This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/958db347-b590-339b-ac95-b832c056324d.roa
File: 958db347-b590-339b-ac95-b832c056324d.roa (raw, json)
Hash identifier: W8nPuwxQMOq6Rk6FIxiYGffFgqsmXKult06kbyGWi/o=
Subject key identifier: 4E:AF:87:95:47:26:7E:9A:B4:FE:9E:A9:3B:6C:FC:F4:29:58:98:A3
Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial: 010D0C9F4328584BEDB5CD9368300B42EED4D000
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/958db347-b590-339b-ac95-b832c056324d.roa
Signing time: Fri 21 Nov 2025 02:00:30 +0000
ROA not before: Fri 21 Nov 2025 02:00:30 +0000
ROA not after: Thu 19 Feb 2026 02:00:30 +0000
asID: 27604
IP address blocks: 147.72.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ed:b5:cd:93:68:30:0b:42:ee:d4:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Validity
Not Before: Nov 21 02:00:30 2025 GMT
Not After : Feb 19 02:00:30 2026 GMT
Subject: CN=96cba61d-9b2b-4f81-9a76-84fdee010d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ed:fb:53:ec:55:59:af:2a:d0:c6:95:1a:ba:
51:82:9a:e1:47:ac:69:6d:a2:41:e8:30:30:38:87:
6f:42:27:3d:6c:6f:a5:d1:26:a9:49:62:bc:81:8c:
6b:e3:d7:2b:b5:74:c4:a8:a7:43:62:42:36:6c:0a:
dd:bb:68:27:43:17:eb:a5:c8:c9:38:f1:20:f1:bf:
3c:b0:57:af:a8:4a:93:b6:e2:a5:bb:56:a2:d6:b7:
73:cf:c0:ef:a1:08:e7:27:2e:14:54:47:d1:69:4c:
73:4f:8b:ab:e5:a1:3a:8b:a0:7d:d8:10:81:11:9b:
bf:12:e2:ee:ce:55:6c:fe:14:b3:5a:0d:47:67:90:
69:a4:55:4a:71:c3:1f:7c:dc:03:9b:be:3f:14:3a:
3e:c9:27:87:f7:37:1c:fe:47:60:e5:74:c6:74:a5:
ce:43:0c:eb:27:0e:a6:05:32:d2:4e:d3:dc:ea:3b:
b1:86:cd:6e:ef:52:d7:03:1b:00:0a:16:d8:6f:3a:
63:ca:1f:17:9f:43:e7:ea:49:54:d8:4c:62:74:a2:
22:71:a8:cf:59:d3:b5:23:d2:3b:44:69:c6:c2:82:
67:cf:7e:0a:40:9b:05:04:cf:02:24:6e:e2:17:53:
45:49:12:38:32:71:5f:0e:37:dc:c0:59:95:b5:ac:
66:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AF:87:95:47:26:7E:9A:B4:FE:9E:A9:3B:6C:FC:F4:29:58:98:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/958db347-b590-339b-ac95-b832c056324d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
X509v3 Authority Key Identifier:
keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
sbgp-ipAddrBlock: critical
IPv4:
147.72.244.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:49:b9:c2:e6:0f:78:de:7e:a3:aa:c2:d7:e1:aa:b7:35:25:
6e:d8:df:27:32:b8:8c:42:72:c7:3a:28:99:49:02:58:9f:3f:
0b:07:b0:4b:df:28:31:73:53:6e:b5:0f:5b:c3:0a:9a:71:13:
9c:3a:a1:80:cd:d0:9e:e8:ff:c7:dc:3e:35:7a:8b:5f:04:15:
21:f7:64:b4:38:71:4e:a0:a6:8f:c6:5e:bb:7a:09:a2:aa:0e:
c7:41:74:03:be:f0:fe:e7:17:6e:89:94:59:e6:c8:e1:5c:18:
a4:51:bb:7f:77:17:05:42:73:28:88:8c:4d:76:69:52:60:10:
d5:f9:d2:fe:e3:7f:ca:e2:3c:03:98:25:8f:a8:f5:4b:cd:17:
8a:7f:18:4c:c0:d7:db:48:8f:9f:43:8a:25:ef:0b:53:6d:c6:
2a:fd:c0:2d:50:ae:63:7b:a9:a8:57:19:03:c3:a8:47:97:a0:
91:8c:b7:a3:b0:71:3d:2f:ba:69:37:75:a1:57:0a:71:30:57:
f7:0a:bd:18:ee:da:e4:03:8d:6c:18:23:bb:0b:22:b7:09:47:
52:52:0f:ff:47:9b:b0:9b:7e:f7:3b:51:bd:4e:09:66:99:7f:
fc:be:60:19:75:19:90:ed:70:9d:05:a1:d4:40:c7:b5:7f:13:
51:05:67:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:12:45 2025 by rpki-client