This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/697f6835-591d-334a-a7c3-cca024d5d5d4.roa
File: 697f6835-591d-334a-a7c3-cca024d5d5d4.roa (raw, json)
Hash identifier: +XqhFDuLMuFTNW/hznxoslOL9Y4CUV3eJnOrjzu2vP0=
Subject key identifier: BA:D0:CD:21:47:BB:03:39:1B:22:88:1C:C3:4A:8F:9E:C7:9F:EB:E6
Certificate issuer: /CN=253f385b-feb4-4b22-9447-502d6e3a69ac
Certificate serial: 010D0C9F4328584BEC50B9F90CF0B924CA595100
Authority key identifier: 91:4A:4D:FF:64:6A:DA:27:F3:47:72:92:0A:7D:EE:AF:4E:EE:CD:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/697f6835-591d-334a-a7c3-cca024d5d5d4.roa
Signing time: Thu 20 Nov 2025 14:00:39 +0000
ROA not before: Thu 20 Nov 2025 14:00:39 +0000
ROA not after: Wed 18 Feb 2026 14:00:39 +0000
asID: 401725
IP address blocks: 2604:ae0:140::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ec:50:b9:f9:0c:f0:b9:24:ca:59:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253f385b-feb4-4b22-9447-502d6e3a69ac
Validity
Not Before: Nov 20 14:00:39 2025 GMT
Not After : Feb 18 14:00:39 2026 GMT
Subject: CN=78de43c5-4f1b-48ff-9333-1d35c42c7fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:04:d8:ef:e9:8a:92:8f:7c:ef:14:bf:45:f4:
2d:56:0a:20:6d:73:25:e7:db:2e:7f:57:5e:69:16:
05:74:a1:c6:c2:f7:98:76:ce:ea:99:f2:3f:ba:de:
78:54:0c:fd:c5:d0:02:99:d7:95:48:87:ff:a4:19:
e8:e5:d6:26:e4:d0:8c:13:ca:19:82:5e:90:74:62:
9a:32:cc:e4:85:55:f9:55:19:81:09:8a:7b:f9:50:
6d:f5:70:78:17:32:32:18:bb:d7:a2:3e:da:d7:d2:
6d:6d:81:1b:5f:ca:17:f9:49:bc:48:b8:5d:a8:14:
48:b5:ae:c4:3e:f5:81:89:e5:ad:6b:59:90:c0:db:
d9:9c:df:45:d8:2e:b6:f8:53:21:8e:a9:11:bd:64:
d0:e7:20:18:99:a7:25:c2:58:56:71:7c:e1:ba:8e:
80:83:c2:65:9c:69:8f:21:ae:f6:2a:f9:3b:7b:5b:
c4:67:1d:d7:32:c6:61:38:3c:58:02:9f:24:97:4f:
d2:d0:8f:10:4c:f0:d2:b4:97:ae:3f:14:23:d8:f3:
61:8d:e0:f7:b2:3f:79:77:c8:49:52:47:54:cd:50:
45:1f:6c:a3:45:88:de:ff:17:0a:be:70:65:69:55:
14:67:e1:d6:17:36:2b:16:3f:91:0d:57:8d:5b:92:
8b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D0:CD:21:47:BB:03:39:1B:22:88:1C:C3:4A:8F:9E:C7:9F:EB:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/697f6835-591d-334a-a7c3-cca024d5d5d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.crl
X509v3 Authority Key Identifier:
keyid:91:4A:4D:FF:64:6A:DA:27:F3:47:72:92:0A:7D:EE:AF:4E:EE:CD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:ae0:140::/42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:2f:3b:c3:2f:83:7c:b8:d5:03:0a:31:12:1d:0d:93:4a:04:
0c:4e:30:7a:15:e5:bb:57:d0:d0:9f:87:a6:f6:bc:50:61:b4:
4b:d0:62:e6:7c:32:76:f9:f0:31:34:9f:ca:ad:e4:45:eb:a0:
27:69:c5:11:57:f8:ad:90:09:57:0e:64:5e:fe:14:64:ac:88:
a0:39:ed:fd:23:aa:f6:e8:c9:f3:1c:c9:75:dd:92:f9:1f:be:
1b:8e:4e:ee:a7:71:15:0e:d2:dd:e3:56:a5:96:4b:eb:4e:13:
6c:9c:27:94:f8:f1:ed:29:fa:5a:d9:35:2c:cc:a8:78:e4:1d:
c1:22:b8:36:9b:d2:99:c6:e6:46:c2:7f:94:3f:ba:01:f9:5e:
11:48:45:bd:5d:6b:cd:ac:02:6b:b0:0d:c3:e4:d0:b4:6c:07:
73:df:2c:33:29:50:41:43:d8:83:db:a4:f9:59:be:e1:a8:51:
7c:34:10:2f:59:e6:57:52:95:e2:7a:8a:58:2d:74:fe:c2:64:
ce:36:9d:bf:8f:89:ae:7b:fc:48:12:0d:d4:88:d4:ea:8b:d1:
a6:da:9a:80:47:9b:46:52:2f:1f:7f:07:2f:92:f0:4d:23:b3:
13:f6:1b:98:01:59:9e:ab:c6:30:be:5f:90:42:b1:4d:ba:fc:
b7:7e:38:9d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvsULn5DPC5JMpZUQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUzZjM4NWItZmViNC00YjIyLTk0NDctNTAyZDZlM2E2
OWFjMB4XDTI1MTEyMDE0MDAzOVoXDTI2MDIxODE0MDAzOVowLzEtMCsGA1UEAxMk
NzhkZTQzYzUtNGYxYi00OGZmLTkzMzMtMWQzNWM0MmM3ZmIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqATY7+mKko987xS/RfQtVgogbXMl59suf1de
aRYFdKHGwveYds7qmfI/ut54VAz9xdACmdeVSIf/pBno5dYm5NCME8oZgl6QdGKa
MszkhVX5VRmBCYp7+VBt9XB4FzIyGLvXoj7a19JtbYEbX8oX+Um8SLhdqBRIta7E
PvWBieWta1mQwNvZnN9F2C62+FMhjqkRvWTQ5yAYmaclwlhWcXzhuo6Ag8JlnGmP
Ia72Kvk7e1vEZx3XMsZhODxYAp8kl0/S0I8QTPDStJeuPxQj2PNhjeD3sj95d8hJ
UkdUzVBFH2yjRYje/xcKvnBlaVUUZ+HWFzYrFj+RDVeNW5KLOQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLrQzSFHuwM5GyKIHMNKj57Hn+vmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yNTNm
Mzg1Yi1mZWI0LTRiMjItOTQ0Ny01MDJkNmUzYTY5YWMvNjk3ZjY4MzUtNTkxZC0z
MzRhLWE3YzMtY2NhMDI0ZDVkNWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjUzZjM4NWItZmViNC00YjIyLTk0
NDctNTAyZDZlM2E2OWFjLzI1M2YzODViLWZlYjQtNGIyMi05NDQ3LTUwMmQ2ZTNh
NjlhYy5jcmwwHwYDVR0jBBgwFoAUkUpN/2Rq2ifzR3KSCn3ur07uzf8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8yNTNmMzg1Yi1mZWI0LTRiMjItOTQ0Ny01MDJk
NmUzYTY5YWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgQK4AFA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIAvO8Mvg3y41QMKMRIdDZNKBAxOMHoV5btX0NCfh6b2vFBhtEvQ
YuZ8Mnb58DE0n8qt5EXroCdpxRFX+K2QCVcOZF7+FGSsiKA57f0jqvboyfMcyXXd
kvkfvhuOTu6ncRUO0t3jVqWWS+tOE2ycJ5T48e0p+lrZNSzMqHjkHcEiuDab0pnG
5kbCf5Q/ugH5XhFIRb1da82sAmuwDcPk0LRsB3PfLDMpUEFD2IPbpPlZvuGoUXw0
EC9Z5ldSleJ6ilgtdP7CZM42nb+Pia57/EgSDdSI1OqL0abamoBHm0ZSLx9/By+S
8E0jsxP2G5gBWZ6rxjC+X5BCsU26/Ld+OJ0=
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:52:06 2025 by rpki-client