This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/35593a8c-97f2-3a98-82cd-f95a91c2d5e7.roa
File: 35593a8c-97f2-3a98-82cd-f95a91c2d5e7.roa (raw, json)
Hash identifier: dA+8X47xIQGFRMXl4mQQkRGjaBsh4l46wFq5dkHyF3c=
Subject key identifier: 24:F6:E3:FF:94:4A:CE:31:2B:D9:86:36:1B:C4:92:90:73:78:36:E2
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584C109B83516E3DB4E7D275D300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/35593a8c-97f2-3a98-82cd-f95a91c2d5e7.roa
Signing time: Wed 03 Dec 2025 14:00:38 +0000
ROA not before: Wed 03 Dec 2025 14:00:38 +0000
ROA not after: Tue 03 Mar 2026 14:00:38 +0000
asID: 397225
IP address blocks: 199.7.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:10:9b:83:51:6e:3d:b4:e7:d2:75:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 3 14:00:38 2025 GMT
Not After : Mar 3 14:00:38 2026 GMT
Subject: CN=b2563ab2-e215-4d0f-b189-ff932c677aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:52:fc:31:b4:39:82:c3:33:c5:b1:6c:df:
2e:04:5f:0d:bf:42:1d:b2:1e:85:05:03:69:b3:bd:
73:63:b3:f4:ff:c5:2f:0c:b6:14:bb:47:84:b0:67:
bc:3f:e9:33:0e:28:79:28:a1:66:98:02:b1:e5:01:
fd:a2:80:70:6c:b3:dc:30:4d:f3:20:d3:43:c5:ca:
d5:30:82:05:7a:c6:18:52:28:07:ca:54:89:2e:d2:
6d:39:95:c5:2c:12:3d:37:f0:61:b0:40:bd:37:f3:
2e:90:ac:66:90:17:bb:fe:40:fc:18:4e:7d:f2:22:
9b:45:1c:43:bc:f7:55:57:cf:46:d4:19:fe:b0:83:
b6:04:83:db:83:9d:4d:cc:72:41:3a:c5:4d:47:cb:
a8:6f:28:6b:5c:65:80:36:c9:75:40:5c:86:d6:a9:
8a:08:6c:0f:40:2c:74:e2:1b:70:c5:59:6d:f0:88:
31:28:8d:f5:1d:fb:56:4c:ca:a8:26:bf:93:6d:47:
c8:22:d6:59:a0:49:f8:3e:ec:a6:db:13:0e:87:c2:
c7:de:7a:c2:93:60:04:6c:2d:d9:11:ec:7f:ce:e1:
b3:d9:26:d8:16:fc:10:b8:5f:7c:8e:98:da:ce:57:
03:97:d7:0f:56:09:f0:ea:62:1f:2e:02:71:ce:8c:
d1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F6:E3:FF:94:4A:CE:31:2B:D9:86:36:1B:C4:92:90:73:78:36:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/35593a8c-97f2-3a98-82cd-f95a91c2d5e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:ed:1e:fc:f0:c4:a6:3c:89:c1:9b:61:d2:b0:1c:35:e0:a5:
c0:8e:9f:17:51:f1:bd:a2:d7:a6:9b:c3:c6:50:67:9e:93:a4:
d3:09:49:b8:58:5a:1e:11:74:f9:27:a0:8a:a7:6d:a1:25:9c:
b7:f8:86:b2:e6:e0:b9:62:91:a2:0e:f7:39:44:a4:dc:25:fd:
9b:fa:c6:07:9a:af:a9:c0:68:d9:87:4a:22:1f:72:3d:53:73:
90:9b:0a:d3:6f:18:ad:5f:e6:30:1f:42:ac:fa:fa:29:41:87:
74:33:86:ca:41:1d:79:bb:b5:e0:e1:62:8d:79:93:24:75:f3:
92:e5:dd:07:81:48:b0:4d:b6:d0:a3:88:ce:4b:cc:a1:03:9b:
fd:ed:89:49:15:b7:77:53:a1:bc:31:ee:f4:dc:68:e5:47:76:
81:f4:5c:7e:88:70:1f:79:2d:9b:d6:1c:6d:ca:f5:5e:a5:b3:
2d:59:a3:f4:a9:84:a9:a7:01:d1:46:64:3d:ab:97:e0:79:3c:
94:d7:24:33:4a:66:fe:0f:95:66:4e:35:55:a7:64:ec:73:de:
23:e3:4e:ff:92:6d:3a:ee:a2:76:42:33:83:16:1a:81:e0:0e:
82:d7:c3:96:8d:42:37:1f:35:49:ed:83:9e:21:49:31:a6:2c:
b9:bc:02:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:53:58 2025 by rpki-client