This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/cf21e818-cdaa-34fe-9d02-e17860ab533d.roa
File: cf21e818-cdaa-34fe-9d02-e17860ab533d.roa (raw, json)
Hash identifier: RV4wYD2aZG6ho6IhSWVIXEfTLyai1EX2m1YOaxHuyyo=
Subject key identifier: DB:12:4A:A6:C2:C7:FD:67:7F:3D:29:F3:ED:08:35:F9:59:8B:26:A7
Certificate issuer: /CN=405ae070-e9e9-4d3c-b449-868426ff2303
Certificate serial: 010D0C9F4328584C0C6B692133DB36031661AC80
Authority key identifier: F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/cf21e818-cdaa-34fe-9d02-e17860ab533d.roa
Signing time: Tue 02 Dec 2025 02:00:30 +0000
ROA not before: Tue 02 Dec 2025 02:00:30 +0000
ROA not after: Mon 02 Mar 2026 02:00:30 +0000
asID: 0
IP address blocks: 204.209.76.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 17 Dec 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:0c:6b:69:21:33:db:36:03:16:61:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405ae070-e9e9-4d3c-b449-868426ff2303
Validity
Not Before: Dec 2 02:00:30 2025 GMT
Not After : Mar 2 02:00:30 2026 GMT
Subject: CN=524b8a5e-18ff-4bda-8ee9-6fcc31df18a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:9a:cc:83:ab:72:de:b8:0f:12:e8:61:8f:
ce:0c:dd:56:d5:99:e8:31:b7:80:3e:94:d1:0d:78:
ee:1d:60:cd:e5:01:fa:ad:ba:2c:9d:3a:0b:16:2e:
34:d2:64:50:db:2c:01:37:e4:02:55:40:ad:2d:75:
73:0c:3a:6c:47:d1:5c:d7:0f:5e:14:76:fa:85:7c:
cf:c1:c7:f7:30:0a:ac:52:c5:bf:4a:50:f5:b7:b0:
79:5c:18:d9:91:94:df:a7:21:38:8c:d0:cc:09:96:
89:7f:61:6d:d9:2c:46:58:c3:d2:6a:4f:5d:5d:a4:
29:a3:29:e7:65:6a:32:47:20:dc:d3:b7:33:aa:78:
c4:82:9c:ca:de:71:47:42:42:3e:a8:bc:6f:ab:4a:
c7:3d:9e:76:99:50:bd:9d:e6:2e:3d:c6:58:f5:3a:
b5:58:0f:9b:07:4d:91:42:5f:0e:85:5d:75:1c:2b:
84:1f:45:84:93:92:95:9a:34:c6:9c:7e:cd:f8:9d:
66:ea:f1:9b:e7:0c:f2:74:46:63:c9:ae:a8:c1:af:
98:68:10:a8:ce:5f:17:7a:fe:34:5e:83:f7:f6:ca:
24:70:77:ea:5d:ef:8f:d2:e5:8a:a2:8e:a8:33:42:
61:50:36:ee:13:ef:a6:bf:20:4e:16:3c:3a:ab:97:
2a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:12:4A:A6:C2:C7:FD:67:7F:3D:29:F3:ED:08:35:F9:59:8B:26:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/cf21e818-cdaa-34fe-9d02-e17860ab533d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.crl
X509v3 Authority Key Identifier:
keyid:F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer
sbgp-ipAddrBlock: critical
IPv4:
204.209.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:9d:f4:7b:b0:d9:ac:89:1d:ca:b4:bb:da:e7:e3:41:d7:97:
be:b2:92:03:48:a6:35:23:7b:d0:d6:f6:12:a9:af:00:f2:43:
3e:d0:2c:09:aa:07:02:c6:2c:8c:36:00:76:33:e2:8a:da:2b:
f3:e8:1b:15:93:2d:9f:08:2e:41:88:1c:c6:19:04:c6:bd:81:
11:66:78:2e:ca:ef:8d:e8:18:98:57:fd:bf:68:05:5d:0a:83:
9b:67:61:95:24:41:a5:67:b7:94:06:1e:27:e8:66:26:99:03:
f0:bf:82:e6:06:07:fb:9f:bd:db:f8:a6:cc:6b:c3:e2:83:1a:
01:25:8b:2a:27:4b:e6:d6:53:ba:79:da:c8:c3:11:d4:dd:18:
8b:ce:8a:cc:81:f4:f3:90:24:23:7b:0c:7a:ee:ae:6f:74:2c:
b3:fd:0d:66:0d:83:6f:ed:21:c2:56:cc:b1:87:af:e5:e8:e0:
f7:d1:5c:fd:b9:42:21:6e:36:ba:f9:e0:ce:a8:04:1b:39:74:
2c:dc:ec:17:e8:d4:3b:f8:0e:a8:28:f4:c2:cc:1d:0e:0f:02:
47:ea:10:f5:10:15:5c:f9:d7:7f:59:d4:ec:8e:71:70:0f:78:
d3:aa:00:5c:f4:be:a2:00:2a:fa:76:96:ea:40:a6:df:05:b2:
88:97:cc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:07:48 2025 by rpki-client