This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa
File: 2928b3e5-3758-38df-b7af-e739bfc0498e.roa (raw, json)
Hash identifier: bIeaTs8MBWr2PPW3r8qOShd9zRYrbWl17anHsG6nje4=
Subject key identifier: B1:BC:16:F1:65:17:38:53:53:48:4D:0A:AB:EB:7B:F8:15:61:CD:4A
Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Certificate serial: 010D0C9F4328584BDCF5B1A06E5AB92B98E41B52
Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa
Signing time: Sat 15 Nov 2025 02:00:32 +0000
ROA not before: Sat 15 Nov 2025 02:00:32 +0000
ROA not after: Fri 13 Feb 2026 02:00:32 +0000
asID: 14500
IP address blocks: 68.70.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 01 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:dc:f5:b1:a0:6e:5a:b9:2b:98:e4:1b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Validity
Not Before: Nov 15 02:00:32 2025 GMT
Not After : Feb 13 02:00:32 2026 GMT
Subject: CN=49aa50f7-7ac6-41b0-84b0-15cd76eb9a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:16:7b:6b:ab:bd:b8:8d:75:b3:dc:6c:7d:a6:
93:7e:70:4b:fb:13:0b:04:3d:61:eb:38:de:9a:53:
49:7f:c8:cc:c5:aa:04:87:e9:18:2b:bc:50:25:38:
a4:13:31:fa:5d:7a:4d:62:b8:dc:ce:e2:0a:44:67:
c6:0a:9c:ed:ce:e6:3b:93:8c:56:20:b2:df:12:ab:
64:aa:05:7f:22:17:43:47:a0:18:52:35:fb:67:46:
85:d3:2d:fe:12:e4:a4:9f:7a:fc:6d:39:4d:a4:c7:
86:a4:1e:b8:18:16:ab:bf:26:8f:76:fc:13:7b:75:
d2:c9:a9:8b:77:55:e5:80:d2:08:d8:b2:81:40:65:
a0:f9:73:91:88:6a:32:ee:c1:e4:1a:64:bd:d6:62:
4a:ce:89:d2:c2:27:03:1d:b6:db:ce:35:41:f5:77:
66:e4:92:35:fa:7d:36:bf:21:72:e6:ea:0a:fd:13:
a2:a8:be:92:94:80:a6:3b:ef:ec:9e:3b:07:34:3a:
72:f2:6c:b2:c0:b9:20:6e:f8:7e:b4:07:5e:9d:15:
67:5d:b7:10:02:59:ec:66:2e:a9:c6:0d:78:ae:53:
7f:af:e4:ac:87:75:c2:c0:4e:18:fa:18:c3:c9:2e:
75:89:ac:c5:84:22:75:f6:f2:b2:24:f6:41:be:cc:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BC:16:F1:65:17:38:53:53:48:4D:0A:AB:EB:7B:F8:15:61:CD:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl
X509v3 Authority Key Identifier:
keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
sbgp-ipAddrBlock: critical
IPv4:
68.70.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:ee:66:ad:30:c5:36:e2:01:cb:01:02:9e:1f:c4:de:ec:df:
b8:0a:b4:c2:43:09:78:df:1e:48:65:9a:30:ba:a2:f9:05:53:
b1:cf:f7:f2:73:d8:8b:1c:16:61:4a:90:63:06:df:57:cb:99:
c7:01:a3:fd:ef:83:5f:2d:f2:e3:bf:92:95:a3:ff:d1:c1:46:
02:97:05:14:c7:51:5f:0f:63:04:5e:05:b1:e1:89:f6:a8:1f:
45:bf:21:b8:75:56:f3:c0:31:7f:a8:63:46:1d:1f:da:13:c1:
62:8b:ce:7d:b4:a3:8b:b9:27:2d:0e:fe:e1:18:ea:9c:2e:9d:
24:b4:de:f5:2c:7b:dd:27:af:79:9e:39:e1:08:c1:ed:a0:da:
d3:be:4a:55:c3:9b:d8:fc:5a:e9:af:b3:a0:53:de:57:e3:92:
8d:20:24:f0:ae:21:e5:3d:fb:0f:48:e9:cd:fd:88:10:7e:98:
15:c5:f0:74:e1:b6:15:26:bc:65:2e:81:ae:cc:8c:14:ea:9e:
bf:79:f0:c9:2e:28:c2:55:91:5c:c3:5a:1c:c6:50:05:b8:b4:
64:23:40:52:f8:fe:6e:10:c4:08:3a:59:8e:8a:3f:0d:08:82:
69:88:f1:12:0e:5a:a9:1a:d4:60:76:9e:e1:a1:81:06:b2:3f:
98:fc:84:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 30 16:25:10 2025 by rpki-client