This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/cfbac226-9694-3b77-98b0-76526b389042.roa
File: cfbac226-9694-3b77-98b0-76526b389042.roa (raw, json)
Hash identifier: GlrAwOLDlgs99qgp+W31yOiUIf7lgJkK79KGe3lKU88=
Subject key identifier: 50:AB:12:AC:46:A4:14:13:F0:7C:F8:EA:4C:D7:12:65:D8:D6:F1:22
Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial: 010D0C9F4328584C0B06282506683D283241EF10
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/cfbac226-9694-3b77-98b0-76526b389042.roa
Signing time: Mon 01 Dec 2025 14:00:39 +0000
ROA not before: Mon 01 Dec 2025 14:00:39 +0000
ROA not after: Sun 01 Mar 2026 14:00:39 +0000
asID: 25697
IP address blocks: 209.151.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:0b:06:28:25:06:68:3d:28:32:41:ef:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Validity
Not Before: Dec 1 14:00:39 2025 GMT
Not After : Mar 1 14:00:39 2026 GMT
Subject: CN=c7b76703-24f1-4c8f-9015-7c5a8756755f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:c0:97:98:2a:4b:e1:e5:a5:aa:d6:74:af:
b8:c3:80:a5:61:c7:8c:29:96:f4:85:2c:ac:9e:f3:
5b:51:a5:44:5b:57:c3:de:e7:74:b3:2b:df:99:cf:
f5:70:92:38:f3:5e:35:bb:2c:11:ae:47:cc:62:d5:
a4:c0:e6:8e:4f:ee:16:84:4c:c3:2d:82:04:fa:7b:
b7:71:1f:67:e4:2e:7a:75:b6:f5:fd:33:9f:c6:00:
1e:a6:98:09:b9:fe:a7:5a:18:13:e5:c7:e4:2b:f9:
d3:05:97:19:62:04:2a:71:1f:bb:e8:49:2f:c3:87:
94:f7:dd:02:10:c5:93:91:ff:09:ff:5f:23:b1:8d:
c9:9a:3d:12:7c:5d:6e:b9:7e:b9:34:97:96:c0:c3:
2c:9e:2c:29:1a:a4:42:4f:6c:47:b8:87:d0:fa:4e:
58:cc:df:bd:2a:92:25:5f:2c:28:60:78:cc:c1:11:
30:82:b8:2d:4f:31:7e:97:d8:74:eb:a1:b9:d2:58:
f5:05:9b:4b:fd:16:bd:d5:94:28:0f:c1:a3:46:dc:
4f:f1:75:58:42:be:38:bd:0b:45:5f:53:5f:30:a1:
4c:3f:c4:63:7c:59:37:46:9b:26:16:9b:45:77:7f:
ef:2c:dd:27:ef:0b:2d:b2:76:cd:90:df:cf:05:82:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AB:12:AC:46:A4:14:13:F0:7C:F8:EA:4C:D7:12:65:D8:D6:F1:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/cfbac226-9694-3b77-98b0-76526b389042.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
X509v3 Authority Key Identifier:
keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
sbgp-ipAddrBlock: critical
IPv4:
209.151.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:73:7a:7e:12:fd:a1:c0:d5:1a:6d:f2:24:d3:37:03:93:74:
4f:39:b0:4a:7e:36:5d:e6:a6:ad:33:ce:3f:e2:b7:e0:79:f1:
59:40:89:cd:39:c6:57:18:75:81:66:48:52:fe:fb:6d:04:c0:
1e:78:4e:b1:3c:2c:e3:68:b8:ab:c9:81:81:00:17:35:cf:4c:
50:68:eb:f6:07:4b:e3:18:75:45:55:04:3c:9d:03:e2:b9:52:
b6:df:ca:06:06:34:af:94:21:56:07:69:7f:f3:24:52:26:2c:
b9:44:a1:40:6f:5a:26:6a:55:44:3b:e1:8d:15:63:1f:42:06:
39:5c:50:16:0f:ba:67:e7:af:bc:eb:d0:f1:90:0d:4a:e9:a6:
7d:18:a6:be:10:94:10:10:9d:f5:8b:38:8e:26:f7:d9:f0:c2:
9c:e9:24:61:b0:ba:f4:40:9b:bb:3e:c0:26:d2:a0:9e:71:98:
d5:6e:0a:69:24:4f:2b:66:b4:83:ec:15:65:7f:61:df:3b:50:
a4:53:70:9f:7e:9d:ab:1c:37:20:63:6c:77:08:1d:6a:32:1b:
37:bd:90:f7:d9:bc:96:41:89:7c:32:e3:2c:0a:f3:83:e5:da:
7e:25:c5:d6:68:87:18:dd:83:fe:ff:34:db:4f:02:1d:e6:28:
41:eb:c5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:42:27 2025 by rpki-client