This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa
File: cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa (raw, json)
Hash identifier: pfu/mK+rw90ljF2Tuqks3LhIq4IU7oofd5CFamdF9WU=
Subject key identifier: E9:55:07:B2:20:1E:2A:29:AB:1F:40:75:9B:9E:E5:82:71:52:C3:78
Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Certificate serial: 010D0C9F4328584C28562C6255F3A427C5AC3F00
Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa
Signing time: Fri 12 Dec 2025 02:00:30 +0000
ROA not before: Fri 12 Dec 2025 02:00:30 +0000
ROA not after: Thu 12 Mar 2026 01:00:30 +0000
asID: 14618
IP address blocks: 104.200.216.0/24 maxlen: 24
104.200.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:28:56:2c:62:55:f3:a4:27:c5:ac:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Validity
Not Before: Dec 12 02:00:30 2025 GMT
Not After : Mar 12 01:00:30 2026 GMT
Subject: CN=b85083e6-e6d5-42aa-86e0-87e1b194fb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:94:d0:2b:bd:48:7b:c2:65:aa:7c:92:39:
af:fc:32:b3:be:33:7c:46:ee:53:2f:f3:67:d7:44:
66:e8:42:6b:13:0a:2d:2b:f8:b7:a0:a9:06:e3:83:
1b:f8:46:49:af:cd:d0:ce:96:4b:d5:7c:31:59:e0:
83:39:00:1a:77:59:a1:60:91:63:85:b9:ce:fd:85:
b7:00:d0:59:4b:79:b0:5c:be:05:63:98:4e:50:22:
83:1b:0d:77:d0:c1:17:21:68:4a:58:ec:03:e9:d0:
ba:12:4d:0f:13:0f:14:52:04:41:ac:12:c8:3d:77:
1f:43:b7:fc:c1:3a:b3:c8:2b:07:b9:d0:a1:62:cb:
fe:f4:7d:86:30:bc:6b:91:1b:d5:4b:bd:cf:11:28:
9c:44:37:50:fd:5e:2b:6c:0a:00:19:2b:6a:50:d8:
05:14:9b:e5:ba:4d:bb:4c:62:85:1c:d8:c1:c2:81:
d9:6d:8b:f5:10:f4:22:9f:92:5d:e2:3f:60:7b:78:
7d:eb:b5:71:80:43:69:9d:d8:21:2d:fc:47:b7:61:
bb:38:38:81:e7:52:71:96:47:87:29:87:e7:b1:d4:
61:71:a3:21:4e:93:c2:03:50:64:e9:eb:9d:86:a7:
71:8e:18:52:59:0f:cd:52:de:88:ce:7e:fa:ca:bd:
76:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:55:07:B2:20:1E:2A:29:AB:1F:40:75:9B:9E:E5:82:71:52:C3:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl
X509v3 Authority Key Identifier:
keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
sbgp-ipAddrBlock: critical
IPv4:
104.200.216.0/24
104.200.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:00:eb:b5:74:28:b8:3f:5c:a5:bc:e2:ed:0c:e3:57:7c:44:
55:db:07:f3:04:c9:bd:ab:88:9b:87:68:4d:ba:81:f2:ac:33:
94:52:53:5f:9c:b3:75:97:78:87:09:c9:88:1d:f4:74:2b:18:
59:83:41:25:48:e6:55:62:48:3f:42:ed:8a:75:5f:8b:8e:8f:
cd:41:b6:46:cb:a0:e6:58:28:88:17:d1:8f:ab:ec:bc:e3:bd:
92:3a:02:03:cf:e4:de:e2:f0:ed:9c:1b:55:d7:0d:0c:ea:69:
ab:3d:84:81:50:c2:e1:0a:2d:6d:aa:d2:12:d8:32:91:54:80:
18:7c:de:01:c4:aa:d6:79:72:48:4e:e0:21:81:b1:3b:22:96:
18:fb:fe:c9:e6:4a:ba:7a:2b:84:6d:1b:83:85:e2:04:36:50:
f1:41:c3:5f:df:b6:2d:04:55:37:84:2b:e1:b7:76:90:28:ac:
e3:3c:32:61:77:2c:e6:35:cc:4b:c1:67:bc:ab:dc:0e:73:03:
fb:3c:73:89:10:b4:1e:49:31:a8:df:8a:18:16:e0:57:8e:ef:
7c:b0:e2:c6:a4:c1:ac:2c:7c:39:0d:32:88:66:83:5a:f1:f9:
e1:5e:3d:d1:31:32:fc:a0:d9:1b:65:8e:1f:69:48:29:42:4c:
4b:63:d5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:27:03 2025 by rpki-client