This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8658f928-bb2e-351c-baa0-b043397f7b78.roa
File: 8658f928-bb2e-351c-baa0-b043397f7b78.roa (raw, json)
Hash identifier: Q5WV0ZwET/D8THjqh+gC9Z9SJNgL4X6i2008Ns0q6wk=
Subject key identifier: 40:A9:97:C8:D2:1C:24:61:63:84:13:97:6F:07:3D:C5:4E:D9:0D:0E
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F4328584BEDB5CD407A261E16D5D72680
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8658f928-bb2e-351c-baa0-b043397f7b78.roa
Signing time: Fri 21 Nov 2025 02:00:30 +0000
ROA not before: Fri 21 Nov 2025 02:00:30 +0000
ROA not after: Thu 19 Feb 2026 02:00:30 +0000
asID: 13414
IP address blocks: 209.237.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ed:b5:cd:40:7a:26:1e:16:d5:d7:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Nov 21 02:00:30 2025 GMT
Not After : Feb 19 02:00:30 2026 GMT
Subject: CN=c4f49673-5ee0-4fe7-809c-37b339e2658c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2d:05:2e:21:c1:ce:55:f6:56:71:2c:ff:95:
ab:d8:da:6a:34:81:e8:cb:c4:38:87:99:6c:2f:a2:
4b:d9:5c:f4:e9:e2:fa:86:66:62:5b:9b:87:21:fd:
7e:0c:b7:ba:f1:40:47:55:43:6d:c4:d2:d8:98:9c:
90:93:a0:6b:bf:94:c6:31:35:a6:b4:44:1d:8c:11:
74:c3:2a:44:d5:70:d2:ad:e2:7a:9b:8e:3d:32:9f:
92:f3:84:40:54:48:ac:b5:73:65:ab:ba:ec:a3:a1:
3e:8d:5d:9b:78:73:27:8d:86:48:03:fa:9d:0b:74:
b7:6d:77:09:1a:06:35:e9:0d:68:04:e1:cf:16:e6:
b3:87:f6:6e:1b:f7:e2:9e:bb:c3:8f:d9:2d:a4:47:
42:c4:7d:a3:c6:41:9d:6c:02:cc:cf:5f:c5:e7:80:
90:49:cf:6e:9c:69:44:c1:c5:17:2b:92:e3:17:26:
03:c3:21:44:49:ca:93:05:01:1b:c7:c8:d2:7f:f2:
45:62:7b:b4:c2:ca:19:7b:33:e6:e5:d7:39:84:61:
be:6c:9d:9c:99:74:79:32:db:3a:49:fe:d4:28:fa:
33:21:ab:20:13:c3:43:30:c6:4b:a8:25:57:66:b4:
f9:a1:8e:89:d6:06:58:d8:e3:79:01:16:a9:8d:33:
30:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A9:97:C8:D2:1C:24:61:63:84:13:97:6F:07:3D:C5:4E:D9:0D:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8658f928-bb2e-351c-baa0-b043397f7b78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:69:d1:95:5d:13:98:90:5d:6d:56:34:14:83:0d:d1:60:a3:
fe:7e:e3:fc:7f:4a:94:3a:34:9d:fe:9a:8c:05:bd:ad:ad:dd:
16:cc:0e:cc:89:0a:a5:28:7b:c0:fc:27:f1:2e:e4:3f:9f:02:
c4:dc:0c:a4:c6:61:31:b1:5b:10:69:85:b2:66:29:c4:f2:0c:
57:c4:95:f6:ec:d5:93:30:25:3e:a2:59:00:cc:bc:11:c2:4d:
7e:63:d3:25:ff:1a:a3:da:cc:27:6a:0e:ac:5b:2c:33:8b:4c:
8b:9f:52:7e:d3:d1:f8:66:16:b5:2a:9f:d2:e1:5e:4b:35:56:
af:59:aa:25:1f:e6:e2:b2:9b:8d:21:d9:f2:c4:1a:48:4a:1d:
6a:78:4f:7e:cf:4a:1c:fd:03:63:4c:98:72:0b:6c:c5:94:5c:
40:49:d2:00:77:ab:c2:79:8f:1e:cb:01:30:98:80:43:45:02:
b4:10:dd:6d:0d:89:b1:65:d1:46:fd:f4:e0:ad:fe:3f:54:88:
aa:23:81:a7:49:b5:41:06:16:e4:39:bd:8f:36:f6:3a:dd:a9:
72:0b:44:83:0f:d4:2a:7c:59:61:68:2e:e5:31:41:4b:74:77:
dd:b0:52:58:e6:84:c3:82:58:8b:1a:09:07:c8:c0:c1:9d:7a:
8f:33:19:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:05:43 2025 by rpki-client