This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa
File: 2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa (raw, json)
Hash identifier: oupJEbyN+FKBkkZCCx0Eijl7J0OUBmdfKULdkY4ZfEQ=
Subject key identifier: 5B:E4:ED:05:66:04:7F:F5:7F:85:7C:05:73:6F:42:5E:CC:7A:D2:0E
Certificate issuer: /CN=0c71d09c-b853-44b9-8b34-8d5283774a5a
Certificate serial: 010D0C9F4328584C13662E435983410C41A91B00
Authority key identifier: 32:3A:C9:26:DD:08:FC:97:E4:9D:F6:2A:A4:C0:C0:FA:26:AB:40:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa
Signing time: Thu 04 Dec 2025 14:00:39 +0000
ROA not before: Thu 04 Dec 2025 14:00:39 +0000
ROA not after: Wed 04 Mar 2026 14:00:39 +0000
asID: 14721
IP address blocks: 208.86.116.0/22 maxlen: 24
208.91.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:13:66:2e:43:59:83:41:0c:41:a9:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c71d09c-b853-44b9-8b34-8d5283774a5a
Validity
Not Before: Dec 4 14:00:39 2025 GMT
Not After : Mar 4 14:00:39 2026 GMT
Subject: CN=71e1adf7-0d68-4186-a497-f7a566c6e71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d3:8f:73:78:9f:af:31:65:0b:c9:be:6f:4f:
86:a5:d1:5d:97:d8:04:06:b7:59:e6:f6:f5:38:0e:
0d:3a:29:30:64:4d:d4:ba:9c:be:0c:c1:f5:f6:ff:
d3:f4:3f:b6:06:69:9f:b8:8b:34:de:e4:a7:b4:26:
eb:21:79:95:f9:be:fa:98:17:eb:57:9a:04:3d:68:
fd:f7:ae:76:fd:8f:50:7f:d3:2d:a3:8b:10:73:ca:
f0:ae:8d:f0:41:88:c5:83:d7:00:e3:8a:7d:96:8d:
5f:7a:10:1a:77:52:be:1b:4c:74:77:53:40:4c:7f:
0e:ed:da:66:09:bb:8c:19:fc:0c:74:04:e9:86:00:
0b:dc:70:18:d1:1c:ce:bd:4b:74:c7:f6:34:7a:3b:
ec:cb:22:68:d7:3d:f8:da:58:03:35:6e:08:75:b6:
50:b2:9b:a5:2a:c8:da:d4:70:44:0b:7d:12:d2:ac:
50:e6:b0:f1:14:cf:ca:06:3f:cc:5e:ee:95:54:4c:
c0:27:6c:2e:f7:b5:e3:29:70:9d:da:f0:9f:06:79:
ff:e5:0b:e7:a9:b2:7c:44:d1:98:e6:33:81:78:43:
05:37:c9:ae:cb:b1:ea:03:b2:08:7d:68:89:9e:46:
01:4a:35:f2:1e:5c:9c:c6:61:7f:16:e1:a5:b2:19:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E4:ED:05:66:04:7F:F5:7F:85:7C:05:73:6F:42:5E:CC:7A:D2:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.crl
X509v3 Authority Key Identifier:
keyid:32:3A:C9:26:DD:08:FC:97:E4:9D:F6:2A:A4:C0:C0:FA:26:AB:40:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer
sbgp-ipAddrBlock: critical
IPv4:
208.86.116.0/22
208.91.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:1b:a3:01:96:88:e6:d0:cd:63:c3:97:d0:86:8e:84:6a:79:
ce:2e:88:f1:e0:c4:5b:ae:01:66:85:5b:e8:a0:4a:e9:7e:7f:
07:1d:02:0c:c1:b4:11:2e:1c:40:cf:22:9a:f7:fa:3d:1d:93:
90:0a:e5:09:1d:72:b4:c6:de:5e:f9:5b:cb:d3:1b:24:99:9b:
79:8d:82:18:f8:91:20:6f:38:d5:47:22:0d:88:3a:a0:af:bb:
e1:13:69:5c:36:37:3e:0b:18:f2:8b:fb:92:23:2b:15:54:56:
f6:73:fc:af:19:fe:7a:f3:9d:8a:7f:78:6f:3a:e2:95:37:29:
48:f8:93:3e:c4:55:ce:e1:0e:1b:a3:52:fc:8a:2a:a2:80:8c:
e7:0b:64:db:04:07:69:2a:11:2a:fd:e4:0a:7b:a4:d4:0b:0f:
d9:b0:b7:d8:d0:f1:d3:4a:c4:91:e0:71:a6:db:f1:84:1f:cd:
19:fc:ad:29:6f:c6:57:aa:92:2a:51:a4:bb:09:1b:60:be:3c:
77:9c:af:d0:23:06:be:ea:83:a4:ef:70:c3:94:f6:af:ac:69:
69:ab:17:0b:2b:95:7a:8a:0b:c2:73:88:1c:c1:55:c4:47:b9:
87:c0:f0:90:da:a6:2b:cc:83:74:cf:b7:29:a4:67:23:9b:56:
7a:a1:eb:f2
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEwTZi5DWYNBDEGpGwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGM3MWQwOWMtYjg1My00NGI5LThiMzQtOGQ1MjgzNzc0
YTVhMB4XDTI1MTIwNDE0MDAzOVoXDTI2MDMwNDE0MDAzOVowLzEtMCsGA1UEAxMk
NzFlMWFkZjctMGQ2OC00MTg2LWE0OTctZjdhNTY2YzZlNzFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltOPc3ifrzFlC8m+b0+GpdFdl9gEBrdZ5vb1
OA4NOikwZE3Uupy+DMH19v/T9D+2BmmfuIs03uSntCbrIXmV+b76mBfrV5oEPWj9
9652/Y9Qf9Mto4sQc8rwro3wQYjFg9cA44p9lo1fehAad1K+G0x0d1NATH8O7dpm
CbuMGfwMdATphgAL3HAY0RzOvUt0x/Y0ejvsyyJo1z342lgDNW4IdbZQspulKsja
1HBEC30S0qxQ5rDxFM/KBj/MXu6VVEzAJ2wu97XjKXCd2vCfBnn/5QvnqbJ8RNGY
5jOBeEMFN8muy7HqA7IIfWiJnkYBSjXyHlycxmF/FuGlshlHSwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFFvk7QVmBH/1f4V8BXNvQl7MetIOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzcx
ZDA5Yy1iODUzLTQ0YjktOGIzNC04ZDUyODM3NzRhNWEvMmEyZjA1OWQtZTE4MS0z
M2JmLThiYmQtMmM0YTVkMDkwODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGM3MWQwOWMtYjg1My00NGI5LThi
MzQtOGQ1MjgzNzc0YTVhLzBjNzFkMDljLWI4NTMtNDRiOS04YjM0LThkNTI4Mzc3
NGE1YS5jcmwwHwYDVR0jBBgwFoAUMjrJJt0I/JfknfYqpMDA+iarQNswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzcxZDA5Yy1iODUzLTQ0YjktOGIzNC04ZDUy
ODM3NzRhNWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC0FZ0AwQC
0FuYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGQbowGWiObQzWPDl9CGjoRqec4uiPHgxFuuAWaFW+igSul+
fwcdAgzBtBEuHEDPIpr3+j0dk5AK5QkdcrTG3l75W8vTGySZm3mNghj4kSBvONVH
Ig2IOqCvu+ETaVw2Nz4LGPKL+5IjKxVUVvZz/K8Z/nrznYp/eG864pU3KUj4kz7E
Vc7hDhujUvyKKqKAjOcLZNsEB2kqESr95Ap7pNQLD9mwt9jQ8dNKxJHgcabb8YQf
zRn8rSlvxleqkipRpLsJG2C+PHecr9AjBr7qg6TvcMOU9q+saWmrFwsrlXqKC8Jz
iBzBVcRHuYfA8JDapivMg3TPtymkZyObVnqh6/I=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:26:55 2025 by rpki-client