This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cb578ea6-9895-3de3-8e51-86848fbdb755.roa
File: cb578ea6-9895-3de3-8e51-86848fbdb755.roa (raw, json)
Hash identifier: /bJ6iM1DUrNOuS19YG+vXi1DVRzn535IZq6Ggxs+vkM=
Subject key identifier: 3B:E8:6A:74:A0:9D:61:44:3C:73:61:F0:AE:DE:8A:3C:76:6B:00:DA
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584BCD9B1B00D714DDB3AD2A5C68
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cb578ea6-9895-3de3-8e51-86848fbdb755.roa
Signing time: Sun 09 Nov 2025 14:00:38 +0000
ROA not before: Sun 09 Nov 2025 14:00:38 +0000
ROA not after: Sat 07 Feb 2026 14:00:38 +0000
asID: 13576
IP address blocks: 216.249.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:cd:9b:1b:00:d7:14:dd:b3:ad:2a:5c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Nov 9 14:00:38 2025 GMT
Not After : Feb 7 14:00:38 2026 GMT
Subject: CN=db463ed2-1e93-4df2-bd82-d7dbe74ee410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:1a:6f:ea:65:4a:3b:24:e3:0c:3b:ed:32:
85:d1:5c:a7:6d:de:91:3e:c3:12:69:fd:24:4f:21:
9c:4b:7d:36:9e:cc:86:52:43:2d:f0:91:52:0a:5c:
8e:df:12:13:d1:b1:8d:22:39:af:ed:34:51:73:c9:
d4:8a:c5:95:54:3f:9f:62:b4:7d:01:6a:3c:af:f5:
21:93:48:52:31:89:76:0a:2f:c7:dc:1f:76:79:06:
c7:f4:2a:5a:20:f3:cd:8c:0e:bc:73:c8:51:67:a0:
ba:28:65:80:49:42:eb:ec:2c:3e:97:64:5a:96:09:
5b:79:2c:91:df:64:08:59:af:6d:58:41:3d:6f:37:
5d:ff:0f:17:52:05:7f:8a:3e:09:06:d7:69:9d:d7:
03:25:38:9d:22:af:27:89:c6:61:86:8a:57:48:a0:
91:88:48:a8:c9:8a:a5:28:51:99:7e:dc:dc:81:27:
a0:aa:bd:8f:94:c8:95:3e:ea:16:64:5a:0b:2b:5f:
f7:5f:c1:01:fb:37:71:d5:7b:e1:84:9b:76:07:a5:
3e:08:f7:18:ec:cd:fd:76:ab:2d:1f:49:a3:bc:0c:
d8:17:1d:2a:5b:31:9d:08:dc:c3:9b:08:bd:76:d1:
49:95:04:61:da:57:96:51:f2:41:8e:74:9a:13:ca:
34:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E8:6A:74:A0:9D:61:44:3C:73:61:F0:AE:DE:8A:3C:76:6B:00:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cb578ea6-9895-3de3-8e51-86848fbdb755.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.249.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:e7:3d:94:37:7b:fc:8e:c8:ac:9b:ea:20:e0:1f:02:a3:80:
bf:da:be:a2:b0:8f:d2:82:c0:23:05:f0:6b:f6:c0:c1:e3:a1:
ce:94:55:b0:ed:6a:22:d0:ae:f8:b9:23:d7:5f:92:9d:17:1a:
63:48:07:66:9f:aa:c1:0d:50:bd:d1:03:11:38:3b:56:09:86:
d8:a6:85:f5:be:5b:2c:c0:6a:37:ee:d9:b3:6c:84:b8:7f:ce:
1e:69:13:4f:4d:e9:a8:42:8f:7d:6c:87:8a:bb:46:34:21:c8:
b0:fc:e7:f2:49:43:98:3c:51:bc:12:1d:30:ad:b6:6a:a2:81:
dd:f4:0c:d4:9d:29:9d:4f:e9:27:97:c5:28:5e:16:86:00:06:
df:c9:59:27:ec:ac:12:cc:fa:e8:83:ca:77:6c:81:1b:85:da:
6a:52:01:92:cf:33:5e:a6:12:64:ab:31:67:54:52:24:61:08:
01:22:61:03:6a:62:c3:3f:50:87:6d:f7:3b:d6:34:7c:5e:56:
4c:bd:21:64:84:b3:82:96:76:96:c9:b5:3e:41:39:8f:0f:26:
ac:1c:a2:04:81:ef:0e:ce:a4:df:37:83:5a:af:ee:a4:35:af:
38:3e:e2:39:db:8b:c6:fa:4a:14:f0:37:29:63:a0:83:ad:06:
ca:6a:66:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 14:31:09 2025 by rpki-client