This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/af01ca17-7fab-3632-8e8c-cf4b1edbb8d6.roa
File: af01ca17-7fab-3632-8e8c-cf4b1edbb8d6.roa (raw, json)
Hash identifier: epmZAOc/FB9yHKnPU9p0AzzyWcrpOIu3FgOe9s1iJww=
Subject key identifier: 1D:E3:72:90:DA:99:22:AB:45:2C:DD:B2:AA:09:96:8A:7A:A2:3B:EE
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584BC53B2F3A51BE67CB0E4684C0
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/af01ca17-7fab-3632-8e8c-cf4b1edbb8d6.roa
Signing time: Thu 06 Nov 2025 14:00:41 +0000
ROA not before: Thu 06 Nov 2025 14:00:41 +0000
ROA not after: Wed 04 Feb 2026 14:00:41 +0000
asID: 13576
IP address blocks: 208.53.234.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c5:3b:2f:3a:51:be:67:cb:0e:46:84:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Nov 6 14:00:41 2025 GMT
Not After : Feb 4 14:00:41 2026 GMT
Subject: CN=1de4d3b0-54b0-45d8-a026-8095984d6efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bc:f2:5d:b8:d6:94:56:7d:1a:fd:38:f2:79:
36:53:17:ce:9f:8c:64:42:2f:6e:73:43:09:a2:4f:
ce:5d:42:37:30:b6:72:1c:d1:92:57:30:8b:f8:79:
4d:10:b1:b3:13:5e:64:34:e6:ae:78:76:26:7f:10:
a5:2b:8b:f6:5f:7a:b3:09:6c:15:98:60:8d:21:16:
cb:72:66:c1:9e:53:a9:94:a7:c7:b8:b6:aa:b2:83:
2d:19:4c:d0:c6:ff:6f:60:f8:04:61:cb:9a:5f:d6:
8b:a4:6b:d4:e6:21:1e:39:3b:07:6d:07:4c:b8:4b:
1b:f4:dc:52:11:9e:66:5f:e4:66:a7:86:73:28:55:
f7:48:ed:71:ad:cf:7b:8c:a3:78:80:62:e0:20:a2:
80:f3:b2:7b:67:c2:3f:1a:ed:a7:3c:44:db:b4:b3:
0d:64:1e:f0:18:c6:67:53:3d:8f:3a:ec:05:13:9f:
16:7f:1f:e0:cb:a4:7d:3c:00:3f:e3:de:13:f1:a1:
0a:54:c6:3e:ff:89:e6:8b:16:1f:38:f1:3f:8a:8c:
34:0a:4a:6a:74:67:5e:37:94:d5:61:64:77:93:f8:
6f:27:c4:41:95:6d:4a:5a:ec:f7:bb:b3:39:53:51:
a0:2d:5f:93:3e:cc:0b:0f:4f:57:f4:79:01:88:62:
bb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E3:72:90:DA:99:22:AB:45:2C:DD:B2:AA:09:96:8A:7A:A2:3B:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/af01ca17-7fab-3632-8e8c-cf4b1edbb8d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
208.53.234.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:9a:c4:c0:97:fc:bf:27:60:48:1c:b2:a1:fa:84:85:ad:fb:
49:5d:9f:49:26:b8:61:37:e5:51:9e:3b:d4:44:c7:8e:d0:8d:
63:a2:89:9a:1f:87:b7:44:70:98:91:9e:6d:f0:34:76:17:3e:
33:f0:62:1d:f0:3d:09:bc:1d:6d:b8:ad:e8:b0:47:e8:b9:4f:
5e:64:71:ff:ca:8d:46:a2:34:5e:69:98:31:8d:94:05:b5:1d:
79:92:b5:a7:69:90:f5:c1:96:6b:a5:53:01:d6:7c:d4:14:5d:
d8:c9:eb:85:14:cb:43:d7:67:65:8e:6d:db:f4:bb:64:7a:ad:
99:d1:09:d5:05:cc:67:f7:47:3d:12:11:12:b6:f1:ed:ef:20:
04:8b:21:94:52:49:ed:2f:7d:7a:47:4f:35:a0:26:b2:12:55:
bb:eb:1f:07:e5:3c:41:e7:84:bf:8b:35:c1:78:be:c0:2f:0a:
07:ce:fd:b9:5e:53:c0:dc:ca:43:6c:b3:ce:26:4d:79:dc:08:
ea:51:3c:91:e2:6c:fb:c0:bb:18:85:24:ad:bc:be:85:af:e1:
87:f5:89:e5:ad:3a:a4:5d:8a:db:d1:be:82:b2:c2:44:f7:f8:
0e:b9:43:ab:d1:55:8a:3d:f8:83:da:2a:d7:d6:c1:2b:99:cf:
1f:31:47:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 14:27:32 2025 by rpki-client