This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/5130bef9-5e24-3975-9914-0892f8dec7d1.roa
File: 5130bef9-5e24-3975-9914-0892f8dec7d1.roa (raw, json)
Hash identifier: 6JGQNMkC3K7otxTmVgBhynkn4CIgJt0I90ittnWHUIM=
Subject key identifier: 7E:CD:DB:72:DA:E8:21:4E:CE:E2:AC:88:C8:B4:43:33:32:47:A1:FA
Certificate issuer: /CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1
Certificate serial: 010D0C9F4328584C0D022459D2E16FAE53B82A00
Authority key identifier: 85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/5130bef9-5e24-3975-9914-0892f8dec7d1.roa
Signing time: Wed 26 Nov 2025 14:00:39 +0000
ROA not before: Wed 26 Nov 2025 14:00:39 +0000
ROA not after: Tue 24 Feb 2026 14:00:39 +0000
asID: 401560
IP address blocks: 23.131.252.0/24 maxlen: 24
2602:f744::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:0d:02:24:59:d2:e1:6f:ae:53:b8:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1
Validity
Not Before: Nov 26 14:00:39 2025 GMT
Not After : Feb 24 14:00:39 2026 GMT
Subject: CN=5f7ade17-2b18-405f-bec1-3f3c0b09c5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c7:e1:cd:63:35:91:b0:dd:5c:85:ef:1b:e4:
f4:83:d4:e3:fd:c7:fe:da:e9:f6:85:de:14:09:5f:
d3:ad:3d:1f:a6:cd:95:8f:cd:b2:88:2a:59:e3:d5:
bc:d7:28:1c:b1:7b:e2:0c:07:b7:32:b2:2d:f2:6e:
2f:90:7a:fc:5d:fe:58:45:17:8a:19:bb:4e:8e:e5:
e6:03:f0:6f:08:e5:68:e8:9d:ba:1d:75:0c:ba:0d:
8f:b7:28:99:03:5e:f5:be:6d:86:01:00:a2:78:8d:
34:ee:55:7d:d4:20:78:05:f0:05:0a:b0:33:a3:fb:
8d:ac:6f:a1:f2:2f:ed:cc:6a:3d:1a:2b:b3:6f:a6:
be:b4:a1:77:1e:98:11:9c:8e:fe:8e:d4:2a:1c:9d:
a9:4e:b7:2b:02:31:52:a4:0d:62:2c:47:e5:6d:7d:
ea:14:5b:cc:1d:e2:24:67:2c:e0:f7:af:c0:88:ec:
6f:2c:58:43:5c:da:b8:46:1d:b9:0e:38:80:aa:ad:
6c:53:62:6f:d8:be:af:5a:52:fb:8d:f8:dd:fb:5d:
ad:f0:05:51:ae:76:66:3e:9e:ac:6c:5b:89:48:5f:
32:ab:49:e2:d5:9b:ad:fb:43:b5:4b:99:55:32:eb:
cd:5e:89:6b:a4:7d:8a:a7:8e:4a:c5:79:19:de:cf:
39:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CD:DB:72:DA:E8:21:4E:CE:E2:AC:88:C8:B4:43:33:32:47:A1:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/5130bef9-5e24-3975-9914-0892f8dec7d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl
X509v3 Authority Key Identifier:
keyid:85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.252.0/24
IPv6:
2602:f744::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:39:98:51:0b:78:07:f6:0d:01:a0:cc:b7:da:45:a5:d5:e4:
50:70:e8:bc:64:22:d1:cc:73:b1:f6:88:fa:55:89:d3:0c:f3:
a7:bc:e8:e9:0b:7a:f6:6e:92:14:95:f8:af:27:66:c7:3f:6b:
ac:b6:97:6d:e4:ad:fb:c4:7a:45:5a:4e:b9:6b:30:61:d2:c8:
21:26:59:38:00:be:aa:d1:3f:6c:09:6e:70:d8:c8:ab:d1:7b:
7d:3a:ea:eb:09:f0:b7:a7:bf:86:94:a4:98:73:28:bc:76:f4:
89:a9:0d:ad:b5:8f:ef:19:e7:54:a7:9e:9b:98:41:2c:db:f9:
67:17:4b:d0:44:2c:e0:9b:9e:03:22:ff:99:27:74:e6:f2:97:
71:58:4e:2b:dc:15:d7:5a:c3:0d:31:6b:8c:cf:33:a4:8a:65:
20:b0:58:b5:16:f0:1d:4e:4b:19:d0:f5:06:21:9d:ee:9f:a9:
2e:0c:87:ba:40:9a:62:56:90:49:23:1b:3c:38:dc:64:d5:6d:
2f:fa:97:36:e1:13:43:71:ad:94:57:c4:e8:a3:79:02:e5:3c:
60:09:4a:6b:4e:a6:13:ab:8d:d1:25:d6:9f:3c:77:c6:a2:fc:
74:07:1a:4b:34:0e:9d:c4:bb:72:1a:44:bd:91:1c:c2:80:77:
44:58:b0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:10:51 2025 by rpki-client