This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/60d21aa3-1eae-3a12-a499-e3df35394e5f.roa
File: 60d21aa3-1eae-3a12-a499-e3df35394e5f.roa (raw, json)
Hash identifier: k4lkZtSve1gpSgD9tj4gk5svjpCh85MEL5wU8l+Ss/4=
Subject key identifier: DA:29:A0:67:C0:1F:CD:9D:FC:50:2C:F8:23:69:3D:0E:95:A0:F3:3B
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584BFE764C8FDB3FEA8BBF9C74A0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/60d21aa3-1eae-3a12-a499-e3df35394e5f.roa
Signing time: Thu 27 Nov 2025 02:00:31 +0000
ROA not before: Thu 27 Nov 2025 02:00:31 +0000
ROA not after: Wed 25 Feb 2026 02:00:31 +0000
asID: 22773
IP address blocks: 98.161.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:fe:76:4c:8f:db:3f:ea:8b:bf:9c:74:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Nov 27 02:00:31 2025 GMT
Not After : Feb 25 02:00:31 2026 GMT
Subject: CN=405c14d3-f38a-421f-b8cd-24e48dd64dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:88:2d:80:36:dc:6a:3a:93:dc:30:98:5d:
c3:4b:e8:c9:43:e1:bc:21:0f:43:cc:7d:bc:53:bd:
46:a6:f3:c8:b9:f1:8d:c0:9e:02:ff:5c:e2:7e:25:
ea:79:b6:ac:82:9f:4e:48:75:cd:95:a3:b7:86:f2:
d5:37:34:1a:6e:35:77:c7:9f:17:f9:2f:15:ae:a0:
73:a7:24:06:37:09:8c:6f:1e:2e:08:7b:b4:3b:45:
3e:26:f6:01:fe:7e:f0:60:da:40:b0:b8:92:17:c3:
e3:28:44:dd:6e:b1:f6:20:67:e0:94:6d:0c:af:23:
5b:9e:93:4a:d5:38:50:27:07:f3:72:de:33:c8:e8:
14:fa:e3:4c:ef:23:7e:cd:c4:3f:95:64:a9:57:7c:
c4:6c:fb:a4:f6:17:76:57:58:c7:d7:4f:60:ea:f4:
76:de:40:ac:a7:b2:11:aa:9c:f7:e1:b6:3a:6e:fd:
ca:09:54:46:f7:a6:e2:80:ca:60:e4:a1:37:48:65:
8b:b1:95:78:21:9e:f9:87:bc:73:ea:34:ba:56:fe:
0d:d2:16:13:5c:90:2a:1d:e9:b4:32:f7:de:d3:2f:
d7:56:c9:a8:c7:fd:c8:0a:64:fe:ef:60:22:44:f5:
2f:16:b0:70:be:71:4c:c8:92:b6:cb:6f:20:c3:01:
42:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:29:A0:67:C0:1F:CD:9D:FC:50:2C:F8:23:69:3D:0E:95:A0:F3:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/60d21aa3-1eae-3a12-a499-e3df35394e5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.161.242.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:23:68:c5:dc:ba:16:f7:42:c5:5c:27:7b:a5:4e:10:c9:29:
f0:29:ea:63:7b:7e:7a:88:f4:aa:25:5f:e7:f2:0d:b8:50:d5:
91:2a:a5:9f:18:80:f5:61:0d:46:fd:a5:44:6d:ce:0f:79:72:
fa:fd:d5:01:3d:17:ee:a7:74:70:0f:f0:c2:44:8e:69:7b:dc:
28:f6:8a:1c:a0:4b:77:ac:3c:42:db:9b:08:3b:38:cc:3c:77:
92:54:64:d2:15:6e:3a:36:9c:03:3e:13:fd:5b:67:d7:5c:ac:
7a:9f:85:9d:29:c1:a0:24:96:65:22:66:00:22:75:59:ad:cb:
a4:0a:13:fc:f4:6c:10:4b:3a:9b:53:4b:bd:57:34:19:81:ef:
29:dc:db:73:4a:79:48:b3:07:9a:a5:99:2a:d3:ac:f4:ee:98:
8b:59:58:b6:9f:26:c3:f5:18:36:9a:64:5a:0e:ce:51:c1:52:
e1:53:53:f4:69:ee:4c:40:b5:59:dc:94:8d:a9:9c:88:da:52:
ad:f0:2f:8b:9b:26:3b:d2:a4:6b:21:4f:06:66:de:9d:37:cd:
f1:6f:cd:96:d4:43:c5:c2:29:b0:cd:48:48:b7:62:92:28:95:
1d:74:c9:d7:bf:08:65:7c:af:ca:dd:88:bd:7f:ef:48:42:20:
e3:7e:b4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:21:06 2025 by rpki-client