This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e20343031373736.roa
File: 3139322e3230382e31312e302f32342d3234203d3e20343031373736.roa (raw, json)
Hash identifier: sakm7EUMBF/sDDvBppI8SJfKHx31jCJWo5bL0ILGluc=
Subject key identifier: 38:D3:42:1D:DE:76:59:2F:5B:03:2C:BF:43:10:DC:9F:B7:A5:C0:04
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 26DC4B145C582B6017FEC3A868D538330E7BBE7B
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e20343031373736.roa
Signing time: Fri 05 Dec 2025 13:48:58 +0000
ROA not before: Fri 05 Dec 2025 13:43:58 +0000
ROA not after: Fri 04 Dec 2026 13:48:58 +0000
asID: 401776
IP address blocks: 192.208.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 10:38:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:dc:4b:14:5c:58:2b:60:17:fe:c3:a8:68:d5:38:33:0e:7b:be:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Dec 5 13:43:58 2025 GMT
Not After : Dec 4 13:48:58 2026 GMT
Subject: CN=38D3421DDE76592F5B032CBF4310DC9FB7A5C004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:38:44:0f:7b:ac:da:47:a3:26:5c:56:38:a5:
bc:bb:ca:2e:2d:79:01:a6:0b:fa:ab:b9:a0:4c:34:
25:95:ff:45:c1:7b:b4:25:6f:d6:72:20:83:c2:a2:
e7:34:e4:1f:08:29:ee:57:ba:67:7f:d1:67:d1:89:
9a:aa:db:23:cf:d7:df:e4:36:5e:c0:79:45:13:83:
91:23:a0:78:4a:fb:99:16:5a:ef:cc:8e:a7:75:90:
d7:b4:8b:35:e9:9c:ad:0e:91:e2:48:08:b7:82:f5:
1b:d0:4a:ec:f8:a2:3b:95:e3:9d:65:92:bd:c1:6e:
f7:9f:9c:63:89:bd:ac:74:ce:11:9b:37:e6:07:e6:
7a:21:0d:f2:1c:fb:92:27:be:19:37:59:4f:ea:cc:
49:43:17:28:d7:1d:c5:51:eb:6f:ff:17:01:09:9a:
c3:71:70:29:75:21:89:cd:d0:85:c9:ff:48:60:d2:
17:4e:46:bd:1a:d1:3b:9f:07:86:9f:d6:e1:8b:89:
0a:62:b3:f7:6b:56:be:d5:89:76:30:c5:87:48:7f:
f2:ca:59:e5:35:56:53:dc:83:4f:c0:f7:10:11:cf:
e6:a0:85:61:fe:1e:bd:d5:e5:df:e9:af:ba:65:98:
3c:1a:cb:d4:b5:91:ac:d5:c8:04:a0:0b:2b:11:44:
5f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D3:42:1D:DE:76:59:2F:5B:03:2C:BF:43:10:DC:9F:B7:A5:C0:04
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e20343031373736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.11.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:70:9c:af:a9:40:d4:47:6d:8a:98:c9:e1:68:99:68:72:53:
7e:f0:4b:8f:e8:c9:52:d0:af:92:31:35:74:13:8d:c4:92:99:
be:35:10:32:84:da:8d:3a:f1:7c:d4:cc:cd:39:01:01:2a:70:
23:87:5e:35:1f:1d:17:73:e7:e3:28:f3:4f:f2:bd:c0:4b:f8:
a8:25:6b:3f:6c:a0:90:96:98:59:6a:d9:63:ee:56:c3:a0:9d:
7a:9d:2a:ca:56:ff:99:27:12:10:45:36:97:72:8f:4d:00:67:
76:82:c5:3f:9d:a0:1c:84:47:05:d5:07:5b:a4:c8:c1:e0:52:
49:fd:8e:fd:c6:d5:1a:dd:cd:80:54:8a:9c:86:60:ba:3b:fe:
51:c1:25:46:17:bc:22:45:eb:f1:30:d8:c9:68:b5:0e:53:72:
d8:59:0a:3c:7c:9b:75:9d:21:85:d2:82:42:67:87:31:d6:0f:
0f:51:3c:e6:19:21:0e:bf:ea:c8:be:d8:88:e6:a6:00:47:2f:
e2:b5:63:6b:94:e1:4b:58:46:94:8c:0a:c8:e8:37:dd:b7:9c:
c3:a2:ce:9f:e6:c2:fe:f4:75:a0:30:a2:c3:1a:54:04:22:1e:
ba:a2:fd:97:5a:89:12:bb:55:ca:e3:8e:88:e1:fe:cc:95:00:
7a:b1:bf:36
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUJtxLFFxYK2AX/sOoaNU4Mw57vnswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzQ4N2U0ODFiNGEwZDM4MDA2MjZlZjA1OGY5YjlhZTk0
MTE3NDU3OTRlYmVhYTM0YjcwHhcNMjUxMjA1MTM0MzU4WhcNMjYxMjA0MTM0ODU4
WjAzMTEwLwYDVQQDEygzOEQzNDIxRERFNzY1OTJGNUIwMzJDQkY0MzEwREM5RkI3
QTVDMDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjhED3us2kej
JlxWOKW8u8ouLXkBpgv6q7mgTDQllf9FwXu0JW/WciCDwqLnNOQfCCnuV7pnf9Fn
0Ymaqtsjz9ff5DZewHlFE4ORI6B4SvuZFlrvzI6ndZDXtIs16ZytDpHiSAi3gvUb
0Ers+KI7leOdZZK9wW73n5xjib2sdM4RmzfmB+Z6IQ3yHPuSJ74ZN1lP6sxJQxco
1x3FUetv/xcBCZrDcXApdSGJzdCFyf9IYNIXTka9GtE7nweGn9bhi4kKYrP3a1a+
1Yl2MMWHSH/yylnlNVZT3INPwPcQEc/moIVh/h691eXf6a+6ZZg8GsvUtZGs1cgE
oAsrEURfzQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFDjTQh3edlkvWwMsv0MQ3J+3
pcAEMB8GA1UdIwQYMBaAFGYYdr8lkbhwIfpFJPVAZaEYwxVgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4MzYxMTczOGZmLzAv
NjYxODc2QkYyNTkxQjg3MDIxRkE0NTI0RjU0MDY1QTExOEMzMTU2MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1Lzk2MTJkOWE0LTgwM2QtNDQxMy1hZWY3LWIxMzNiNGZmODBiNy9jNDg3
ZTQ4MWI0YTBkMzgwMDYyNmVmMDU4ZjliOWFlOTQxMTc0NTc5NGViZWFhMzRiNy5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDE3
ODM2MTE3MzhmZi8wLzMxMzkzMjJlMzIzMDM4MmUzMTMxMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzQzMDMxMzczNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwNALMA0GCSqGSIb3DQEB
CwUAA4IBAQAtcJyvqUDUR22KmMnhaJloclN+8EuP6MlS0K+SMTV0E43Ekpm+NRAy
hNqNOvF81MzNOQEBKnAjh141Hx0Xc+fjKPNP8r3AS/ioJWs/bKCQlphZatlj7lbD
oJ16nSrKVv+ZJxIQRTaXco9NAGd2gsU/naAchEcF1QdbpMjB4FJJ/Y79xtUa3c2A
VIqchmC6O/5RwSVGF7wiRevxMNjJaLUOU3LYWQo8fJt1nSGF0oJCZ4cx1g8PUTzm
GSEOv+rIvtiI5qYARy/itWNrlOFLWEaUjArI6Dfdt5zDos6f5sL+9HWgMKLDGlQE
Ih66ov2XWokSu1XK446I4f7MlQB6sb82
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:07:04 2025 by rpki-client