This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa
File: 9ff30824-1084-32e9-aa19-53c49b5db5a4.roa (raw, json)
Hash identifier: NVVrEQsVJJsrNWjDjj1adVP3aLNtvkDaMXyTU7jnjuc=
Subject key identifier: 78:6B:A1:D0:C0:78:F4:24:1F:C4:34:6D:3B:47:95:D8:D8:67:90:E2
Certificate issuer: /CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5
Certificate serial: 010D0C9F4328584C109B791C75EFEF807E2C0B30
Authority key identifier: 00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa
Signing time: Wed 03 Dec 2025 14:00:38 +0000
ROA not before: Wed 03 Dec 2025 14:00:38 +0000
ROA not after: Tue 03 Mar 2026 14:00:38 +0000
asID: 2902
IP address blocks: 198.59.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:10:9b:79:1c:75:ef:ef:80:7e:2c:0b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5
Validity
Not Before: Dec 3 14:00:38 2025 GMT
Not After : Mar 3 14:00:38 2026 GMT
Subject: CN=9780fa42-2583-4866-9b7c-c699928abadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:e3:4f:e3:e3:d5:cb:2e:a6:a4:bb:f3:d6:
a0:5e:58:06:77:15:91:c1:3d:73:73:9b:80:0e:86:
5b:e0:b2:f2:74:a8:f7:72:1d:41:83:1b:43:2d:e7:
aa:8b:05:77:fe:6b:18:4a:f3:be:b6:9b:c3:2b:19:
01:bc:d6:1d:f5:df:f5:5b:f5:b4:59:3e:10:77:22:
85:a7:7c:22:07:28:42:07:3a:c7:7c:d8:d9:b5:13:
61:1f:62:8a:cf:4d:59:75:ca:a0:fd:41:66:60:7e:
2f:81:82:57:21:9b:03:28:5b:ec:c4:be:01:a0:a7:
4c:5b:85:51:26:12:61:a6:b3:9b:7c:3e:76:49:49:
a8:d3:a1:ca:c4:87:d6:bd:93:b6:57:c3:6e:16:4f:
81:50:b2:a3:26:b2:46:a6:ec:db:c0:94:32:06:44:
12:39:01:65:71:d9:a7:b5:48:00:3c:24:27:a4:21:
e1:4c:01:4b:0f:d5:84:08:c9:31:20:ae:58:ff:24:
09:10:6b:81:51:d6:af:45:dd:54:6d:3f:71:51:96:
fa:5b:b9:63:be:8c:94:eb:35:77:9d:80:f9:cf:a0:
b3:17:c0:d9:5a:20:98:c6:80:a2:ef:71:4e:f3:5e:
2e:9d:ba:7f:ac:74:45:e1:ce:06:44:0f:b4:ae:b0:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6B:A1:D0:C0:78:F4:24:1F:C4:34:6D:3B:47:95:D8:D8:67:90:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl
X509v3 Authority Key Identifier:
keyid:00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer
sbgp-ipAddrBlock: critical
IPv4:
198.59.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:4c:f1:ed:1e:7e:de:eb:cb:61:a8:68:d7:6a:e8:79:73:78:
9c:a9:90:54:2f:87:ec:b6:f9:35:9d:4b:3d:90:75:92:16:ab:
00:16:f9:d0:69:d6:3d:e9:d9:5a:38:2f:84:fc:0f:e9:40:0b:
3a:8d:90:ed:1d:28:f7:14:bd:68:e1:d2:9a:41:42:5a:19:b9:
6d:b1:cc:0d:3f:48:c0:16:3b:24:01:c9:7b:ff:bd:7d:91:91:
26:25:20:5f:24:38:07:42:73:19:8a:d6:9f:8b:c7:f2:74:80:
8c:45:a1:7c:13:b1:96:6d:2f:7a:6a:5a:41:18:a9:a2:3b:2e:
ba:3d:8b:84:56:67:89:a3:99:cc:82:2f:43:7a:90:f5:c1:7c:
a6:72:b2:f5:e7:56:68:ec:ed:80:e2:29:9a:3b:7a:9f:be:60:
5e:11:61:aa:5b:1a:c5:b7:0d:a9:18:cd:62:ec:6e:92:c8:d0:
a5:c5:c6:53:28:77:30:61:2c:2d:a4:da:ca:ec:81:df:17:1a:
98:63:58:64:dd:98:e3:04:5b:4d:f0:ff:01:b0:df:aa:57:19:
e8:04:be:ac:f5:92:ea:00:c5:c8:ec:47:c0:f8:f8:bf:e9:57:
2c:6e:15:a4:3b:67:39:bd:d4:8e:da:ac:9f:18:06:70:5e:a4:
3f:e8:7e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:46:36 2025 by rpki-client