This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/23d0f331-5da5-31e0-b663-9c0b7082918b.roa
File: 23d0f331-5da5-31e0-b663-9c0b7082918b.roa (raw, json)
Hash identifier: ST9Q+bcrX9PkBxSBkBOK7qUqORYx8nLB9Nu5OZVUMb0=
Subject key identifier: 25:87:27:40:5B:2A:26:F3:A5:10:60:9E:A3:08:E3:FA:29:0B:0A:53
Certificate issuer: /CN=3a6d409f-f6c6-4ba5-a674-6b6368d2478a
Certificate serial: 010D0C9F4328584BE8206CAA793B8744A6424700
Authority key identifier: F6:D4:94:D6:34:79:64:22:55:99:1E:B3:43:65:D0:58:C4:F5:B0:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/23d0f331-5da5-31e0-b663-9c0b7082918b.roa
Signing time: Wed 19 Nov 2025 02:00:30 +0000
ROA not before: Wed 19 Nov 2025 02:00:30 +0000
ROA not after: Tue 17 Feb 2026 02:00:30 +0000
asID: 18705
IP address blocks: 208.93.72.0/21 maxlen: 21
208.93.73.0/24 maxlen: 24
208.93.76.0/23 maxlen: 23
208.93.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:e8:20:6c:aa:79:3b:87:44:a6:42:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6d409f-f6c6-4ba5-a674-6b6368d2478a
Validity
Not Before: Nov 19 02:00:30 2025 GMT
Not After : Feb 17 02:00:30 2026 GMT
Subject: CN=74a7bedc-7e24-4d9f-b088-17ec89db9067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:70:ac:ad:7b:d7:d6:5a:98:ba:f3:ba:83:
80:c0:b5:eb:96:b0:68:39:70:70:38:a7:ee:d8:0a:
1e:81:d5:b9:5b:6c:3c:42:06:f6:8e:a6:94:fb:b1:
be:bb:15:3a:a7:aa:0c:0b:3e:99:c1:96:2d:60:72:
47:9b:da:45:2b:a7:6b:80:b0:93:25:1f:69:fc:52:
a9:ba:9b:b9:7c:c3:3c:95:c1:e3:85:0f:00:c8:62:
63:65:d4:6a:f3:e2:68:cf:4a:d9:79:c8:9c:c6:99:
a0:47:25:0e:21:08:10:36:b6:21:50:e0:6a:b8:3d:
da:fd:2d:ab:93:cf:e6:dd:f8:9d:ce:7b:d1:4a:df:
1e:33:92:5d:f8:0c:d5:53:46:a4:90:a0:a2:ba:d6:
c2:9a:94:36:c6:b5:bf:f5:05:8f:30:a3:d4:9b:42:
6e:7f:86:b2:10:73:8e:62:3a:60:29:80:a7:94:42:
de:ce:a5:61:dc:6c:9d:af:78:fb:03:6e:ad:33:e1:
c1:f6:f8:2d:6f:34:50:71:c6:f0:5c:7e:09:ba:9d:
d5:bf:9f:f4:82:95:bd:4d:87:6f:30:8d:23:af:54:
59:3a:21:3a:3c:99:26:eb:72:e8:5b:50:21:d6:ee:
e1:66:31:80:9a:e1:99:55:cf:49:1d:fb:c6:e9:76:
e0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:87:27:40:5B:2A:26:F3:A5:10:60:9E:A3:08:E3:FA:29:0B:0A:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/23d0f331-5da5-31e0-b663-9c0b7082918b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.crl
X509v3 Authority Key Identifier:
keyid:F6:D4:94:D6:34:79:64:22:55:99:1E:B3:43:65:D0:58:C4:F5:B0:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.cer
sbgp-ipAddrBlock: critical
IPv4:
208.93.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:a8:c5:c2:f3:f7:20:af:52:14:8f:5d:3b:50:1c:91:eb:a1:
62:30:28:78:17:be:fb:eb:64:cc:92:28:1d:d5:6e:6e:6a:af:
6f:e8:fb:ea:db:97:63:45:eb:77:8b:9d:17:b2:b4:b3:a0:ca:
21:ac:a0:e4:04:71:38:9f:59:eb:92:b9:58:3d:08:72:2a:7c:
9d:74:80:67:11:3b:fc:94:f0:b8:86:bf:2f:f3:c7:88:1e:a3:
2a:19:54:a6:42:61:d3:7b:9c:1e:a2:d1:62:ec:97:01:71:50:
38:d4:20:6c:d4:b5:2e:54:1b:85:2c:67:e7:f9:43:42:0e:25:
ff:2b:cc:6a:7d:c1:bd:7e:8e:a3:d0:5c:d2:6c:a2:24:69:8f:
da:6a:88:9c:50:9e:d3:2f:b1:23:6d:7a:19:e6:22:37:1e:8d:
32:51:d4:95:ff:84:34:64:2b:13:44:af:af:42:35:0a:6e:5a:
ca:e8:26:96:28:31:97:c6:45:6c:b2:b5:b3:3c:c5:40:00:76:
20:b9:aa:87:10:e0:40:6b:1b:a6:3e:e9:a4:5a:02:8c:50:68:
75:7b:cd:0f:e6:cf:2d:7e:43:45:17:89:53:e7:fc:e5:ae:70:
90:7f:c8:3f:e5:9d:4d:3e:67:50:34:c3:d9:9f:a6:d7:02:28:
01:83:80:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:35:44 2025 by rpki-client