This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3dbb6d78-ab13-367b-b2e0-80e7c1686156.roa
File: 3dbb6d78-ab13-367b-b2e0-80e7c1686156.roa (raw, json)
Hash identifier: wXYS4FC8Vr2vE/XujJP8gFTZD1vSvKvUylbISIo7wj0=
Subject key identifier: 3B:16:BC:DA:77:F2:C8:00:30:CA:50:CE:35:B8:61:5F:B4:82:47:28
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584C109B840E970025589C8A68A0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3dbb6d78-ab13-367b-b2e0-80e7c1686156.roa
Signing time: Wed 03 Dec 2025 14:00:38 +0000
ROA not before: Wed 03 Dec 2025 14:00:38 +0000
ROA not after: Tue 03 Mar 2026 14:00:38 +0000
asID: 397236
IP address blocks: 199.7.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:10:9b:84:0e:97:00:25:58:9c:8a:68:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 3 14:00:38 2025 GMT
Not After : Mar 3 14:00:38 2026 GMT
Subject: CN=61f1e39f-120a-4782-8e23-a55bb20c4805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d2:58:d9:86:c3:4a:17:10:99:05:74:9d:e5:
0d:61:8b:15:d0:86:2a:f1:c2:bc:2e:68:e4:18:4a:
d6:77:e5:4c:50:7e:4c:8d:68:ae:9b:f4:f1:be:ff:
a2:e8:11:0f:34:76:f5:9d:df:4a:f1:a5:f0:80:e2:
31:8a:c6:85:21:8f:f3:d2:e3:82:15:72:52:66:12:
4d:f9:cb:d6:bd:9d:e0:7b:82:bd:7b:22:46:50:cc:
47:6c:e0:f4:b5:68:9c:0a:0a:42:c4:fd:4d:26:92:
17:f8:c3:5e:bc:a8:d2:76:fd:9c:23:13:8b:d1:5f:
46:e3:72:48:64:72:37:74:37:fe:93:99:ed:4c:d7:
45:e2:5c:74:cf:4d:fc:1a:ef:59:5f:3a:b6:4a:49:
5a:11:6e:1d:0b:d5:c7:ce:8c:79:24:c2:45:74:ea:
28:30:38:3f:c7:5c:c2:17:2d:d5:cd:2c:58:ae:30:
1d:40:42:45:c6:73:dc:df:dc:8a:eb:6c:91:69:47:
18:f7:e1:36:94:f7:2f:09:75:cf:39:5d:2c:64:de:
b4:9e:4a:e6:e2:ad:c5:73:90:e4:4a:a0:b4:e2:74:
85:75:b6:9f:db:11:7b:a1:22:65:cf:8d:6d:62:59:
fe:2a:e5:47:71:59:40:0c:58:39:73:79:85:26:24:
1d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:16:BC:DA:77:F2:C8:00:30:CA:50:CE:35:B8:61:5F:B4:82:47:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3dbb6d78-ab13-367b-b2e0-80e7c1686156.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:28:84:e8:5d:ff:44:71:7c:2c:7a:7a:72:83:7e:8c:74:e4:
92:b3:2e:4b:c4:1a:f6:44:fb:c7:5a:e1:62:93:93:d9:6d:37:
76:1b:70:e1:af:1a:3b:f6:31:16:4b:d6:a6:48:36:26:ea:5d:
26:6c:0e:e4:52:1f:3e:1e:9d:b6:83:22:38:a4:0e:d5:1d:83:
28:b3:d9:30:0a:a0:53:58:cb:4b:bb:00:c6:1f:14:55:3c:ce:
0c:6e:33:e4:23:bf:22:43:c3:f4:67:d5:2c:e8:d8:b2:56:76:
27:63:2a:bb:7c:69:9c:b9:25:1b:a5:40:21:4e:c1:9f:0d:da:
92:c6:46:cc:e8:78:5f:4e:02:bf:1f:11:50:b3:ae:a2:f9:29:
13:14:fb:34:84:81:84:35:33:1b:0f:92:a6:ad:82:65:c4:6e:
03:3d:a5:74:4e:a4:ba:c3:66:ec:62:08:01:a4:b0:70:21:c1:
54:c0:20:42:36:d5:b7:11:df:66:00:14:a7:cf:be:70:4f:10:
97:ed:53:37:d2:53:af:83:a9:7e:bc:d0:46:ee:bf:32:3d:49:
e8:09:ff:5c:94:58:b0:45:7f:4b:2c:c1:da:fe:17:9a:ed:49:
19:0e:a6:d0:69:d3:e4:45:70:19:11:d3:79:22:3b:c7:00:95:
ed:f2:ae:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:01:25 2025 by rpki-client