This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/028b0d9f-1ba0-3412-a831-2953d52969fb.roa
File: 028b0d9f-1ba0-3412-a831-2953d52969fb.roa (raw, json)
Hash identifier: Lo3GdAeL4c5wPs6/8y1AtswRnIb1jdIgr2GvwFyBLM8=
Subject key identifier: AB:3D:07:97:0A:7A:16:F0:65:EE:C5:B0:8C:BA:09:67:5F:75:B3:C2
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584BE3F07ED034E69DAA01FCAAC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/028b0d9f-1ba0-3412-a831-2953d52969fb.roa
Signing time: Mon 17 Nov 2025 14:00:39 +0000
ROA not before: Mon 17 Nov 2025 14:00:39 +0000
ROA not after: Sun 15 Feb 2026 14:00:39 +0000
asID: 22773
IP address blocks: 2001:579:2c::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:e3:f0:7e:d0:34:e6:9d:aa:01:fc:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Nov 17 14:00:39 2025 GMT
Not After : Feb 15 14:00:39 2026 GMT
Subject: CN=42db0700-887a-4479-9b3e-969de67e4928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:08:05:d2:81:fd:0d:fa:99:b0:5a:41:cc:
40:49:03:75:52:de:b8:14:cb:93:6e:8a:41:92:67:
fe:b6:9e:1b:35:2c:6a:3d:d5:0f:38:6f:83:dc:f8:
91:d1:87:75:45:3b:e7:8d:c8:8b:4f:b5:f6:18:1f:
88:ce:10:06:df:f2:35:74:6a:7f:10:cd:40:4e:cb:
26:e8:a6:50:74:9c:89:19:b0:d0:81:07:e5:69:26:
63:f4:65:7d:64:15:88:5d:e7:45:ad:61:4c:3f:00:
33:f1:02:f7:55:ce:aa:b6:06:79:93:f8:21:5b:6d:
37:23:cf:db:88:d4:e3:c7:f6:93:01:a0:3c:f5:ed:
c3:25:1f:f8:41:3f:3b:fa:3c:e7:bc:5c:b1:40:5a:
a6:be:43:0b:ec:0b:9c:3d:be:f6:0a:00:d4:fd:32:
51:ec:dd:84:01:34:57:6a:04:d0:15:8a:42:53:72:
9e:28:df:01:eb:bd:47:f9:3a:4c:68:ee:12:88:a6:
98:8f:00:ae:d9:f9:27:2c:6c:c8:a9:75:e0:cf:5a:
a9:40:fc:85:36:88:f5:74:cf:8c:62:da:22:5e:9d:
b7:9f:10:09:da:00:f3:5a:1f:1f:20:6b:5b:b4:23:
c1:e2:bf:ad:4f:31:db:3a:0b:09:89:f0:34:97:88:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3D:07:97:0A:7A:16:F0:65:EE:C5:B0:8C:BA:09:67:5F:75:B3:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/028b0d9f-1ba0-3412-a831-2953d52969fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:579:2c::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:99:01:c8:d6:1f:21:b5:5e:0e:a4:33:32:07:2d:9b:4f:ba:
be:ea:15:ed:5a:d6:01:cb:1b:80:26:09:4a:ff:4d:85:fb:d9:
54:ed:a3:66:45:a6:9b:b2:19:f2:da:0b:22:00:54:db:35:40:
c6:73:a3:69:be:92:da:59:79:d0:72:ce:1d:56:1d:8f:23:f3:
86:87:e6:dc:89:da:71:c8:02:bb:81:78:22:e3:93:a9:34:c0:
92:06:3b:ce:89:f8:bd:62:cd:d1:b4:a6:bd:b6:bb:29:cc:47:
3e:9c:14:48:fc:c7:2d:39:e0:5f:66:1c:cc:ec:1a:98:13:13:
9d:1c:4e:8a:83:65:94:3e:08:e9:08:bf:72:ed:d1:af:33:fc:
95:d7:d8:ad:86:c6:54:44:a2:cb:8e:b8:27:7d:94:4c:84:bb:
9d:32:75:f6:1e:0c:3a:d5:39:2c:a6:58:62:fa:88:d4:57:44:
a4:67:89:7b:31:55:c1:f3:41:57:6b:5b:52:5c:cf:02:89:c1:
c4:98:91:1e:58:d0:5d:36:78:7d:ad:03:98:ce:4a:b9:d0:80:
9b:35:48:77:bc:03:87:22:a4:92:62:c2:b8:d1:30:a1:61:89:
3f:16:96:bf:c5:92:5b:d1:f7:d7:84:53:17:93:48:c4:1c:f7:
ed:10:48:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:34:47 2025 by rpki-client