This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67b53d28-d621-3534-939a-7549ed1da0a2.roa
File: 67b53d28-d621-3534-939a-7549ed1da0a2.roa (raw, json)
Hash identifier: AJ+i/bJDz9sac9/khLlv9uJbHmkr1qZJdQkjbN0NB+E=
Subject key identifier: BB:CA:DB:87:A8:34:D9:EB:08:3B:37:C7:79:7C:5F:91:17:6A:3A:FD
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584C215B9E01D1BEF38400132380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67b53d28-d621-3534-939a-7549ed1da0a2.roa
Signing time: Tue 09 Dec 2025 14:00:38 +0000
ROA not before: Tue 09 Dec 2025 14:00:38 +0000
ROA not after: Mon 09 Mar 2026 13:00:38 +0000
asID: 0
IP address blocks: 209.200.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:21:5b:9e:01:d1:be:f3:84:00:13:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 9 14:00:38 2025 GMT
Not After : Mar 9 13:00:38 2026 GMT
Subject: CN=7677b590-642c-4b61-88b1-a4fc60435cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d4:68:71:5a:20:ec:64:ae:c0:be:87:53:6e:
f3:75:26:8d:36:35:23:50:e0:21:6e:ed:d9:10:2e:
9f:7b:16:2b:ee:08:86:a3:af:92:65:01:b3:59:d4:
9d:92:15:25:19:b3:45:c1:04:26:ec:61:75:da:0d:
99:d9:c1:3b:c4:74:9e:be:40:29:e2:ba:06:ed:04:
0e:77:a9:d7:e1:89:93:34:3f:1b:3e:e2:f4:50:4f:
41:43:e3:13:0e:31:ff:f9:58:8f:43:b1:6f:14:05:
90:73:ae:d4:f3:12:99:30:d8:86:e2:85:c1:75:da:
29:54:1b:e9:f3:76:fd:28:94:ce:24:5a:f5:0f:5f:
d6:d1:e2:a2:7c:ba:87:4f:03:2c:ab:7e:6a:5b:59:
d1:25:2e:22:be:d7:b0:26:09:54:c3:a2:e9:ad:4b:
2c:c7:9c:72:40:9c:5f:3a:60:41:08:26:68:ca:3d:
54:53:19:c3:4f:61:4a:36:b1:27:5d:0b:9e:42:85:
fb:0e:87:6b:0d:06:43:13:a9:f4:3a:ef:ad:05:d6:
9f:cf:2a:51:e0:49:de:11:cc:b2:4f:6e:c2:85:c9:
4c:46:bd:57:31:91:81:bf:bf:98:cb:c9:33:2b:a5:
61:eb:4b:77:ac:6c:28:2f:5b:09:d1:d3:91:4f:2e:
d7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CA:DB:87:A8:34:D9:EB:08:3B:37:C7:79:7C:5F:91:17:6A:3A:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67b53d28-d621-3534-939a-7549ed1da0a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
209.200.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:3f:65:9b:4d:99:af:9a:d1:e7:27:44:2c:47:4b:9c:40:77:
77:c6:3f:6b:16:b2:d5:bf:14:2f:2c:12:b4:0f:d8:d1:b5:c9:
46:bb:d7:c9:a8:b8:97:e5:08:c3:4a:f1:21:a8:c4:a8:64:59:
3d:49:bc:79:9b:4b:af:b1:35:31:f3:28:22:ee:ba:88:3a:fc:
f7:74:20:d2:a9:24:3b:e3:62:6e:cd:89:df:9f:1f:a1:5c:b7:
41:8c:b3:97:9f:bd:61:a9:3f:47:ad:7b:c5:63:ba:fe:43:27:
ce:34:06:91:67:90:d4:f4:a3:74:f5:c7:44:1f:38:51:5a:d9:
26:23:69:93:8f:56:ae:c8:53:6b:5a:e0:de:83:41:9b:a5:05:
17:8d:f1:28:80:d5:c5:9c:4e:83:72:9c:e4:35:18:64:95:69:
25:e0:3b:61:9e:9e:1f:1e:f0:3a:eb:6b:3d:9c:f8:e8:59:8e:
50:ae:0b:8f:b2:89:1d:0f:12:dc:6a:6f:67:1e:64:69:71:e3:
4e:14:42:97:37:e0:a1:ba:27:dd:d6:82:73:d5:8f:49:43:68:
bf:99:1e:93:f7:32:90:8e:61:68:d6:4a:64:cd:b2:67:a9:e3:
45:f9:32:23:1a:53:72:7b:94:13:31:ad:62:cc:e2:ce:a8:ee:
fb:83:f2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:10:09 2025 by rpki-client