This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/2c89afb9-daeb-3b52-b5f1-9d4530172434.roa
File: 2c89afb9-daeb-3b52-b5f1-9d4530172434.roa (raw, json)
Hash identifier: 17FpFKwc+m+3bRoSfJMO26PkSRbsVyLamK276wUYr5Q=
Subject key identifier: C3:D3:8F:09:76:A0:9C:BC:45:3A:3B:7E:DA:DE:CE:D5:8F:24:5D:BC
Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Certificate serial: 010D0C9F4328584BCC35B6201BE540001CE50580
Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/2c89afb9-daeb-3b52-b5f1-9d4530172434.roa
Signing time: Sun 09 Nov 2025 02:00:31 +0000
ROA not before: Sun 09 Nov 2025 02:00:31 +0000
ROA not after: Sat 07 Feb 2026 02:00:31 +0000
asID: 393238
IP address blocks: 72.50.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:cc:35:b6:20:1b:e5:40:00:1c:e5:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Validity
Not Before: Nov 9 02:00:31 2025 GMT
Not After : Feb 7 02:00:31 2026 GMT
Subject: CN=1126d511-845d-4801-b251-853b58956948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6c:1a:45:75:8a:ad:a8:68:e7:bb:98:b4:6a:
8e:ac:e2:2c:37:b7:10:a7:34:db:04:ba:98:21:1a:
04:38:36:36:37:01:d3:e6:93:62:69:c8:be:4b:ae:
54:2b:b1:f5:d6:7d:d7:0b:75:09:27:8b:be:8b:49:
b2:27:5c:7e:ed:5e:55:b1:7e:c8:0b:05:d9:2d:33:
69:46:7e:d9:e0:bb:e1:c9:97:68:a3:3e:41:52:4e:
ad:ea:d7:87:10:22:a7:8b:58:5c:15:55:52:d8:28:
f1:bd:79:b2:0e:5f:5b:01:53:27:15:93:12:ca:94:
cf:22:62:6b:a4:f1:a4:a8:b1:a3:fa:06:dc:43:9b:
9b:74:36:45:d4:6c:2a:79:99:b7:ef:24:c6:5d:44:
01:63:c5:84:6a:54:f7:11:2e:20:22:a6:35:80:9a:
f9:d2:84:19:0b:e3:e1:b6:ad:89:a0:5b:50:b8:7b:
85:ad:17:03:cf:6b:f4:f5:72:c1:b4:f0:ff:83:f3:
2a:6e:c0:63:57:bf:78:84:2f:c8:be:a9:a9:ff:11:
a9:64:6a:1d:1d:77:73:27:80:bd:32:55:1c:cf:9f:
97:3a:3f:c5:4c:2c:7b:3c:29:b8:7c:d7:71:8f:cc:
eb:b9:9d:b1:cb:45:63:a4:40:88:e9:94:c8:5d:15:
26:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D3:8F:09:76:A0:9C:BC:45:3A:3B:7E:DA:DE:CE:D5:8F:24:5D:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/2c89afb9-daeb-3b52-b5f1-9d4530172434.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
X509v3 Authority Key Identifier:
keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.50.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:3b:62:8a:b8:8c:74:37:70:f1:09:33:a1:d6:25:64:bd:5c:
35:67:04:89:b9:b5:fd:46:3d:37:cb:67:86:03:ce:88:35:bc:
49:8c:0e:83:03:31:d8:3f:7f:7c:86:16:fb:99:78:91:0f:1b:
7a:9b:9c:8b:c8:7d:58:ce:e9:d4:06:28:15:52:18:87:6a:9e:
c3:88:6b:20:67:90:7a:85:52:f3:8f:08:d1:ed:fb:e6:40:16:
b8:31:81:45:70:cc:99:bc:1b:a3:b0:a4:a5:a5:21:2f:a5:c2:
d2:00:e1:ec:66:a3:a2:20:55:29:03:11:51:6a:cc:28:8a:0f:
b3:90:4e:94:6d:fb:55:c2:db:aa:af:ea:99:99:46:2f:5c:cf:
b4:3e:f9:99:f4:9d:df:1a:4e:17:58:2b:c7:98:bf:34:80:69:
c9:03:8f:87:c6:30:10:c9:cf:1b:00:44:fb:a3:87:b7:b3:49:
84:b4:93:0c:77:e4:b4:f4:c2:76:56:cf:0d:1a:f3:23:bb:1f:
53:1d:67:65:34:9b:a2:96:8e:c4:e8:a2:2f:ef:d7:43:23:8c:
17:9d:8b:d6:ef:8e:8a:ac:56:5e:32:5f:9d:8c:53:be:3d:5b:
b6:1a:c6:06:e1:95:e9:36:93:d9:63:37:7e:c7:c9:4a:d6:ef:
10:38:ba:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvMNbYgG+VAABzlBYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk
Y2IzMB4XDTI1MTEwOTAyMDAzMVoXDTI2MDIwNzAyMDAzMVowLzEtMCsGA1UEAxMk
MTEyNmQ1MTEtODQ1ZC00ODAxLWIyNTEtODUzYjU4OTU2OTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2waRXWKraho57uYtGqOrOIsN7cQpzTbBLqY
IRoEODY2NwHT5pNiaci+S65UK7H11n3XC3UJJ4u+i0myJ1x+7V5VsX7ICwXZLTNp
Rn7Z4LvhyZdooz5BUk6t6teHECKni1hcFVVS2CjxvXmyDl9bAVMnFZMSypTPImJr
pPGkqLGj+gbcQ5ubdDZF1GwqeZm37yTGXUQBY8WEalT3ES4gIqY1gJr50oQZC+Ph
tq2JoFtQuHuFrRcDz2v09XLBtPD/g/MqbsBjV794hC/Ivqmp/xGpZGodHXdzJ4C9
MlUcz5+XOj/FTCx7PCm4fNdxj8zruZ2xy0VjpECI6ZTIXRUmHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMPTjwl2oJy8RTo7ftreztWPJF28MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm
MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvMmM4OWFmYjktZGFlYi0z
YjUyLWI1ZjEtOWQ0NTMwMTcyNDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy
YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm
ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0
NTBlZmRjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDLwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEw7Yoq4jHQ3cPEJM6HWJWS9XDVnBIm5tf1GPTfLZ4YDzog1vEmMDoMD
Mdg/f3yGFvuZeJEPG3qbnIvIfVjO6dQGKBVSGIdqnsOIayBnkHqFUvOPCNHt++ZA
FrgxgUVwzJm8G6OwpKWlIS+lwtIA4exmo6IgVSkDEVFqzCiKD7OQTpRt+1XC26qv
6pmZRi9cz7Q++Zn0nd8aThdYK8eYvzSAackDj4fGMBDJzxsARPujh7ezSYS0kwx3
5LT0wnZWzw0a8yO7H1MdZ2U0m6KWjsTooi/v10MjjBedi9bvjoqsVl4yX52MU749
W7Yaxgbhlek2k9ljN37HyUrW7xA4unU=
-----END CERTIFICATE-----
Generated at Tue Nov 25 10:10:45 2025 by rpki-client