This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/65f2dfe2-399b-3f42-9409-0f64e0a5e960.roa
File: 65f2dfe2-399b-3f42-9409-0f64e0a5e960.roa (raw, json)
Hash identifier: B3bQn9puuadqHDCcH2x6dN79Fhz21iBQqtMaLca/Wb8=
Subject key identifier: 18:4B:3B:F1:14:B9:E8:F4:14:AB:4C:02:DC:AA:C9:75:91:E1:33:64
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584BFE765E2C84B6540E12C317A0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/65f2dfe2-399b-3f42-9409-0f64e0a5e960.roa
Signing time: Thu 27 Nov 2025 02:00:31 +0000
ROA not before: Thu 27 Nov 2025 02:00:31 +0000
ROA not after: Wed 25 Feb 2026 02:00:31 +0000
asID: 22773
IP address blocks: 68.231.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:fe:76:5e:2c:84:b6:54:0e:12:c3:17:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Nov 27 02:00:31 2025 GMT
Not After : Feb 25 02:00:31 2026 GMT
Subject: CN=658de32a-4467-45e8-b6de-6bcca87bcb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7d:64:a7:31:9a:56:89:04:87:9a:75:a9:54:
0d:7f:1f:d2:b2:47:51:96:c2:90:2b:6d:72:80:0a:
09:1d:b0:1c:9e:9a:58:d3:fc:c6:85:c7:97:5a:17:
df:78:e1:bb:57:5d:38:41:27:12:89:fe:e2:ea:7d:
b2:8c:02:b7:bb:13:64:bb:13:64:f9:56:e3:10:fb:
86:d2:21:91:fa:34:9e:5b:db:54:b5:2f:c6:4d:48:
08:62:48:a6:dd:ca:70:3a:71:31:4f:52:17:7a:56:
93:e9:f8:bf:cf:41:a2:cd:f2:1d:39:3b:59:23:db:
0b:48:3e:f7:5f:07:03:85:b9:b2:ae:aa:73:35:35:
fc:b9:1f:3c:60:95:4a:a6:15:11:43:4e:c6:36:b1:
7f:83:b3:b3:df:77:f3:2a:a8:51:ac:16:fd:93:2f:
84:ba:7a:91:e3:71:d5:4b:01:73:ee:f8:d3:7e:f0:
99:45:5f:d5:78:de:62:37:db:35:35:f3:9e:5a:a7:
a3:66:6e:3a:3b:2e:47:3e:06:ec:09:a5:cb:05:8a:
97:e3:eb:32:f2:ee:70:24:d7:64:eb:d8:3f:e1:29:
ba:44:b4:bc:be:0c:28:69:04:84:73:6b:84:c1:82:
c2:b7:2b:12:6d:f3:d2:43:33:9c:ac:ae:3f:9f:d5:
cb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4B:3B:F1:14:B9:E8:F4:14:AB:4C:02:DC:AA:C9:75:91:E1:33:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/65f2dfe2-399b-3f42-9409-0f64e0a5e960.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.231.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:fd:29:27:c9:a8:c8:7f:8c:ba:c8:32:bf:42:8e:32:24:a2:
8c:2e:cd:9c:9c:a4:3b:da:bd:71:42:69:54:d4:3e:f3:8e:cf:
1f:fa:03:ea:18:0d:58:1b:59:d6:9c:79:22:16:c4:53:af:d2:
bb:06:9d:1c:79:80:e1:f4:6f:98:fb:e4:7b:2c:09:6b:33:54:
99:9b:37:5f:de:fd:4e:77:da:e3:01:56:12:23:42:18:f6:bb:
02:30:09:fe:21:4b:90:05:6d:13:71:25:6f:99:7c:45:ec:40:
7f:c5:a5:bd:2c:80:64:73:55:02:5a:67:a9:6e:2a:a5:dc:dc:
f8:e0:4f:b2:0a:f2:5c:b6:c5:ca:c1:dc:bc:f5:28:6e:5d:c7:
ce:ce:1f:c1:06:03:81:5b:d2:ef:15:28:60:ff:45:dd:2a:80:
a0:02:77:2f:e8:f5:5b:d2:f4:75:87:d5:e6:7f:f1:2c:29:05:
89:61:49:14:48:d0:f8:ed:6d:50:07:4c:21:e6:a2:4f:45:fa:
73:87:be:20:a3:c0:0f:d7:84:71:72:5b:4b:a7:a5:bf:d6:21:
e9:1a:28:40:05:3b:8d:6a:2b:cb:47:2c:f3:65:42:d3:0a:f5:
60:ed:5f:19:85:a2:84:45:c8:ea:5a:9f:3b:9e:e1:79:2f:ce:
13:63:ee:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:34:27 2025 by rpki-client