This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/588e19d5-1ac3-3a53-9c65-2853d815b530.roa
File: 588e19d5-1ac3-3a53-9c65-2853d815b530.roa (raw, json)
Hash identifier: 7GEl1EgdUI9+dVawGWqymT1CytHAf4vGc9GWGItJZCQ=
Subject key identifier: D0:B8:1F:80:94:C0:A3:92:41:FD:6D:1A:01:1D:81:C8:D7:D5:93:C4
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584C32B09E4B7147FC2D23729A40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/588e19d5-1ac3-3a53-9c65-2853d815b530.roa
Signing time: Tue 14 Oct 2025 12:50:46 +0000
ROA not before: Tue 14 Oct 2025 12:50:46 +0000
ROA not after: Mon 12 Jan 2026 13:50:46 +0000
asID: 271814
IP address blocks: 38.43.128.0/19 maxlen: 24
209.61.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:32:b0:9e:4b:71:47:fc:2d:23:72:9a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Oct 14 12:50:46 2025 GMT
Not After : Jan 12 13:50:46 2026 GMT
Subject: CN=697dc86b-b269-4abe-a0c3-c16fa28a0e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:41:57:8a:19:8d:a7:0f:36:25:80:58:9d:62:
dc:2a:dc:ab:72:c9:56:54:3d:ce:0c:46:ab:f2:58:
db:0e:44:b6:8d:98:fc:b8:b4:99:48:8a:0b:fc:d2:
88:db:4a:44:48:ac:67:94:fe:86:2e:1a:a5:b9:96:
6b:2a:95:d7:70:c7:46:0a:66:de:64:8e:11:60:a3:
4e:a9:4c:2e:07:c3:c3:a2:db:85:4d:cc:a8:ad:0e:
c6:4b:66:00:21:20:4c:c2:be:e7:92:bd:94:43:80:
7d:13:7d:0c:15:2d:ef:7e:d1:d0:87:1a:2f:20:45:
59:1c:e9:01:64:0f:3d:1c:38:7b:ed:cd:21:a2:cb:
36:d6:92:d7:5f:32:fd:b8:73:ee:dc:f9:2d:54:59:
cd:bb:d7:7b:c7:44:17:cf:6d:4e:12:e9:ff:e0:4e:
98:72:39:cf:ed:30:d9:0c:5e:38:86:d6:ea:e8:50:
c5:84:80:21:ad:7c:8e:49:12:67:98:00:d2:46:a1:
ed:1b:9c:fb:d5:3e:6d:1a:9b:07:12:fb:ee:fb:94:
b2:18:ef:b4:3e:d4:80:37:7b:7f:e0:33:38:7a:fb:
ce:be:b6:01:45:80:35:63:dd:c5:3e:f9:91:78:c3:
99:e2:2d:f7:e4:e3:36:af:24:52:e5:56:25:8f:ca:
eb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B8:1F:80:94:C0:A3:92:41:FD:6D:1A:01:1D:81:C8:D7:D5:93:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/588e19d5-1ac3-3a53-9c65-2853d815b530.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.43.128.0/19
209.61.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:e9:d8:d5:53:78:c7:97:67:24:62:61:7f:90:bf:72:41:57:
0a:2a:7f:2d:e8:ae:80:5a:8f:93:0d:bc:90:73:2c:91:89:9b:
98:3c:45:4b:76:f3:2a:e6:88:72:0b:05:d7:e5:ed:8d:db:cf:
79:e4:b5:93:71:cc:ba:ec:d0:28:2a:5a:a6:8e:c1:4b:3a:46:
c3:4c:42:c5:ad:51:1a:88:97:17:bc:25:fd:a4:ab:4b:37:74:
26:99:19:d3:1a:2a:0c:95:6b:86:5d:6d:6c:72:e0:00:b8:ef:
eb:92:3c:4d:94:20:65:05:47:1a:5f:f6:76:8c:39:45:d4:9b:
ba:83:4b:26:c9:d7:2e:2a:44:4b:66:f6:c8:b4:02:9f:79:37:
4e:b8:87:99:a8:c8:5e:d6:31:67:e2:88:b7:a5:e3:1d:21:13:
b3:7f:bc:22:05:52:c5:cf:3f:51:73:7b:d7:c5:6e:a6:7a:8a:
4d:15:18:69:19:e7:9e:87:ab:3c:76:54:1b:c5:8e:95:f5:e2:
ec:60:65:5b:5b:fb:ef:64:3f:c5:7c:da:b6:48:a3:c0:77:e0:
f3:70:87:58:0b:13:20:43:7a:66:96:0f:98:64:54:a5:6c:ea:
59:ec:17:89:60:02:96:a6:5e:26:25:58:c8:3c:7f:d9:c5:e8:
a6:ae:b9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:17:42 2025 by rpki-client