This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa
File: bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa (raw, json)
Hash identifier: rq3Wq2sfEBjzxrqrYOfXmsm9ZHUh6IiPZxtS4jTn4fo=
Subject key identifier: F1:4B:A7:28:3F:C0:C2:69:7E:97:55:79:8D:68:40:92:DC:4B:05:08
Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial: 010D0C9F4328584BF34B268FC1934C9EBCC267EC
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa
Signing time: Sun 23 Nov 2025 02:00:31 +0000
ROA not before: Sun 23 Nov 2025 02:00:31 +0000
ROA not after: Sat 21 Feb 2026 02:00:31 +0000
asID: 21947
IP address blocks: 216.47.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:f3:4b:26:8f:c1:93:4c:9e:bc:c2:67:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Validity
Not Before: Nov 23 02:00:31 2025 GMT
Not After : Feb 21 02:00:31 2026 GMT
Subject: CN=cdb6f27f-a408-4066-99c7-d2530c9b13c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7e:0f:e9:82:29:4f:f2:57:64:bc:57:fa:9d:
1c:0e:8e:89:aa:7a:a7:86:cd:62:ed:58:e3:7e:dc:
65:f2:1c:5e:be:9c:47:73:4f:26:0a:ba:79:18:b0:
14:68:14:fd:31:ea:e3:70:90:da:80:02:76:8f:cc:
09:2a:33:ca:36:60:cb:67:b6:b0:c9:db:4a:d8:dc:
9a:b9:ea:e1:6f:3e:7e:5f:c5:87:95:c7:1f:d8:08:
fc:95:bf:7d:8e:1d:f6:11:02:a6:97:29:46:d5:04:
fc:15:13:71:2b:cb:03:ff:ec:5e:66:e1:48:2a:91:
c5:1f:ad:85:2a:5a:73:15:6e:ab:df:b4:57:33:65:
d3:52:f5:14:4d:f6:b0:24:52:45:cb:8f:9c:48:71:
ae:be:a5:78:5b:5e:86:a6:8b:7a:ca:03:79:0a:0b:
26:de:61:6c:eb:85:63:3a:78:d9:8f:23:17:00:57:
ab:a3:7e:a9:70:90:dd:79:b2:c4:b8:b2:66:a9:b5:
17:b3:6f:55:6f:97:40:78:2d:4a:32:95:9f:7a:67:
d2:74:63:d1:0b:d5:ee:70:53:2b:34:f7:48:0f:42:
32:4d:fb:dd:96:53:01:a7:a3:1c:a7:de:bc:71:4a:
1d:b3:80:f5:ec:db:61:ee:a8:98:ae:65:19:67:b8:
39:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4B:A7:28:3F:C0:C2:69:7E:97:55:79:8D:68:40:92:DC:4B:05:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
X509v3 Authority Key Identifier:
keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.47.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:ce:b9:77:7f:4b:95:f6:43:33:be:b7:bd:11:b8:5c:b6:96:
03:20:8a:07:13:45:c7:80:8a:df:b7:5f:22:9c:b1:08:e8:ad:
9a:a2:f6:bc:92:17:de:59:14:c2:c2:c7:35:78:9f:f1:21:27:
7e:61:41:82:f1:2d:37:b5:da:f7:ca:0e:d5:1d:1a:69:b7:3e:
a0:2b:13:7a:f4:fd:c3:a4:8b:59:8b:28:95:07:89:75:6d:99:
0c:84:87:3f:2c:81:3c:ac:f8:34:f4:62:83:ee:4f:bb:e8:42:
6f:1b:f6:cb:83:17:45:0a:2b:6b:bf:26:dc:1d:a1:d8:89:d9:
19:34:62:42:4e:ff:66:df:ac:9c:7d:11:35:07:31:f7:c0:4b:
07:2c:f9:9e:53:53:67:ec:18:93:61:4a:2a:c8:92:e4:ce:6d:
93:99:6b:0e:03:f5:11:86:94:4e:74:04:c9:2f:f8:76:f5:fe:
e4:73:16:26:d2:66:95:79:61:04:41:82:c6:2c:9c:c3:b6:c7:
8b:1f:4f:02:86:54:15:4c:36:2c:50:ff:1f:44:ac:fc:fd:b6:
3a:98:c2:7e:a3:1b:4b:81:47:7a:c6:20:f8:09:7c:58:5b:63:
b4:d2:e2:d3:9a:98:ea:f6:48:5f:ca:bf:fc:a8:7b:bb:53:bb:
df:c6:30:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 09:57:54 2025 by rpki-client