This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/3256c7d1-17d7-32be-a7ef-a339929dca5c.roa
File: 3256c7d1-17d7-32be-a7ef-a339929dca5c.roa (raw, json)
Hash identifier: oS6kVsh9A7e+m/Ly734bYnOz7gI0EqKcTdJtKf/k7zc=
Subject key identifier: 39:BC:08:5A:96:3C:BD:E3:8A:FD:9D:85:86:B7:9D:17:14:29:FC:B6
Certificate issuer: /CN=15106386-88d8-4103-adeb-a6e7c684ed09
Certificate serial: 010D0C9F4328584BE45959D71610A72B32A12380
Authority key identifier: 97:96:AD:FA:13:B8:49:E5:BB:CE:A4:C0:40:17:DC:3E:AD:D2:A3:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/3256c7d1-17d7-32be-a7ef-a339929dca5c.roa
Signing time: Mon 17 Nov 2025 17:32:02 +0000
ROA not before: Mon 17 Nov 2025 17:32:02 +0000
ROA not after: Sun 15 Feb 2026 17:32:02 +0000
asID: 215607
IP address blocks: 208.66.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:e4:59:59:d7:16:10:a7:2b:32:a1:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15106386-88d8-4103-adeb-a6e7c684ed09
Validity
Not Before: Nov 17 17:32:02 2025 GMT
Not After : Feb 15 17:32:02 2026 GMT
Subject: CN=2a352525-a304-4b59-9494-7acddeb08734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:00:c6:24:f8:3a:38:9a:82:c1:0a:a7:f6:3c:
59:ee:84:e7:65:c0:da:8e:99:46:ce:40:7a:d0:36:
17:91:a4:97:c5:75:6b:25:79:c1:9c:a6:bd:81:58:
c7:f4:43:60:99:c0:e9:28:65:04:c3:c5:5f:08:13:
08:75:11:7b:1d:a6:f0:c5:4a:b2:cf:5e:9f:3f:4d:
5b:4b:12:ca:16:76:42:28:17:bd:4e:5e:d8:49:ec:
6a:15:17:10:7e:c5:ea:23:a1:af:f1:60:be:3b:0c:
52:6f:b0:08:4e:92:2b:fd:0e:ba:52:d0:68:a1:05:
d8:ff:51:52:d9:3c:51:a7:ca:cf:2c:75:a3:71:2d:
b1:98:72:51:59:b8:71:d5:1c:71:cf:3c:22:92:96:
c3:54:05:0f:6e:c9:93:35:2b:20:88:4d:c1:af:19:
f6:05:99:72:ea:f6:fd:4f:b0:e4:d7:d7:c0:9b:d0:
66:a9:57:18:ec:aa:8b:21:d3:1a:c9:9a:57:e6:ad:
21:ed:06:7e:70:f8:b3:18:22:c8:61:37:d3:c6:f1:
19:85:2a:6c:c1:f6:66:f3:b3:2c:b4:e5:58:26:c3:
e4:5a:2d:80:c4:d6:97:14:cf:1a:58:cc:4d:22:e6:
9e:2f:a4:bb:79:3d:60:63:7e:8a:ca:fc:40:2c:9a:
44:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BC:08:5A:96:3C:BD:E3:8A:FD:9D:85:86:B7:9D:17:14:29:FC:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/3256c7d1-17d7-32be-a7ef-a339929dca5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.crl
X509v3 Authority Key Identifier:
keyid:97:96:AD:FA:13:B8:49:E5:BB:CE:A4:C0:40:17:DC:3E:AD:D2:A3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer
sbgp-ipAddrBlock: critical
IPv4:
208.66.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:a5:2f:8d:1c:2a:3e:f9:a7:01:16:ce:9c:8c:d1:85:5e:53:
2c:e4:67:9e:1c:b3:00:b9:dc:18:a2:a5:2b:95:ab:2a:1f:93:
bd:34:26:01:4c:ae:87:2b:68:f4:f1:22:90:cb:69:34:3f:5f:
2c:7f:6e:4d:26:2b:6f:ef:30:68:de:f3:8e:5a:07:8e:c2:ba:
e8:9e:7f:2b:f0:88:1b:5c:93:27:d2:79:5d:d1:d0:bf:68:8c:
65:61:00:8e:2b:69:2c:01:ca:fc:70:47:b2:96:7d:55:30:4f:
ec:e6:9d:b3:57:67:cd:58:61:a4:66:1f:88:98:68:f5:fa:c6:
44:0a:13:f2:6e:a5:05:45:e0:65:06:45:ea:37:93:b4:5d:59:
cc:44:a7:1b:93:b3:69:44:4d:2e:99:3c:30:5d:ba:cb:84:cc:
c0:e8:fd:f9:9c:07:9c:50:67:19:cf:7c:3e:59:d8:d7:ce:fa:
a5:b2:0e:ab:9e:75:a5:c5:61:a9:93:16:ec:dc:9d:4b:00:33:
7b:9d:e7:3e:50:96:0e:da:9c:fd:74:32:51:94:92:3d:ed:06:
2e:b9:9d:8f:33:7d:e1:2c:f7:50:4f:6d:86:95:5e:ea:a3:43:
d7:01:cc:c7:2b:18:08:b3:01:de:5e:be:0b:29:36:b7:9e:39:
f7:ad:26:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:18:42 2025 by rpki-client