This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0dc3e9a6-0180-30c7-bedd-e615acb49639.roa
File: 0dc3e9a6-0180-30c7-bedd-e615acb49639.roa (raw, json)
Hash identifier: UkUgi++hQaokGYAGwDcMy/Zw2KK4vpyLZm+hYYQ0Yl8=
Subject key identifier: DD:A3:8C:44:34:2B:9B:58:ED:A2:1D:7C:4D:AC:5A:85:77:B6:6B:48
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584BC82B4AEA80D87213E250B380
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0dc3e9a6-0180-30c7-bedd-e615acb49639.roa
Signing time: Fri 07 Nov 2025 15:16:36 +0000
ROA not before: Fri 07 Nov 2025 15:16:36 +0000
ROA not after: Thu 05 Feb 2026 15:16:36 +0000
asID: 273127
IP address blocks: 38.121.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Nov 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c8:2b:4a:ea:80:d8:72:13:e2:50:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Nov 7 15:16:36 2025 GMT
Not After : Feb 5 15:16:36 2026 GMT
Subject: CN=91b7acac-2c32-4169-a413-bab836cf4dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:89:20:95:4d:ee:97:82:1b:1d:fc:f9:18:
2a:bf:1c:3a:4d:cb:d6:a8:df:02:66:63:46:74:e2:
57:62:64:a0:97:00:9d:5a:1e:e8:39:c2:81:44:30:
5d:85:07:07:f8:e9:af:ac:df:fd:6f:06:d7:3f:e4:
4a:8b:5c:fa:ec:ae:81:9b:33:4c:6d:75:37:2f:45:
5c:71:5e:09:8d:cf:86:f5:41:c8:bf:f8:85:09:86:
4f:13:6c:23:59:06:bd:5e:66:6e:58:4e:c2:60:6e:
2c:5b:a6:e5:79:3b:0b:b1:d0:36:0d:af:51:56:86:
29:9a:91:54:57:d2:72:98:4c:d3:d5:85:94:f2:f7:
a4:d5:4a:0c:8a:b7:da:14:80:86:64:b5:d8:b4:1c:
7e:13:f4:27:ba:f3:48:29:c8:9b:bf:5b:49:ed:41:
55:c9:ee:20:1b:a1:7d:9e:4c:a9:13:a4:70:73:19:
2a:c7:49:3b:92:8c:cd:c2:a2:a9:c0:46:b6:67:b0:
99:6b:0b:57:7a:f3:be:58:c8:cf:2b:4b:cb:ea:e9:
18:50:76:f0:e7:2f:1a:f6:0d:0e:d8:09:05:ac:5f:
04:f0:6c:47:73:4d:f0:a8:a6:a7:be:80:0c:75:4c:
cb:27:7c:61:14:ee:79:f2:d5:45:5f:d3:e8:3a:fd:
0f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A3:8C:44:34:2B:9B:58:ED:A2:1D:7C:4D:AC:5A:85:77:B6:6B:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0dc3e9a6-0180-30c7-bedd-e615acb49639.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.121.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:8c:d3:4e:54:e8:72:7c:8e:dd:83:e7:1b:23:ea:65:72:00:
ea:9c:3d:cc:cd:82:4a:d2:2a:cc:61:ba:92:44:82:da:6f:bf:
c0:dc:42:cb:05:93:0e:db:21:c0:8a:31:5f:e3:bf:ee:b2:c7:
06:50:5c:f2:84:14:31:8d:70:f2:05:22:6d:72:4e:20:9c:ab:
f9:c0:88:4c:f4:2f:24:06:a2:fb:b3:72:1b:93:73:27:9c:4c:
09:cf:92:8d:e5:cd:87:7f:7f:ac:49:fa:1a:ea:cd:bd:a9:fa:
99:ca:d4:b1:a4:30:e1:27:b8:74:5c:cf:07:83:b9:06:26:35:
54:59:75:f4:7a:f9:4e:31:99:8b:b5:50:93:3e:7c:f5:66:09:
47:83:18:21:97:84:00:cc:6a:51:ce:12:a0:02:ae:be:a9:8b:
37:0a:e3:c6:9b:9e:71:8a:b5:ed:7b:e6:b9:79:37:f4:ef:74:
8a:48:b3:94:e1:fa:be:b4:5f:58:b8:d8:ca:03:eb:b2:1b:64:
4b:a1:70:35:79:ad:46:c6:df:1a:de:1c:f2:3a:2c:04:65:33:
26:c4:6a:81:ea:e8:10:96:2a:dd:59:53:2e:16:12:8f:88:56:
87:85:6b:05:71:6a:22:82:c3:35:15:ea:a8:e2:fb:2e:f5:96:
e0:ed:7c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 15:44:24 2025 by rpki-client