This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/b9b41ebd-8408-373c-9f8a-7115febbd080.roa
File: b9b41ebd-8408-373c-9f8a-7115febbd080.roa (raw, json)
Hash identifier: AamEmYpJpfd40M1MnS05Q8msx0jYBmwJSlMBh77dny4=
Subject key identifier: BC:A6:C6:69:03:CF:69:95:CD:52:29:7A:4B:15:71:2F:38:A6:35:48
Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial: 010D0C9F4328584BD8C5C38DD590A8039769C980
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/b9b41ebd-8408-373c-9f8a-7115febbd080.roa
Signing time: Thu 13 Nov 2025 14:00:38 +0000
ROA not before: Thu 13 Nov 2025 14:00:38 +0000
ROA not after: Wed 11 Feb 2026 14:00:38 +0000
asID: 398210
IP address blocks: 207.211.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d8:c5:c3:8d:d5:90:a8:03:97:69:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Validity
Not Before: Nov 13 14:00:38 2025 GMT
Not After : Feb 11 14:00:38 2026 GMT
Subject: CN=40711b95-6451-4d74-bdfb-48666f5e8006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:63:f5:d1:f4:8a:21:a7:86:da:b1:65:0e:71:
b4:47:3c:32:f3:a9:86:40:fc:ae:b2:42:84:d9:ef:
8a:e9:db:ce:cd:d2:29:b6:49:b4:02:07:d6:99:d6:
e7:d3:c1:97:5b:e3:c7:49:38:21:9a:c5:8d:97:d8:
9c:27:54:a6:95:17:a9:e3:0e:cd:32:66:fe:a4:5e:
a0:aa:8a:d0:19:81:26:89:76:c2:21:b7:fd:c2:30:
6d:f3:d8:78:e2:5a:6e:58:b0:af:ce:24:c5:27:a3:
7c:00:5c:86:a7:4d:e3:d2:2a:f2:ca:0f:3f:f4:46:
a2:e0:31:a1:34:19:14:83:26:4c:89:cd:2b:9d:18:
7e:a1:e0:5a:ed:2d:df:68:c4:6f:2c:5c:0f:ac:e1:
b0:f4:0c:aa:ae:83:01:9d:c0:41:b7:c1:4c:b8:74:
f9:f0:70:15:05:77:53:60:0b:65:90:f2:e9:92:ca:
88:55:af:80:99:48:55:82:a7:ca:8c:83:e3:1d:5c:
65:94:82:c4:ea:d7:a1:e9:22:22:3c:79:8c:b0:e9:
b7:48:e4:78:49:3c:a1:3c:75:43:0f:fc:9b:49:fe:
e7:7e:f1:33:d3:68:2c:a6:45:0b:43:72:ba:0f:ea:
47:de:69:5e:45:21:e8:73:d9:0a:8a:82:a5:05:88:
51:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A6:C6:69:03:CF:69:95:CD:52:29:7A:4B:15:71:2F:38:A6:35:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/b9b41ebd-8408-373c-9f8a-7115febbd080.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
X509v3 Authority Key Identifier:
keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
sbgp-ipAddrBlock: critical
IPv4:
207.211.242.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:a3:51:a3:f1:b5:bf:a8:26:59:a7:4f:c4:d3:14:f7:bc:f7:
a9:86:3c:d4:cc:b2:e2:fc:d0:11:19:85:fe:db:80:49:b9:36:
24:56:21:e9:0e:3f:ec:7d:5d:bd:8b:76:6e:f4:7f:62:df:c2:
33:fb:e5:38:d3:79:e0:d6:cc:77:1c:0a:0a:7c:97:f0:78:e7:
1a:43:12:d5:0b:17:25:f6:e8:ba:5b:43:3f:b6:8d:84:8b:ea:
bb:19:31:b6:65:5e:19:cc:da:d5:da:91:0c:ca:8b:1f:b6:88:
64:f1:20:1a:1d:71:c2:14:cb:16:84:cd:ac:85:f0:48:0c:f4:
6d:50:96:02:9f:a1:67:28:19:12:2d:c6:6e:2c:4f:d1:bc:2d:
89:08:5c:d3:2a:17:20:0f:56:cc:4e:40:b1:9b:ce:ac:f4:34:
2b:a9:37:74:01:80:9d:ed:3e:3c:80:dd:16:5d:e2:52:81:03:
8e:83:08:62:87:a9:3c:bf:91:74:f0:4a:d3:60:02:76:bd:9a:
bb:b2:22:03:75:43:81:e5:ae:62:5c:61:d0:16:b8:81:60:56:
03:90:0b:eb:08:39:d5:7f:c6:09:a3:13:60:66:e2:82:b4:09:
e8:e0:5e:fc:f4:d4:47:cf:21:75:61:c9:a6:7c:0d:f1:1a:16:
2b:37:24:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:13:50 2025 by rpki-client