This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa
File: 06aa229e-21d5-3132-8604-c88f6941821b.roa (raw, json)
Hash identifier: DzKCP94SkL2v5E6F7WpyzcXP69fY6VqbeqIuuxkfzWc=
Subject key identifier: 56:9E:55:83:9B:EA:2F:FD:97:30:B1:E6:9C:DF:2E:3F:29:2E:15:F9
Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Certificate serial: 010D0C9F4328584BF1E5E6223FBB55E13A007400
Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa
Signing time: Sat 22 Nov 2025 14:00:39 +0000
ROA not before: Sat 22 Nov 2025 14:00:39 +0000
ROA not after: Fri 20 Feb 2026 14:00:39 +0000
asID: 46432
IP address blocks: 208.88.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:f1:e5:e6:22:3f:bb:55:e1:3a:00:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Validity
Not Before: Nov 22 14:00:39 2025 GMT
Not After : Feb 20 14:00:39 2026 GMT
Subject: CN=cea46d94-e112-4099-8f1c-af7b3cf7f13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e7:40:36:a1:63:f8:78:f2:df:97:11:c2:f8:
ef:62:b8:60:e0:ff:71:b8:c5:3a:ff:20:2f:eb:08:
37:d6:42:3c:93:7a:b3:4c:75:38:c0:05:4f:93:56:
dc:d3:7d:0b:95:3e:9c:a8:6d:ec:ef:db:d9:d8:8d:
a0:5e:2d:1d:b4:3f:15:09:ae:c1:a5:2d:33:ec:dd:
10:90:f1:c3:30:85:42:45:0c:99:24:e9:f7:8e:8a:
0b:b0:f0:49:a7:da:db:e2:17:a9:69:25:14:53:ec:
dd:76:c0:73:9e:e8:d8:a4:2c:6e:c8:c7:38:f8:d0:
ff:5e:36:6b:bc:43:0e:3c:37:4a:c8:d8:15:6a:01:
47:a9:76:04:a2:ee:47:17:30:2d:42:7c:c0:33:fd:
53:f2:74:e7:e8:a2:95:fd:46:96:6c:fc:f4:74:04:
ed:ef:e3:0b:c7:8b:07:4a:25:af:b3:80:6a:34:05:
b9:8b:94:f4:b9:12:77:ba:65:87:93:75:b3:fa:0c:
55:7b:f5:ae:7f:d4:1d:21:8c:7d:60:d7:4b:c5:c1:
63:92:74:4c:ae:1c:6a:7b:e4:da:83:ec:66:5b:63:
00:67:bb:fe:92:c3:b0:3b:5e:fc:67:7e:c9:e3:83:
95:84:bc:e4:71:3e:55:3d:1b:f3:9d:81:0d:29:59:
51:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9E:55:83:9B:EA:2F:FD:97:30:B1:E6:9C:DF:2E:3F:29:2E:15:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl
X509v3 Authority Key Identifier:
keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
sbgp-ipAddrBlock: critical
IPv4:
208.88.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:d3:4e:cd:2f:b0:29:ba:e1:39:f2:67:9b:28:31:99:d0:5a:
8c:b8:4e:08:70:0f:8c:fc:ec:94:dc:48:47:22:6e:c9:1a:42:
ae:0c:73:9a:f7:05:09:06:bf:68:6e:a4:26:5b:92:0a:23:df:
62:33:17:a8:8b:49:a1:9a:78:45:5f:1f:ca:21:d2:5e:44:83:
be:79:bd:08:56:0a:b6:d4:50:e8:cc:c9:c8:74:8d:6e:dc:0c:
40:ff:97:fb:97:37:da:be:62:54:09:44:5e:38:79:26:64:f3:
9f:f6:bd:66:c6:62:75:32:5e:0f:86:ed:98:28:16:0e:6d:75:
b2:bf:d9:9a:23:6f:29:36:19:51:e0:01:dd:4f:9f:f5:fe:35:
1c:a4:6c:ac:9b:b7:04:74:20:ea:6c:18:7e:1a:df:6d:89:a1:
41:a1:6b:a7:c0:16:6e:56:ce:75:15:f9:55:b6:88:90:c9:e4:
fc:cc:0d:c9:1f:63:2a:7d:bc:c6:e2:07:b2:c4:0d:74:82:a8:
7d:18:7a:52:7b:15:21:3a:8e:e8:cf:b3:0e:d5:52:f4:d2:48:
05:69:2d:4d:6a:ce:67:0a:cc:44:c9:40:7e:60:84:3b:24:4d:
c2:98:1a:44:da:53:7e:d0:0e:b0:70:3f:8b:3e:dd:28:67:03:
e5:34:3d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:20:08 2025 by rpki-client