This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/6004ad98-6f8b-32da-a595-914020a7855c.roa
File: 6004ad98-6f8b-32da-a595-914020a7855c.roa (raw, json)
Hash identifier: ahhjW2LjSK1Zg4/KcnfvCFLxxPf01r9TslLDclah6NY=
Subject key identifier: D2:74:FD:7C:04:1C:15:3B:4F:0F:87:8A:57:3D:4F:B8:27:92:4D:0F
Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Certificate serial: 010D0C9F4328584BDCF5B232CED8297A7B09ABA0
Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/6004ad98-6f8b-32da-a595-914020a7855c.roa
Signing time: Sat 15 Nov 2025 02:00:32 +0000
ROA not before: Sat 15 Nov 2025 02:00:32 +0000
ROA not after: Fri 13 Feb 2026 02:00:32 +0000
asID: 14500
IP address blocks: 173.244.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 01 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:dc:f5:b2:32:ce:d8:29:7a:7b:09:ab:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Validity
Not Before: Nov 15 02:00:32 2025 GMT
Not After : Feb 13 02:00:32 2026 GMT
Subject: CN=3a208ffb-cc44-4916-88e6-ec390d8e16cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:89:a5:13:f7:d1:ec:68:e7:01:62:3b:33:
46:9d:15:94:81:25:bf:34:83:af:80:ad:53:b2:a3:
38:49:53:b5:2e:c0:c2:fa:d6:e7:06:1a:0b:50:b1:
c9:ef:00:7e:42:dc:fc:be:c5:af:88:bf:10:7c:19:
69:94:99:4e:ef:eb:70:8e:81:55:44:b9:4b:c1:08:
e4:44:51:27:56:4b:fe:a1:26:80:c2:fc:9e:16:70:
05:ed:90:fb:cd:fc:32:e7:73:b9:2c:aa:a8:26:e0:
ff:97:17:fa:bf:ef:25:2e:b6:16:2c:a2:07:23:11:
73:92:d1:17:40:dd:8c:b8:b5:5a:26:92:23:dd:0b:
85:33:b6:a4:70:bf:e4:29:3a:08:7a:6e:b1:37:30:
2f:e0:6a:7e:9f:e0:93:81:19:55:ad:b2:ff:70:42:
04:46:dc:cc:40:32:ed:5d:e5:9c:fd:8b:d9:c8:cb:
6d:c1:cb:2d:a5:6d:b7:e7:ed:3e:32:26:95:a6:3b:
ff:36:6b:0e:de:08:c2:0d:80:24:69:ed:42:9e:f7:
15:a0:23:24:59:8c:a1:c7:d4:7a:29:f9:ce:e1:a0:
0d:d1:b4:f2:d1:2b:48:82:b0:2a:eb:72:9d:ba:e9:
04:5c:be:1f:5c:76:81:ee:30:e6:51:99:e2:18:0b:
d9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:74:FD:7C:04:1C:15:3B:4F:0F:87:8A:57:3D:4F:B8:27:92:4D:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/6004ad98-6f8b-32da-a595-914020a7855c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl
X509v3 Authority Key Identifier:
keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
sbgp-ipAddrBlock: critical
IPv4:
173.244.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:55:6a:3a:43:92:b7:04:f3:03:a8:87:d7:73:e7:a2:c3:2f:
fa:18:2e:98:cc:3e:9f:00:5a:7b:e2:77:e3:51:6a:d9:0b:69:
a8:2a:1b:4f:12:4f:8e:e5:7d:54:6f:a7:d8:53:ad:d5:23:46:
0a:fd:b2:ce:87:9f:7a:74:c8:3e:d4:dc:58:fc:09:28:3c:99:
af:59:0b:a0:a6:2a:31:52:90:de:f1:83:e5:7e:54:f8:ed:4e:
cd:33:84:75:86:31:02:eb:cb:16:f7:06:ff:3f:3f:4c:5d:ca:
0d:c8:23:25:55:d4:f2:7d:23:79:0b:d4:ac:f0:52:c0:5e:f8:
0a:66:20:1a:f7:be:67:e4:8e:57:57:df:75:06:8a:3a:65:4e:
3e:c7:d6:29:60:56:68:e4:0a:c3:b5:7d:c0:5f:ab:d5:a2:d8:
7b:38:a9:08:64:62:53:d2:55:d1:74:37:0b:a3:a3:eb:43:fb:
1b:9c:c8:d6:01:b0:d2:cd:03:28:45:8d:06:26:ec:39:85:fd:
a1:29:d2:d9:37:34:9f:d3:80:44:3a:dd:01:c9:f0:5d:f6:6b:
bc:00:43:1e:3b:41:3b:f3:72:da:79:48:4c:e3:39:bc:b0:63:
4f:d1:f4:52:97:ec:3e:5a:0c:d9:55:b0:fb:16:c2:c0:28:fc:
66:27:97:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvc9bIyztgpensJq6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2
ZDQ3MB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
M2EyMDhmZmItY2M0NC00OTE2LTg4ZTYtZWMzOTBkOGUxNmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnSJpRP30exo5wFiOzNGnRWUgSW/NIOvgK1T
sqM4SVO1LsDC+tbnBhoLULHJ7wB+Qtz8vsWviL8QfBlplJlO7+twjoFVRLlLwQjk
RFEnVkv+oSaAwvyeFnAF7ZD7zfwy53O5LKqoJuD/lxf6v+8lLrYWLKIHIxFzktEX
QN2MuLVaJpIj3QuFM7akcL/kKToIem6xNzAv4Gp+n+CTgRlVrbL/cEIERtzMQDLt
XeWc/YvZyMttwcstpW235+0+MiaVpjv/NmsO3gjCDYAkae1CnvcVoCMkWYyhx9R6
KfnO4aAN0bTy0StIgrAq63KduukEXL4fXHaB7jDmUZniGAvZ8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNJ0/XwEHBU7Tw+Hilc9T7gnkk0PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5
YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvNjAwNGFkOTgtNmY4Yi0z
MmRhLWE1OTUtOTE0MDIwYTc4NTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3
MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk
NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk
NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrfRYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGlVajpDkrcE8wOoh9dz56LDL/oYLpjMPp8AWnvid+NRatkLaagqG08S
T47lfVRvp9hTrdUjRgr9ss6Hn3p0yD7U3Fj8CSg8ma9ZC6CmKjFSkN7xg+V+VPjt
Ts0zhHWGMQLryxb3Bv8/P0xdyg3IIyVV1PJ9I3kL1KzwUsBe+ApmIBr3vmfkjldX
33UGijplTj7H1ilgVmjkCsO1fcBfq9Wi2Hs4qQhkYlPSVdF0Nwujo+tD+xucyNYB
sNLNAyhFjQYm7DmF/aEp0tk3NJ/TgEQ63QHJ8F32a7wAQx47QTvzctp5SEzjObyw
Y0/R9FKX7D5aDNlVsPsWwsAo/GYnlyg=
-----END CERTIFICATE-----
Generated at Sun Nov 30 16:25:11 2025 by rpki-client