This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5c2c5cc4-b143-3b98-9aad-43a2772689e8.roa
File: 5c2c5cc4-b143-3b98-9aad-43a2772689e8.roa (raw, json)
Hash identifier: z1kDgC0Rh5/OBsrHFN62WeZZ+KUVCixx+yjynPJrkpw=
Subject key identifier: 59:DC:6F:D4:0E:98:10:F4:10:B0:BE:5E:8A:CC:81:4E:A2:1B:1A:74
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584C0B064046D348CE80F886F640
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5c2c5cc4-b143-3b98-9aad-43a2772689e8.roa
Signing time: Mon 01 Dec 2025 14:00:39 +0000
ROA not before: Mon 01 Dec 2025 14:00:39 +0000
ROA not after: Sun 01 Mar 2026 14:00:39 +0000
asID: 20001
IP address blocks: 208.89.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:0b:06:40:46:d3:48:ce:80:f8:86:f6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Dec 1 14:00:39 2025 GMT
Not After : Mar 1 14:00:39 2026 GMT
Subject: CN=21d91643-835a-4bef-8ae5-0c2c6c67a876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:a3:b8:fc:12:ec:4e:51:1d:7e:37:05:7c:
7d:e8:d5:e5:ed:d3:d6:e1:e5:85:d6:c3:05:d8:fd:
de:3e:66:8f:f1:ef:b7:9f:f7:0c:83:12:84:08:19:
73:ab:38:20:03:17:56:de:e5:31:c2:9b:82:dd:7b:
7f:3e:7b:15:11:e2:cc:b4:61:b1:4c:a7:5c:43:96:
09:f6:25:2f:80:e7:3c:24:fe:4a:d2:cc:9f:a1:03:
de:da:81:ff:68:cb:6d:6a:59:e3:65:10:ec:5c:89:
21:91:ab:f5:a1:46:f8:c3:a0:b7:db:37:76:ce:f5:
be:30:54:c6:4f:31:8e:50:ef:ab:86:52:ac:18:9a:
3a:85:3d:3c:d1:cf:c7:a6:59:47:a8:82:ba:d2:c9:
d6:91:44:42:18:8c:ef:8b:98:ae:11:b6:5b:b1:f2:
6b:aa:50:92:bd:a7:c0:e3:59:21:8e:7e:1a:ee:d4:
fa:91:f6:0b:a8:33:11:65:52:83:d7:8d:55:cd:de:
28:05:87:55:43:a4:92:bb:d6:f7:49:c6:86:7a:3a:
b0:f6:b5:95:ca:c4:3b:2b:55:fc:4c:cc:51:13:e5:
e9:92:33:06:1c:1e:f2:81:a4:8d:72:2e:35:f1:ca:
58:d9:31:c8:a8:cc:0c:04:3f:d3:0e:c2:e9:53:e5:
9c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DC:6F:D4:0E:98:10:F4:10:B0:BE:5E:8A:CC:81:4E:A2:1B:1A:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5c2c5cc4-b143-3b98-9aad-43a2772689e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
208.89.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:14:8b:76:5c:4f:08:04:2c:84:32:0e:94:57:72:3e:1f:d4:
6d:55:f5:51:b5:e8:df:a5:d1:a0:17:e3:6c:4e:0e:28:10:3b:
c1:3d:8b:cf:3b:47:2f:35:a6:d9:6e:dc:80:ea:22:36:b3:02:
bd:9c:31:03:70:5d:c0:9d:4b:26:11:3e:0c:c5:a3:76:56:ce:
e1:ef:1a:92:25:7f:fd:8b:45:7a:e1:36:3f:27:5f:7f:13:ff:
6d:8a:28:3f:4c:9a:91:e2:3d:7c:86:85:0d:9f:5d:d1:fa:15:
cd:21:d7:8a:f0:d3:6b:41:68:c2:c4:4e:36:ce:67:27:98:fa:
3e:94:ac:29:e9:95:fe:cf:3b:d4:68:c4:55:fb:e4:97:0d:1e:
8b:f0:71:51:9a:6a:8e:04:2c:26:0d:6e:da:8d:a8:36:57:2b:
29:f6:84:c9:75:c3:c0:68:b6:51:c6:58:46:0c:02:c0:a3:39:
7a:a3:33:04:23:38:5d:15:37:24:66:b6:16:80:86:6f:0b:f9:
35:bc:fa:ca:36:3c:22:3f:7d:0e:92:98:e5:c4:61:c7:5f:fe:
65:be:ea:3e:9c:0b:1f:a5:61:5d:18:a3:ed:98:6b:bc:a0:60:
08:31:2f:2b:ff:27:6a:e2:4c:ac:96:8c:82:da:bd:d9:4b:6b:
7d:31:86:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 18:58:46 2025 by rpki-client