This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/0d0d9704-647b-32f6-9304-e2dd0f7e7d05.roa
File: 0d0d9704-647b-32f6-9304-e2dd0f7e7d05.roa (raw, json)
Hash identifier: KoghvPk4wQLadsNRgXMqZDXG2yKOry4PJgkidIDlClU=
Subject key identifier: 7F:54:DE:8F:39:7A:24:44:12:CF:75:16:97:DB:15:9A:E1:71:E2:5E
Certificate issuer: /CN=23fa747f-0e53-4654-913d-ebe4ae8f453b
Certificate serial: 010D0C9F4328584C18FB708F9EA03B318FDD8BA0
Authority key identifier: 4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/0d0d9704-647b-32f6-9304-e2dd0f7e7d05.roa
Signing time: Sat 06 Dec 2025 14:00:38 +0000
ROA not before: Sat 06 Dec 2025 14:00:38 +0000
ROA not after: Fri 06 Mar 2026 14:00:38 +0000
asID: 11170
IP address blocks: 74.118.152.0/21 maxlen: 24
142.147.55.0/24 maxlen: 24
208.79.240.0/22 maxlen: 24
2607:fe70::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:18:fb:70:8f:9e:a0:3b:31:8f:dd:8b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23fa747f-0e53-4654-913d-ebe4ae8f453b
Validity
Not Before: Dec 6 14:00:38 2025 GMT
Not After : Mar 6 14:00:38 2026 GMT
Subject: CN=61a19008-ff8d-435a-b820-112b9ab7fc2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:78:cd:fe:aa:1c:1b:37:3c:b1:06:28:e0:b9:
9a:4b:f2:f0:16:5c:b9:14:64:1b:cf:c7:1f:28:75:
46:4d:da:9e:3f:26:8c:1f:d7:fb:3b:ba:58:d9:6d:
6d:3c:13:82:9d:04:02:a1:32:0e:bd:d5:24:05:0a:
ec:88:31:25:be:8c:58:09:9f:92:7e:5e:75:62:63:
38:e8:d9:8c:ee:2c:ee:29:04:a9:9f:2f:85:0e:24:
b3:ef:02:3b:8c:63:e6:1e:ba:bf:df:e3:46:d7:95:
53:4d:fe:0f:16:16:0d:9e:da:cd:c0:80:09:a7:13:
f2:f3:eb:6a:99:77:d0:54:b8:be:7f:76:93:2f:12:
45:28:2c:ce:9b:e7:ad:64:c1:a1:a4:fe:dd:f1:be:
0f:5e:22:4e:d7:e5:f3:55:0b:c1:86:15:e4:03:89:
98:52:0e:eb:c7:2e:ff:74:e3:d1:b1:b7:cb:db:ff:
ff:3a:d4:a2:09:e2:a1:c1:5a:7e:d1:e5:f1:d9:a6:
db:a7:d7:dd:d0:6e:c5:01:d5:19:97:1a:87:cd:25:
80:3a:fd:66:6f:f2:5b:31:d9:8b:d9:20:d6:2e:0f:
42:d1:84:9f:1b:69:89:e2:ee:8f:28:48:3b:61:91:
e7:3f:e2:1a:4e:44:37:5b:3c:7e:45:3c:c8:c6:5c:
4b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:54:DE:8F:39:7A:24:44:12:CF:75:16:97:DB:15:9A:E1:71:E2:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/0d0d9704-647b-32f6-9304-e2dd0f7e7d05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl
X509v3 Authority Key Identifier:
keyid:4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer
sbgp-ipAddrBlock: critical
IPv4:
74.118.152.0/21
142.147.55.0/24
208.79.240.0/22
IPv6:
2607:fe70::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:c6:25:e7:05:39:0f:0a:cf:19:3c:49:9e:41:fa:77:8c:49:
73:c9:8d:4a:63:db:e9:8b:da:b7:80:72:b8:41:26:c5:58:81:
82:d2:4b:6c:da:1c:9c:65:ce:b6:ce:4b:2a:3a:ff:3b:e0:09:
16:ef:a5:74:2a:b1:1a:58:f3:45:88:38:46:ac:de:dc:93:9b:
66:8d:7e:33:f1:45:80:58:60:48:eb:dc:05:53:ef:24:cd:8a:
24:8b:d5:19:7b:2a:52:d8:a3:a9:64:69:7f:6f:27:a4:d3:6b:
21:48:d5:59:46:d3:aa:d0:fa:a7:32:24:61:50:ef:18:cf:1d:
cc:a3:56:cb:1c:ad:5b:e7:46:21:39:57:f7:31:b1:80:8d:a8:
7c:47:16:87:ca:1f:3c:f6:8e:75:fb:4f:0f:a8:83:fd:80:8d:
22:90:d3:8e:f2:21:40:ed:4f:24:b6:e6:ec:5a:cf:25:08:76:
52:e2:9e:46:85:d9:cb:de:2a:d0:97:e3:ae:80:b2:c3:67:b7:
ac:9a:2d:78:d7:a2:52:dd:04:65:4c:6d:ec:1a:14:9e:b8:90:
37:38:88:10:1a:61:7d:21:fb:80:2b:8e:9f:55:ee:4b:3f:a6:
2a:09:87:4c:d7:4f:57:9a:a5:4d:58:13:ca:f7:dc:3f:a9:c6:
3b:19:2f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:10:28 2025 by rpki-client