6:db:22:9f:ff:30:29:38:e0:80:de:01:0c:
a1:3b:5f:d9:6f:09:95:fe:77:e8:a9:96:04:ef:2c:57:2e:d0:
da:0d:fd:4a:9a:e8:35:43:02:0d:23:a5:5d:1f:c1:c4:81:11:
81:d5:02:97:64:e3:b3:e4:80:7b:22:69:92:ca:2a:fa:7d:f3:
5b:1e:1d:71:4c:11:dd:a1:88:be:90:4b:33:5d:97:cc:a9:19:
77:09:57:17:ab:f6:25:83:a3:a5:0d:66:cc:6b:55:dc:94:4f:
a4:0a:9b:7a:d5:ee:14:95:8f:c0:9a:67:91:f2:05:91:61:ec:
87:ce:b0:35:6d:90:bb:78:cb:de:22:0e:0a:bd:73:2e:bb:d8:
9a:e9:9e:01:16:34:5c:32:39:5a:b6:2c:a1:17:b8:f1:4e:b5:
1e:98:19:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 14:20:26 2025 by rpki-client