This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/27962d7b-6418-3102-a022-ff4ff29b0763.roa
File: 27962d7b-6418-3102-a022-ff4ff29b0763.roa (raw, json)
Hash identifier: xymRUlrlRP3DdBWg+uyDO3ocfebl4jE1ksUDb1TtS5Q=
Subject key identifier: 39:80:5A:EB:84:FA:4E:05:24:5E:82:63:FE:A3:76:0B:16:F2:7A:0E
Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial: 010D0C9F4328584BD8C5CE44D854F0A9EA630000
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/27962d7b-6418-3102-a022-ff4ff29b0763.roa
Signing time: Thu 13 Nov 2025 14:00:38 +0000
ROA not before: Thu 13 Nov 2025 14:00:38 +0000
ROA not after: Wed 11 Feb 2026 14:00:38 +0000
asID: 31898
IP address blocks: 138.1.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d8:c5:ce:44:d8:54:f0:a9:ea:63:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Validity
Not Before: Nov 13 14:00:38 2025 GMT
Not After : Feb 11 14:00:38 2026 GMT
Subject: CN=3ae73a03-159f-4eb3-97cc-6e0e393caeb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:ef:d5:b2:5a:b6:1b:27:c6:8d:16:62:9c:
a6:d9:a0:f4:8f:f1:dd:24:f6:99:5c:b9:d6:f0:9b:
46:1b:a3:3c:5e:ae:18:89:84:61:f4:ae:fd:8a:9d:
78:2f:60:68:82:c4:21:6a:a7:c7:4d:44:ad:c0:fd:
4b:fd:3d:33:69:8c:51:75:8d:4d:94:35:b1:37:84:
90:5e:41:8f:47:63:58:fd:66:12:81:de:fb:9a:25:
68:e7:52:ae:d0:46:04:89:44:cc:df:9b:f5:c9:6b:
18:90:6a:9b:4a:29:4e:e3:0f:b4:27:3c:80:bb:fc:
3a:ff:68:21:ef:0b:7b:eb:70:19:3a:d5:79:ed:61:
ff:47:9a:1f:20:a3:a6:55:f6:05:0d:f4:b3:d0:b6:
fa:ae:1e:5a:60:85:a0:23:1e:92:84:81:8c:94:6d:
fd:09:d9:d6:bc:31:2b:6f:2f:f5:1c:4f:aa:04:3b:
f8:71:5c:77:3f:2b:18:c0:18:81:64:f2:44:f3:1f:
00:bd:be:0f:f9:0d:9a:2a:0d:9e:7b:c1:c0:15:30:
94:ed:b6:91:df:c3:df:bd:7a:b7:5a:1e:fc:21:a2:
69:a8:20:28:82:b9:ce:fa:3e:b7:7c:83:65:9f:97:
a4:67:8f:30:6e:45:43:75:66:b6:52:12:09:1a:a4:
ec:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:80:5A:EB:84:FA:4E:05:24:5E:82:63:FE:A3:76:0B:16:F2:7A:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/27962d7b-6418-3102-a022-ff4ff29b0763.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
X509v3 Authority Key Identifier:
keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
sbgp-ipAddrBlock: critical
IPv4:
138.1.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:e4:51:ff:fd:ee:27:b9:09:0b:d1:6b:bd:06:12:5f:a8:3c:
8b:ce:3c:c8:df:68:8e:7a:06:19:59:77:4b:04:ec:74:18:9f:
aa:81:d8:04:5b:6d:7b:a3:e7:1e:ea:7e:a6:c4:ed:62:7b:20:
6e:7b:60:45:8d:2c:7d:cf:d3:df:b6:d3:68:7c:7b:93:e0:02:
83:9e:86:a6:b6:a2:1d:5e:db:82:33:db:05:8e:aa:99:ca:54:
ba:41:6e:8b:40:a7:5e:a7:00:70:4a:38:d2:b3:24:90:df:5d:
49:c1:14:dd:5e:96:0c:11:c4:ab:a8:8e:d4:97:1f:f5:b1:95:
ea:f8:85:1c:db:71:a7:fd:b6:cd:57:78:71:1f:97:f3:7a:73:
16:f5:49:09:a6:28:e0:fd:3c:92:5c:60:47:3d:74:90:cd:7b:
09:53:47:77:fb:f9:ef:be:cf:04:28:82:45:fe:11:32:89:a6:
73:44:75:e9:24:ba:2f:dc:1e:95:76:bd:b2:f5:4e:19:ad:0d:
3d:98:d6:8a:d6:b8:cb:2d:d0:24:93:0d:f8:08:f0:26:41:b2:
4d:98:cf:ed:14:8c:cd:df:2a:17:21:59:0a:27:b8:b9:bf:ad:
0a:f5:32:ea:5d:d2:1b:72:21:54:ae:e3:40:56:8e:41:1f:80:
aa:b4:d9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:28:22 2025 by rpki-client