This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2473fa09-d6b4-3605-aa2e-ea544fe12cbd.roa
File: 2473fa09-d6b4-3605-aa2e-ea544fe12cbd.roa (raw, json)
Hash identifier: KtUKIeOJVZbYeyNKVjtwm8GylMYYzV+JBS6rm7B3yxA=
Subject key identifier: 66:1E:BE:47:EB:99:A4:AE:AF:8B:49:AA:95:89:D3:2C:9F:71:C1:5B
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584BC53B2F60CC4C613CBF6ED960
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2473fa09-d6b4-3605-aa2e-ea544fe12cbd.roa
Signing time: Thu 06 Nov 2025 14:00:41 +0000
ROA not before: Thu 06 Nov 2025 14:00:41 +0000
ROA not after: Wed 04 Feb 2026 14:00:41 +0000
asID: 399439
IP address blocks: 208.53.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c5:3b:2f:60:cc:4c:61:3c:bf:6e:d9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Nov 6 14:00:41 2025 GMT
Not After : Feb 4 14:00:41 2026 GMT
Subject: CN=edd8d9e5-4ed6-43b5-b339-a4c40a7ea648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c0:e8:93:c2:70:b8:4b:8f:02:91:68:94:d9:
e8:eb:35:52:b6:7b:1f:2f:31:99:18:30:bc:74:cc:
c6:43:d3:6c:ef:07:26:05:53:72:88:9e:73:c6:67:
a5:af:c7:16:63:53:98:f3:ef:0f:01:fe:a8:26:59:
da:d5:82:db:77:d1:11:5b:2e:c8:a4:64:40:a1:b4:
4a:cd:20:b3:55:19:52:36:fd:63:06:5b:fa:d9:3f:
5a:f4:2f:e8:9e:c6:8e:9f:58:ec:99:18:40:70:3f:
bf:93:c5:80:7e:27:3a:a3:31:df:5c:4f:3e:27:bf:
eb:19:7c:4a:59:1c:71:d0:ff:54:53:a4:89:67:4a:
72:6e:aa:ec:1f:d0:da:74:7b:f0:a0:d3:70:09:6a:
23:c4:6b:6c:2f:85:6a:4b:15:86:96:6e:6b:e3:23:
93:2b:e1:c6:c3:4a:d3:42:fd:59:95:fe:e9:40:91:
f8:1c:1f:71:ac:a4:a8:55:f3:2b:f6:75:72:96:14:
a4:81:ee:ed:1f:4b:38:bb:22:ad:0a:4a:6b:15:81:
69:72:71:6e:cf:83:5a:7a:38:fb:ce:92:be:fb:0f:
10:2d:bb:81:b5:b8:b7:53:55:5c:ff:2e:03:04:69:
b7:71:0a:2f:5c:ef:05:56:14:4b:f9:98:c6:de:63:
c5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1E:BE:47:EB:99:A4:AE:AF:8B:49:AA:95:89:D3:2C:9F:71:C1:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2473fa09-d6b4-3605-aa2e-ea544fe12cbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
208.53.244.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:0c:62:40:0c:7b:c9:27:48:38:88:6d:df:74:38:c8:1f:15:
4d:05:b0:f6:93:be:8d:6a:b4:76:9e:10:22:f2:9e:d9:16:2a:
7f:1f:e5:c4:27:ab:59:56:26:81:3c:3e:29:17:d0:a3:1c:af:
45:8e:77:99:ad:f2:f7:b0:a3:c6:90:b6:f7:7c:fd:f9:c4:a3:
ac:44:cb:5e:38:ad:b5:bc:4c:b3:e5:65:12:00:bf:6e:14:a8:
b9:0d:15:29:0f:17:ac:74:43:fd:a2:15:b0:7c:fc:33:09:de:
16:a9:62:d6:73:e1:5a:fc:0e:68:63:49:a9:6f:c9:c6:12:a4:
e3:0d:f7:ff:95:a8:ba:2a:ac:c2:17:9f:16:23:39:5e:1c:64:
56:2e:25:ef:4e:de:4a:22:73:e5:34:c4:15:2f:cf:58:44:b5:
a8:82:63:fb:6b:59:f0:4a:b4:71:8b:eb:a9:4d:5e:5b:24:db:
c3:e2:ad:54:83:af:0a:29:4e:0a:b0:9c:c6:c9:f7:8b:c3:7d:
f5:ca:40:15:a0:30:86:c0:56:35:92:f9:5a:c1:56:2d:1e:7c:
d2:f7:16:4c:fe:25:b0:8a:b1:e1:61:02:62:12:81:50:d3:42:
27:5c:55:86:bd:03:e4:c9:22:e7:ae:be:17:21:ba:84:27:a8:
37:ed:3f:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOy9gzExhPL9u2WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZWRkOGQ5ZTUtNGVkNi00M2I1LWIzMzktYTRjNDBhN2VhNjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycDok8JwuEuPApFolNno6zVStnsfLzGZGDC8
dMzGQ9Ns7wcmBVNyiJ5zxmelr8cWY1OY8+8PAf6oJlna1YLbd9ERWy7IpGRAobRK
zSCzVRlSNv1jBlv62T9a9C/onsaOn1jsmRhAcD+/k8WAfic6ozHfXE8+J7/rGXxK
WRxx0P9UU6SJZ0pybqrsH9DadHvwoNNwCWojxGtsL4VqSxWGlm5r4yOTK+HGw0rT
Qv1Zlf7pQJH4HB9xrKSoVfMr9nVylhSkge7tH0s4uyKtCkprFYFpcnFuz4Naejj7
zpK++w8QLbuBtbi3U1Vc/y4DBGm3cQovXO8FVhRL+ZjG3mPFAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGYevkfrmaSur4tJqpWJ0yyfccFbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMjQ3M2ZhMDktZDZiNC0z
NjA1LWFhMmUtZWE1NDRmZTEyY2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DX0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEQMYkAMe8knSDiIbd90OMgfFU0FsPaTvo1qtHaeECLyntkWKn8f5cQn
q1lWJoE8PikX0KMcr0WOd5mt8vewo8aQtvd8/fnEo6xEy144rbW8TLPlZRIAv24U
qLkNFSkPF6x0Q/2iFbB8/DMJ3hapYtZz4Vr8DmhjSalvycYSpOMN9/+VqLoqrMIX
nxYjOV4cZFYuJe9O3koic+U0xBUvz1hEtaiCY/trWfBKtHGL66lNXlsk28PirVSD
rwopTgqwnMbJ94vDffXKQBWgMIbAVjWS+VrBVi0efNL3Fkz+JbCKseFhAmISgVDT
QidcVYa9A+TJIueuvhchuoQnqDftP2g=
-----END CERTIFICATE-----
Generated at Tue Nov 25 14:29:17 2025 by rpki-client