This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa
File: df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa (raw, json)
Hash identifier: NZqszdIriEZgdHX8KxJfarKEJxgLUiGb2SY9ZcywSZA=
Subject key identifier: 04:E7:23:DC:1A:99:11:C2:75:95:35:BD:26:24:86:11:B2:AE:F5:FA
Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial: 010D0C9F4328584C0B0619A20DB7149C65B30700
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa
Signing time: Mon 01 Dec 2025 14:00:39 +0000
ROA not before: Mon 01 Dec 2025 14:00:39 +0000
ROA not after: Sun 01 Mar 2026 14:00:39 +0000
asID: 46841
IP address blocks: 100.42.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:0b:06:19:a2:0d:b7:14:9c:65:b3:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Validity
Not Before: Dec 1 14:00:39 2025 GMT
Not After : Mar 1 14:00:39 2026 GMT
Subject: CN=cbe7cb2f-37ff-47d0-bf09-9105dba917e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b7:84:ba:04:d4:c2:60:81:d7:4a:85:1b:80:
d5:26:65:ac:f3:6a:4b:48:be:ad:41:4f:43:3b:21:
90:48:f3:c7:f1:a4:d6:5e:90:4f:02:9d:40:c9:43:
ce:d3:dd:2d:27:0a:47:f2:87:e3:e2:33:ca:bf:cd:
93:84:8d:ec:59:25:4e:54:f7:7a:4d:1f:0e:57:e9:
76:ed:47:ab:b7:a7:6f:aa:0a:71:6e:33:29:11:0e:
b1:46:9b:87:39:20:57:1f:36:23:f9:22:c4:cb:6c:
a7:c1:0c:54:ae:ad:56:16:d3:b3:33:c3:38:be:9c:
6b:49:6c:b3:0d:45:e4:1f:be:7c:57:56:e0:b1:e8:
b7:07:e0:fd:8b:a4:f8:dc:3a:92:00:d0:43:2b:17:
18:f1:83:74:1f:79:4b:d4:c8:a1:bb:7d:a3:a3:ed:
fb:99:d3:c9:9e:7f:a2:fd:97:d2:e4:88:50:1f:41:
93:f9:1c:aa:f5:2a:42:e8:36:c4:16:2d:67:a1:dc:
40:a7:d6:0c:2d:fd:0f:13:53:17:09:2f:ae:e5:ef:
8b:0b:a5:97:3f:c7:ab:28:94:92:0d:59:f6:6b:16:
d1:14:37:2d:92:ee:8b:5c:f9:2e:80:08:d0:fa:3f:
bd:09:2e:6f:6f:0d:de:9b:64:eb:46:5b:d7:01:4d:
05:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E7:23:DC:1A:99:11:C2:75:95:35:BD:26:24:86:11:B2:AE:F5:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
X509v3 Authority Key Identifier:
keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
sbgp-ipAddrBlock: critical
IPv4:
100.42.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:84:63:f3:1d:bb:db:c3:fe:3f:99:e5:62:ae:b9:e1:81:80:
c7:97:99:ad:2b:c5:f1:de:9d:93:92:31:81:c8:60:06:67:46:
a5:c0:64:76:ea:9e:ce:e0:87:0c:e6:9e:4a:65:46:38:c8:bc:
65:03:28:c9:b2:02:32:cf:b1:4a:48:13:50:a3:be:69:13:a9:
80:75:b8:03:f5:ec:24:83:84:b9:69:29:5b:b2:77:cb:0f:77:
3a:fe:85:b7:1a:9f:c1:34:8b:c7:03:7e:5a:bd:5f:dd:33:db:
f8:58:f4:a5:19:92:18:3b:ed:8d:23:99:db:e1:d5:c8:fb:29:
95:c5:20:64:87:ea:14:57:3d:aa:98:4a:a0:9d:bf:43:73:39:
10:42:17:91:40:3f:ef:53:f8:f2:64:d7:b6:f5:01:bc:1c:53:
db:a5:a1:c8:95:41:8d:b5:05:cd:d1:94:79:4c:9d:ed:00:2d:
ee:b5:8f:e7:b0:1b:5c:6b:42:b8:a1:25:2b:c7:ec:80:ac:25:
36:5b:84:90:42:aa:0d:9b:5d:c8:bf:77:62:a1:3d:8b:e2:c4:
13:e5:45:0c:12:13:06:7f:02:25:8c:34:94:be:df:4b:b8:d8:
cb:d9:bd:b1:4c:fc:e5:93:8d:26:54:e7:d1:7f:83:6e:9d:3b:
6d:16:5b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:35:18 2025 by rpki-client