This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/523d1d87-a7e6-3a8d-9f5f-67a6cd5dfddb.roa
File: 523d1d87-a7e6-3a8d-9f5f-67a6cd5dfddb.roa (raw, json)
Hash identifier: 5X96NrtX62R9vk3PzCW3mMpSHegWvkAovKjjrbnslb0=
Subject key identifier: D7:BF:9A:67:7E:78:23:A2:5D:CA:8D:4D:A1:89:BA:CA:52:7E:47:FE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584BC10B851C40032B2E52DFD780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/523d1d87-a7e6-3a8d-9f5f-67a6cd5dfddb.roa
Signing time: Wed 05 Nov 2025 02:00:31 +0000
ROA not before: Wed 05 Nov 2025 02:00:31 +0000
ROA not after: Tue 03 Feb 2026 02:00:31 +0000
asID: 7725
IP address blocks: 71.204.100.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c1:0b:85:1c:40:03:2b:2e:52:df:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Nov 5 02:00:31 2025 GMT
Not After : Feb 3 02:00:31 2026 GMT
Subject: CN=ef0b5068-32ee-479b-abe8-be1ae11f61ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f8:63:28:89:dd:47:64:1a:0e:11:a8:8d:4c:
82:2a:c5:44:b2:6c:2c:a0:9c:e0:48:36:51:70:7c:
7f:e8:bc:4e:80:65:df:87:6c:0c:f6:5f:2a:72:61:
36:20:af:be:08:c9:f3:de:53:44:0b:92:d0:87:60:
ae:8f:98:d6:0b:fe:df:0d:f3:57:47:80:fb:d7:47:
16:dc:5a:1a:5e:fb:61:ab:5d:09:ad:cb:c1:80:64:
4a:55:9b:c0:c1:b7:ce:9c:de:e6:07:04:86:de:ad:
78:a0:39:66:86:67:2c:5b:f4:3e:2b:69:ba:7b:c0:
69:74:ef:99:aa:6f:7e:28:68:80:e7:d2:d3:8e:3d:
ca:ff:0b:dd:ed:06:2b:a3:54:a0:39:77:6f:fc:a5:
29:1d:2d:7d:e5:10:d6:7a:b6:02:57:b6:4c:11:b7:
d6:e0:9f:48:8d:c8:b2:f6:0e:65:26:43:5f:a9:84:
1a:08:2c:94:3d:b6:37:41:2b:8c:89:30:d7:fa:db:
89:1e:69:c4:8d:a8:7b:ac:86:e8:e3:65:7c:65:2e:
e7:97:5b:39:04:10:09:38:ed:d2:59:4a:0a:02:e5:
8a:68:c1:db:15:68:18:f1:69:fa:12:fb:06:af:72:
13:f4:25:eb:4e:72:fc:f7:8c:45:76:10:43:22:1a:
b2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BF:9A:67:7E:78:23:A2:5D:CA:8D:4D:A1:89:BA:CA:52:7E:47:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/523d1d87-a7e6-3a8d-9f5f-67a6cd5dfddb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.204.100.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:1c:26:cb:21:3d:cd:ad:d3:16:25:ad:2e:a4:31:9a:b1:89:
a4:1d:eb:b8:2f:9e:c5:eb:f8:74:b2:f9:b4:83:37:03:fd:0a:
53:f4:77:85:00:f2:58:43:7f:7f:9b:ee:f9:83:9e:ff:c8:46:
5d:62:e7:a3:06:74:66:a2:76:e9:86:e1:23:af:f3:ba:2b:3f:
5d:40:55:a4:15:9b:a5:09:e3:1b:b9:cd:24:99:7b:bd:b4:25:
32:9a:3b:97:dd:df:11:2c:81:41:2f:04:2c:05:6e:1e:e1:87:
79:19:42:0a:2c:fd:97:1e:8b:e5:ac:66:69:00:30:e5:f3:ee:
bd:f5:f6:07:24:88:10:72:c5:02:09:b4:c4:77:28:44:ea:ea:
ca:cb:07:b9:ae:1f:93:48:de:cf:b5:84:a1:c0:57:73:0a:af:
90:1d:5c:ec:34:7a:f5:ef:a6:c7:81:78:0f:26:de:9b:0c:a3:
a8:cf:f8:0b:60:bf:71:c4:5d:4f:ea:da:ab:ac:b4:a5:b5:53:
9c:dc:dc:b0:4e:8f:6a:bb:14:8c:6e:47:ce:32:4a:ca:2b:a4:
96:20:50:d3:fb:9c:4f:af:9f:c4:ac:01:e0:d3:32:82:28:52:
67:4e:2c:7e:c4:bf:a8:47:18:0f:48:c4:e2:e9:6e:19:7d:22:
72:05:d7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:34:18 2025 by rpki-client