This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1529c059-7633-3836-940a-f5b311f13fd2.roa
File: 1529c059-7633-3836-940a-f5b311f13fd2.roa (raw, json)
Hash identifier: T8XLmiFza4Bqjqthzag9DOqBQ1SMk2jSIusdzHRWrx0=
Subject key identifier: D3:45:DB:7B:5A:B3:A9:5E:F1:2A:F5:2B:6E:E7:63:6A:A5:0F:6B:B5
Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial: 010D0C9F4328584BEAEB2E1B2473D3332ECFAC80
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1529c059-7633-3836-940a-f5b311f13fd2.roa
Signing time: Thu 20 Nov 2025 02:00:30 +0000
ROA not before: Thu 20 Nov 2025 02:00:30 +0000
ROA not after: Wed 18 Feb 2026 02:00:30 +0000
asID: 393885
IP address blocks: 64.71.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ea:eb:2e:1b:24:73:d3:33:2e:cf:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Validity
Not Before: Nov 20 02:00:30 2025 GMT
Not After : Feb 18 02:00:30 2026 GMT
Subject: CN=0d8295fd-64e6-46e9-a91a-050659d48c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:82:34:27:e1:2b:ce:d1:fb:cf:32:14:39:8e:
a1:53:84:2e:e2:d3:c1:aa:d5:c7:a5:a4:11:4c:bf:
eb:c1:c2:d8:5e:07:a2:3d:39:e1:5c:fe:d7:b5:85:
40:9c:e3:e7:2a:68:f9:90:f0:aa:c0:a9:a9:9f:0b:
9c:78:79:b2:02:fb:24:93:c4:50:2d:19:53:aa:a1:
68:c2:e0:f5:41:70:7d:f6:fc:fc:fe:f9:9d:70:44:
47:be:57:36:ba:bd:8e:81:2d:60:ba:f4:cc:90:c8:
85:c0:74:7b:22:e4:6f:86:4c:ae:7f:20:9c:52:19:
c3:cf:0e:1b:88:9c:8f:ae:66:a5:ef:9d:69:00:13:
32:aa:41:dd:33:00:ba:75:2b:04:34:eb:3a:02:a0:
5d:f1:9a:d9:1a:d3:17:9a:f8:ee:a9:35:5a:3c:e0:
22:08:c1:28:59:27:c4:ae:9c:f6:b8:36:9e:e5:a1:
43:23:6f:ff:83:10:fb:dc:7d:6c:75:e5:18:95:f7:
cc:d6:38:c0:60:3a:fd:a7:3f:76:b1:de:84:61:28:
f9:b9:dd:56:66:33:76:9c:5c:89:0f:ec:26:3f:4e:
ac:67:e1:3b:1c:d5:d6:da:f9:ab:27:51:0b:b4:0d:
11:88:d9:25:e8:48:7a:c9:21:59:84:e3:8f:0e:ca:
97:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:45:DB:7B:5A:B3:A9:5E:F1:2A:F5:2B:6E:E7:63:6A:A5:0F:6B:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1529c059-7633-3836-940a-f5b311f13fd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
X509v3 Authority Key Identifier:
keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.71.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d6:c4:36:93:e1:b2:15:e8:e6:e6:aa:dd:3d:cb:af:0b:ab:6e:
be:8f:7c:fa:30:9b:ce:1b:b4:2a:98:bd:07:df:09:42:b5:eb:
ec:49:8d:91:f7:e7:72:34:ae:96:0a:f2:bb:7d:6f:d8:33:eb:
53:e6:b9:23:e9:c6:ec:c1:8f:b3:2b:4c:6b:41:f9:50:b1:8a:
58:8b:e4:3e:62:c2:82:d8:4c:0a:2d:40:04:5f:d7:c9:39:0f:
24:f4:27:c3:53:6a:40:c3:7e:3a:77:d8:a7:88:74:bf:02:a8:
3f:e8:54:ae:b1:72:d5:78:e1:cd:ae:03:3d:b5:23:20:e7:0f:
41:35:98:00:42:ff:d9:84:f9:dc:85:c9:a5:74:5f:4c:6d:91:
bc:c9:87:90:94:db:dc:23:46:e2:55:80:40:ac:01:71:eb:f7:
57:79:46:e0:c9:ef:c6:5b:02:05:87:e5:2f:6e:bc:bd:fe:23:
10:57:b0:a3:72:27:6d:e3:57:da:a5:14:98:61:70:e7:51:24:
10:0a:ef:40:3e:0f:42:59:81:19:48:78:7b:c7:4f:ea:b4:cc:
c5:3c:3c:23:02:ab:32:6b:f9:fe:4b:29:f1:8e:f4:31:36:58:
b7:25:12:11:7c:5f:e2:66:62:30:ed:86:42:47:f5:5d:40:ad:
c0:da:65:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 14:20:49 2025 by rpki-client