This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/8cae9a02-39b3-3c4a-b824-865da368ac0e.roa
File: 8cae9a02-39b3-3c4a-b824-865da368ac0e.roa (raw, json)
Hash identifier: KQgI8X/ICrtvU2uPMoTOFAmwe4A1h6u2tdG+FTqMyNk=
Subject key identifier: 8F:D9:ED:C2:25:A0:75:D7:FF:7B:5B:E7:19:02:75:53:59:E4:0F:A4
Certificate issuer: /CN=0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317
Certificate serial: 010D0C9F4328584C1A60D4182354ED3E2F66ED40
Authority key identifier: 49:E4:5C:27:F5:7A:0A:5F:DC:C8:9A:DF:E7:26:BF:A2:5B:05:0D:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/8cae9a02-39b3-3c4a-b824-865da368ac0e.roa
Signing time: Sun 07 Dec 2025 02:00:30 +0000
ROA not before: Sun 07 Dec 2025 02:00:30 +0000
ROA not after: Sat 07 Mar 2026 02:00:30 +0000
asID: 1226
IP address blocks: 204.235.48.0/21 maxlen: 21
204.235.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:1a:60:d4:18:23:54:ed:3e:2f:66:ed:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317
Validity
Not Before: Dec 7 02:00:30 2025 GMT
Not After : Mar 7 02:00:30 2026 GMT
Subject: CN=1c47f2da-2911-469e-940b-548f898f5633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b8:eb:9f:2e:fc:45:95:48:10:57:bd:db:16:
3d:9c:64:53:91:19:16:cb:2f:82:16:e2:6d:0a:8f:
09:5b:d9:9c:9c:99:ab:68:1e:9c:38:90:46:34:3f:
15:6c:13:04:51:e3:2e:1d:ae:a2:90:b2:4a:fa:b5:
10:65:15:92:a9:e3:05:1e:25:43:56:32:d9:85:1b:
92:41:17:68:39:59:b5:93:ec:cd:a4:25:02:68:69:
c0:39:54:b2:dc:99:71:3d:91:0c:5c:1d:52:fc:c9:
de:da:70:1c:26:dc:af:3c:56:b9:ea:84:b3:59:a7:
24:19:d0:65:ca:26:ba:8f:41:58:48:a6:35:1d:e3:
0d:55:67:a0:3e:b8:b8:45:a7:b6:dc:3f:22:89:e2:
1c:ff:5b:fa:8a:1f:98:77:73:04:c2:ae:62:a5:6b:
c6:75:e8:ba:90:23:d0:40:d3:d4:90:20:a1:37:f6:
97:bc:38:7d:01:fe:07:a5:f2:c1:0e:73:f2:41:99:
bf:a7:fc:b7:43:2b:1d:bd:64:a9:76:8e:33:07:03:
9b:69:9e:ad:03:a7:17:37:40:31:d4:2b:2a:86:6e:
51:97:70:8d:41:60:3f:2a:11:cc:1b:9b:bb:7c:13:
3b:5e:09:ef:0b:f9:8c:71:c4:86:f8:68:70:55:68:
20:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D9:ED:C2:25:A0:75:D7:FF:7B:5B:E7:19:02:75:53:59:E4:0F:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/8cae9a02-39b3-3c4a-b824-865da368ac0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.crl
X509v3 Authority Key Identifier:
keyid:49:E4:5C:27:F5:7A:0A:5F:DC:C8:9A:DF:E7:26:BF:A2:5B:05:0D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer
sbgp-ipAddrBlock: critical
IPv4:
204.235.48.0-204.235.59.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:b7:b4:6a:ed:a4:8d:b5:af:6e:40:b2:0b:aa:74:f2:5c:d2:
c3:ae:de:4b:f7:a5:12:e4:93:55:8b:20:35:27:99:55:ac:19:
6c:4d:24:e8:3b:3f:a8:34:95:83:1b:57:cd:d3:5e:50:20:9d:
3d:57:be:02:3c:6f:96:6e:83:99:fb:e3:fe:c4:97:26:90:fe:
bc:a9:f0:34:07:49:e8:b8:bb:96:38:41:c1:de:4a:75:9d:1b:
f4:30:d2:1d:ff:27:0c:21:32:80:ef:7c:89:bb:fb:74:98:8d:
90:59:2b:2a:ed:7e:90:de:6a:1d:55:fc:a4:e2:f6:1c:26:20:
e7:d6:47:82:03:06:6b:f8:2e:12:76:8b:11:4b:ea:7e:e5:49:
ec:6a:1a:58:b7:06:01:51:46:d5:9a:da:a4:7b:88:19:2c:0f:
9b:98:ee:28:19:b4:c2:8a:d7:3d:70:8a:e3:00:c7:f9:eb:46:
ec:50:86:6c:63:8f:ee:f5:21:53:26:da:98:98:94:7a:c7:18:
fb:45:2f:16:79:f1:ef:24:cf:8f:dc:6e:96:e6:19:46:a6:f0:
5f:80:b3:b9:9e:f6:5f:9f:10:1a:7b:23:d7:77:dc:8b:20:31:
a3:80:af:9f:4b:80:ab:5c:64:dc:20:7a:8c:07:89:56:ba:7e:
ad:7b:89:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:26:04 2025 by rpki-client