This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/cf98207c-3224-3b8e-9ff5-0932467f4cb5.roa
File: cf98207c-3224-3b8e-9ff5-0932467f4cb5.roa (raw, json)
Hash identifier: izPYFafhU8B46aRa0dm2JwnOqJ/ZHW4Rh8i3zMGfWC0=
Subject key identifier: 05:66:7D:F9:01:07:F6:2C:8A:6D:FB:B3:AC:B2:2E:5A:56:51:A1:3F
Certificate issuer: /CN=ce6a531d-4e38-485d-9236-07a5daf2b689
Certificate serial: 010D0C9F4328584C0C6B568389D317949D0EE2A8
Authority key identifier: D3:70:F0:32:C2:57:29:75:8C:88:0C:74:C6:54:99:05:AF:ED:13:DE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/cf98207c-3224-3b8e-9ff5-0932467f4cb5.roa
Signing time: Tue 02 Dec 2025 02:00:30 +0000
ROA not before: Tue 02 Dec 2025 02:00:30 +0000
ROA not after: Mon 02 Mar 2026 02:00:30 +0000
asID: 14618
IP address blocks: 192.34.32.0/23 maxlen: 24
2620:11b:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/ce6a531d-4e38-485d-9236-07a5daf2b689.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/ce6a531d-4e38-485d-9236-07a5daf2b689.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:0c:6b:56:83:89:d3:17:94:9d:0e:e2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6a531d-4e38-485d-9236-07a5daf2b689
Validity
Not Before: Dec 2 02:00:30 2025 GMT
Not After : Mar 2 02:00:30 2026 GMT
Subject: CN=24501fbb-f8dd-4d06-9182-d6b74ca30f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:14:1f:7b:35:af:60:e3:4c:59:31:04:ab:cd:
5a:02:49:a0:dc:96:d3:fe:12:07:3c:38:a0:c3:b0:
79:0a:d0:11:d8:d7:68:45:c6:e5:69:92:04:9b:87:
16:1f:1f:6c:4d:46:64:9b:6c:ea:54:b5:21:b1:13:
36:42:9e:85:96:3c:b3:52:5a:3b:4d:df:5a:bb:97:
cb:e5:2c:05:e5:87:e2:a1:3f:cc:44:a7:b2:aa:ab:
ce:ad:ac:9f:73:14:06:23:6a:75:d5:a1:5d:2c:0e:
bc:0a:29:f0:7a:2b:7b:98:98:e9:b7:16:26:74:08:
4a:49:aa:54:19:c3:be:eb:93:32:67:99:b0:09:b4:
db:9c:97:73:2b:78:c6:fc:9a:bc:2d:21:66:f9:79:
d5:4f:a0:2f:72:87:bd:61:b2:87:53:a7:c6:0c:c0:
e2:dd:89:fd:46:27:15:fa:bb:26:54:8e:7d:1e:44:
97:8d:4f:16:75:17:f3:2e:7e:49:cc:da:19:1d:40:
a8:04:3e:4d:d1:f6:ef:fd:67:d9:bb:7a:b6:4f:21:
ef:77:34:d2:29:ee:53:bc:f6:3c:d9:5d:fb:94:47:
5a:5c:e7:a4:06:42:08:5e:03:bc:ce:01:40:58:28:
e1:7e:c1:cf:1f:9e:da:c7:36:de:03:da:74:ca:3a:
d2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:66:7D:F9:01:07:F6:2C:8A:6D:FB:B3:AC:B2:2E:5A:56:51:A1:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/cf98207c-3224-3b8e-9ff5-0932467f4cb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/ce6a531d-4e38-485d-9236-07a5daf2b689.crl
X509v3 Authority Key Identifier:
keyid:D3:70:F0:32:C2:57:29:75:8C:88:0C:74:C6:54:99:05:AF:ED:13:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.32.0/23
IPv6:
2620:11b:2000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:aa:69:90:79:f7:9e:7c:8e:42:a5:b9:f5:b8:1b:6d:6f:68:
4f:ca:2f:0b:7f:38:6f:23:e6:15:7b:c3:b7:53:02:fa:91:66:
98:15:11:85:14:07:62:15:21:e3:20:5c:40:f4:a3:57:11:89:
9e:4e:7d:45:6d:2e:0f:b9:2d:dd:16:54:88:7d:2c:82:e1:d9:
3d:eb:a9:a2:1d:a1:04:70:fb:14:b1:92:4d:4d:19:17:a7:8f:
4c:43:33:3b:38:0b:c4:a6:27:3e:7f:09:5f:ee:6e:f4:a9:46:
5d:a4:31:30:04:72:48:79:ce:ea:85:04:16:ee:11:d2:63:98:
2f:e4:af:fc:05:7f:95:2b:0b:fb:2c:40:10:95:24:ec:48:1a:
45:0b:da:89:38:20:9c:a7:d5:2a:5d:0c:6c:04:f9:64:22:4a:
46:37:67:9b:ba:80:ae:17:ff:aa:0c:70:c0:93:30:1e:f4:29:
64:ca:12:b6:a0:d8:f5:12:84:eb:90:48:15:85:86:80:b0:2d:
64:4f:fa:a3:2d:74:87:30:2c:dc:67:85:43:64:9e:00:13:85:
76:91:ec:f0:c2:ca:48:c3:bf:fc:fb:c0:87:a4:50:fd:e1:5e:
93:85:d4:cb:6c:e4:26:9b:4b:35:0c:4b:83:dc:42:c1:4f:bc:
16:b9:01:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:02:58 2025 by rpki-client