This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa
File: 31f66624-a6b9-3acd-938b-89b2386f5b28.roa (raw, json)
Hash identifier: b8VlLydPCJ/+WtVW94kn0hHbEDahUAjw3fJQNbBGVbM=
Subject key identifier: 9E:CD:36:52:E9:6B:84:DB:9E:D6:BD:4D:98:A6:A6:9D:91:BE:43:71
Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
Certificate serial: 010D0C9F4328584BFBAB4CE6A618A92416120C70
Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa
Signing time: Wed 26 Nov 2025 02:00:31 +0000
ROA not before: Wed 26 Nov 2025 02:00:31 +0000
ROA not after: Tue 24 Feb 2026 02:00:31 +0000
asID: 40788
IP address blocks: 108.168.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:fb:ab:4c:e6:a6:18:a9:24:16:12:0c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
Validity
Not Before: Nov 26 02:00:31 2025 GMT
Not After : Feb 24 02:00:31 2026 GMT
Subject: CN=6323eedf-fe70-4938-9786-c01b239d6da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c8:45:33:43:3a:13:7d:70:c9:d3:de:2b:d1:
f9:da:3c:96:1a:2d:7c:e9:d6:76:7c:05:88:d9:8c:
d1:87:26:74:f0:b0:dd:8a:99:7d:4a:e2:0e:b4:85:
96:69:34:eb:d8:7a:93:a9:20:21:88:54:48:e4:5b:
06:cd:3b:aa:29:c8:74:3b:44:58:9d:f5:b2:84:8a:
1c:12:77:e9:f7:d3:0f:f7:bb:a9:32:be:9a:7b:34:
e4:f8:2d:84:27:dc:c7:2a:75:3f:41:21:7d:85:c2:
19:04:16:d2:66:87:69:8d:94:f6:a0:37:08:82:8b:
ae:44:61:a8:26:46:5f:f5:d9:58:3c:61:ea:d4:82:
d9:4e:e6:17:9c:a6:4a:e4:84:44:fe:61:44:39:96:
76:e3:78:b4:ea:61:17:de:d7:fd:39:b9:e9:ef:b9:
b8:ee:8d:30:49:4d:d8:ee:3d:b3:29:16:93:28:3f:
f5:10:3c:5d:29:cb:aa:4e:65:43:ee:39:02:e3:a3:
a1:9c:c2:66:f3:74:79:40:52:57:e0:30:91:b2:52:
d6:98:ca:83:ca:26:cf:f3:53:d8:39:16:20:24:b9:
21:48:b5:06:b0:f2:77:1e:75:85:b6:da:4a:48:ed:
e7:bd:4a:04:ce:2e:31:4c:80:ab:48:fc:2c:b5:18:
60:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CD:36:52:E9:6B:84:DB:9E:D6:BD:4D:98:A6:A6:9D:91:BE:43:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl
X509v3 Authority Key Identifier:
keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
sbgp-ipAddrBlock: critical
IPv4:
108.168.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:dc:ab:ad:a0:c3:9d:86:84:be:b2:ca:5c:1f:5d:68:66:18:
3b:27:eb:db:86:26:ed:a0:0a:35:54:00:65:af:bd:6a:02:c1:
5c:ac:78:e8:02:54:54:bf:e3:61:01:df:8b:fa:4b:bd:30:76:
a1:7c:8b:44:e3:74:02:d8:d6:94:ac:3b:9f:4b:c9:22:6e:b2:
75:b5:15:e6:21:b0:91:01:a9:02:fe:a8:10:f3:e1:bd:3c:88:
54:42:5e:82:cd:17:a4:8b:2b:6e:84:3b:b1:1a:00:21:a5:ea:
7c:a6:c9:6c:bb:b7:3f:7b:6e:78:92:c3:19:84:c0:8d:27:e2:
43:02:65:1a:9c:b9:b4:3a:5c:c6:11:a7:38:5e:f9:0b:bb:83:
78:a6:0f:c2:13:4a:23:27:36:7e:aa:b7:b7:da:da:b2:54:da:
f4:2a:31:7e:67:e4:89:5e:16:41:1a:85:50:bf:ac:b1:7d:f0:
7e:33:fe:8a:f6:3b:e1:dc:c4:3a:66:f9:dd:c4:df:4a:d1:b8:
71:25:47:f7:17:d1:cc:a8:a4:09:b4:23:d6:76:27:68:65:f2:
8c:a2:f1:15:8e:ef:8d:e6:18:e0:1c:c7:25:34:27:a4:f1:55:
a7:9f:d5:e3:59:9f:30:f8:f4:d1:40:55:6e:5b:64:8c:11:09:
1d:be:17:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv7q0zmphipJBYSDHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl
MDU5MB4XDTI1MTEyNjAyMDAzMVoXDTI2MDIyNDAyMDAzMVowLzEtMCsGA1UEAxMk
NjMyM2VlZGYtZmU3MC00OTM4LTk3ODYtYzAxYjIzOWQ2ZGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMhFM0M6E31wydPeK9H52jyWGi186dZ2fAWI
2YzRhyZ08LDdipl9SuIOtIWWaTTr2HqTqSAhiFRI5FsGzTuqKch0O0RYnfWyhIoc
Enfp99MP97upMr6aezTk+C2EJ9zHKnU/QSF9hcIZBBbSZodpjZT2oDcIgouuRGGo
JkZf9dlYPGHq1ILZTuYXnKZK5IRE/mFEOZZ243i06mEX3tf9Obnp77m47o0wSU3Y
7j2zKRaTKD/1EDxdKcuqTmVD7jkC46OhnMJm83R5QFJX4DCRslLWmMqDyibP81PY
ORYgJLkhSLUGsPJ3HnWFttpKSO3nvUoEzi4xTICrSPwstRhgXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ7NNlLpa4Tbnta9TZimpp2RvkNxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5
YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvMzFmNjY2MjQtYTZiOS0z
YWNkLTkzOGItODliMjM4NmY1YjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj
MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh
ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy
NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbKgAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADLcq62gw52GhL6yylwfXWhmGDsn69uGJu2gCjVUAGWvvWoCwVyseOgC
VFS/42EB34v6S70wdqF8i0TjdALY1pSsO59LySJusnW1FeYhsJEBqQL+qBDz4b08
iFRCXoLNF6SLK26EO7EaACGl6nymyWy7tz97bniSwxmEwI0n4kMCZRqcubQ6XMYR
pzhe+Qu7g3imD8ITSiMnNn6qt7fa2rJU2vQqMX5n5IleFkEahVC/rLF98H4z/or2
O+HcxDpm+d3E30rRuHElR/cX0cyopAm0I9Z2J2hl8oyi8RWO743mGOAcxyU0J6Tx
Vaef1eNZnzD49NFAVW5bZIwRCR2+F2k=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:55:44 2025 by rpki-client