This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38392e302f32342d3234203d3e20313335333932.roa
File: 36342e3235332e38392e302f32342d3234203d3e20313335333932.roa (raw, json)
Hash identifier: Q7PDVyPay5ZD4ZB/hN828/d1GqrNz4D4NN4ytsszBCE=
Subject key identifier: C0:B8:A7:EA:30:91:BF:13:97:04:4B:78:74:2F:BF:52:4D:16:7B:BB
Certificate issuer: /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial: 2E1911E9C2CFE67E1D548774419D3B8E4526543F
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38392e302f32342d3234203d3e20313335333932.roa
Signing time: Mon 15 Dec 2025 21:15:35 +0000
ROA not before: Mon 15 Dec 2025 21:10:35 +0000
ROA not after: Mon 14 Dec 2026 21:15:35 +0000
asID: 135392
IP address blocks: 64.253.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 19 Dec 2025 07:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:19:11:e9:c2:cf:e6:7e:1d:54:87:74:41:9d:3b:8e:45:26:54:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Validity
Not Before: Dec 15 21:10:35 2025 GMT
Not After : Dec 14 21:15:35 2026 GMT
Subject: CN=C0B8A7EA3091BF1397044B78742FBF524D167BBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5d:b4:fc:e2:99:fa:c4:1d:74:1c:4b:46:81:
3a:9d:12:43:ee:9b:27:f1:ef:f8:82:85:51:20:bb:
ab:d5:f1:61:23:74:74:a5:bc:f1:52:87:83:c6:e2:
66:bd:c6:63:30:93:41:a4:df:65:fe:c2:38:6d:25:
1a:37:83:b0:b4:c7:36:c7:88:44:42:cb:51:5d:49:
5b:52:d9:91:4c:b2:de:82:98:b5:9b:76:a1:92:02:
5b:9f:44:7d:69:bc:e0:d3:d9:d1:d9:81:93:10:2e:
81:68:23:c4:3d:dc:f2:d7:2e:55:00:00:eb:d9:cd:
72:90:16:be:e4:54:33:f6:1f:96:ed:2d:86:1d:05:
54:01:04:d9:74:79:57:81:1c:ce:38:28:6c:a1:c2:
69:11:1d:9e:ef:1c:c6:93:fb:e6:4e:5d:54:0b:b6:
f6:3b:3e:2c:fb:a7:95:be:fd:3a:2c:6b:5c:9d:0a:
1a:cc:19:49:cc:34:88:ac:d2:a1:a0:1a:8e:27:73:
a8:23:6b:f1:76:2e:fb:b1:c7:29:62:d3:b5:6f:b5:
80:70:86:98:b7:f1:dc:ff:b3:8f:90:ae:f8:49:8d:
e5:e8:8b:34:18:80:d4:b0:20:ac:ff:fc:82:d3:60:
aa:01:b0:63:e8:ea:c6:39:27:ab:8e:41:0b:22:08:
55:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B8:A7:EA:30:91:BF:13:97:04:4B:78:74:2F:BF:52:4D:16:7B:BB
X509v3 Authority Key Identifier:
keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38392e302f32342d3234203d3e20313335333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.253.89.0/24
Signature Algorithm: sha256WithRSAEncryption
85:f6:84:8e:5c:ec:78:9d:4b:0b:bb:c3:4b:51:e9:a5:3b:6a:
22:6e:b5:e8:79:7b:4a:16:0b:fc:45:5c:97:99:c2:3b:6f:08:
b9:ba:8a:d0:ef:9c:16:b4:a4:64:6f:ae:67:d5:61:d0:2b:ba:
91:c5:90:a8:4b:04:34:33:c6:af:42:db:d4:61:ec:e7:75:c1:
de:8e:df:a3:97:5d:ab:84:ad:ec:59:37:75:01:0c:1d:65:ed:
e3:f3:bc:6e:17:56:b9:52:f7:88:97:e4:64:8f:e1:c1:6f:49:
2b:65:52:53:a6:b7:9a:b8:f2:ee:7d:50:75:0d:e2:a2:a5:ad:
46:df:a8:a2:bc:34:ff:ea:05:3b:be:54:92:1f:02:23:73:1e:
f1:67:2f:f6:10:58:8b:e3:17:fd:37:2e:9a:40:ba:4b:9f:b4:
aa:6f:42:1f:b8:84:92:f2:cf:13:ba:ca:d8:ce:00:60:88:8e:
cc:47:99:c1:de:e4:37:3f:a5:cd:a8:2d:d8:43:71:e7:49:cd:
7e:89:c9:2f:3b:e2:63:e7:3f:8d:42:66:99:da:5a:ca:fc:a6:
5a:ae:d2:ea:db:cb:42:92:12:72:b7:f8:b1:23:3b:ad:fd:0c:
3a:80:d7:ed:32:0a:5a:a0:f5:86:23:d6:10:39:55:78:88:45:
94:8e:34:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 17:55:14 2025 by rpki-client