This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/aad00c67-d09a-3dc1-bc47-581caacca75d.roa
File: aad00c67-d09a-3dc1-bc47-581caacca75d.roa (raw, json)
Hash identifier: VjaT7k1MWUjAtLA/ZOBXucfYTHEBeWB8WCLSaXnKLnI=
Subject key identifier: 4B:EC:F3:48:0B:E5:7D:FB:3A:72:D2:46:32:29:A4:8D:C4:26:CF:01
Certificate issuer: /CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a
Certificate serial: 010D0C9F4328584C06D60AC35328DA28DF5BFE80
Authority key identifier: 0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/aad00c67-d09a-3dc1-bc47-581caacca75d.roa
Signing time: Sun 30 Nov 2025 02:00:31 +0000
ROA not before: Sun 30 Nov 2025 02:00:31 +0000
ROA not after: Sat 28 Feb 2026 02:00:31 +0000
asID: 30313
IP address blocks: 152.216.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:06:d6:0a:c3:53:28:da:28:df:5b:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a
Validity
Not Before: Nov 30 02:00:31 2025 GMT
Not After : Feb 28 02:00:31 2026 GMT
Subject: CN=1a4aad79-a87e-4079-ab13-1697591da164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b6:a8:bf:ab:81:11:da:20:c2:b6:5c:10:8f:
72:7e:bf:7b:fe:24:4a:c3:8e:aa:70:eb:70:af:ca:
e5:5f:f3:0d:b4:e5:93:7d:9d:20:32:a4:44:14:25:
bf:0c:2a:64:48:4f:27:ed:01:be:b6:63:fb:7a:b6:
35:3b:7a:eb:79:d7:65:67:67:df:9b:b3:69:da:a4:
f4:de:3f:56:4b:1d:6f:bf:b8:41:13:48:64:46:2a:
8d:5f:4d:ea:91:ab:24:09:52:fb:97:da:5b:0a:d7:
84:29:40:4e:62:bd:89:2a:33:38:e7:c7:9e:b7:7f:
fa:a5:66:ff:b0:a0:e9:72:fb:8e:bd:88:78:ab:03:
b9:47:03:f0:e5:33:b3:5c:10:c2:63:99:17:b8:4b:
af:39:7d:c4:24:23:53:f9:bf:a0:75:76:99:83:65:
81:97:b4:9a:0a:1d:1c:34:78:68:bc:fd:e3:2c:ae:
a3:47:9a:ba:c3:2e:af:11:1c:4e:bf:1a:ed:f0:44:
60:ca:3a:6c:4f:13:f5:68:2e:cd:57:bf:25:2b:e2:
ee:87:fe:b7:7c:09:3d:10:ad:5f:7b:c8:ff:e5:93:
75:70:bb:84:da:78:0a:9b:68:a5:de:8e:45:a2:05:
bb:10:b2:2f:ea:e4:16:fd:24:54:04:82:05:4f:f7:
72:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EC:F3:48:0B:E5:7D:FB:3A:72:D2:46:32:29:A4:8D:C4:26:CF:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/aad00c67-d09a-3dc1-bc47-581caacca75d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl
X509v3 Authority Key Identifier:
keyid:0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.216.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:68:11:6b:79:b5:40:23:dd:9f:32:64:88:e7:b0:32:18:ef:
47:36:ac:09:be:80:83:af:9c:56:fa:10:8f:16:d9:87:52:45:
75:17:8b:ab:de:13:5a:76:61:2f:1a:b6:bd:9c:cd:b7:98:72:
45:8d:36:32:54:2f:78:29:c5:a2:3d:8f:ec:21:46:75:ff:00:
86:ac:d2:a6:02:27:d9:25:15:aa:c3:09:ba:f9:1d:3a:68:22:
6d:88:78:db:df:17:1a:5c:b0:1c:e9:ac:e1:7f:3c:f4:8a:43:
38:76:3d:60:84:bb:7d:70:08:a1:66:b9:99:29:d9:4d:95:8a:
22:48:41:c9:33:21:dc:d8:99:99:f9:78:99:69:92:c5:77:07:
9b:03:c8:38:e4:76:5d:c0:a1:6d:f0:ac:67:42:2d:8e:c3:e7:
9b:0e:55:ef:0b:63:75:17:d2:0d:a7:9c:70:5a:4e:66:0f:70:
8a:2b:e3:06:33:06:4f:44:b4:59:45:e7:31:72:b1:0a:bc:12:
b0:d3:b9:4f:a1:81:db:e6:15:22:71:cd:d2:6a:09:26:5c:90:
a0:3b:70:af:ce:16:90:aa:81:20:66:bb:91:30:88:0e:6a:a1:
17:20:3b:0e:7a:dd:01:50:78:e9:d0:28:23:96:63:85:26:54:
21:80:0a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:03:26 2025 by rpki-client