This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b02a6d7a-d28d-3b6b-8751-feb644f7e685.roa
File: b02a6d7a-d28d-3b6b-8751-feb644f7e685.roa (raw, json)
Hash identifier: 65vY/66dyqLYyb8bqqoYza0dh023K7M3L5Spboeikjo=
Subject key identifier: 4D:EB:47:06:0E:5A:3B:E8:4A:52:FB:8B:2C:F4:45:8E:69:D2:FE:10
Certificate issuer: /CN=b23daa11-4037-452a-934b-684edbefcbf9
Certificate serial: 010D0C9F4328584C4CA1171CECCEE40C87056D00
Authority key identifier: FC:30:9C:C3:3C:A6:E9:C9:D4:7A:91:03:88:4D:F0:1D:00:57:60:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b02a6d7a-d28d-3b6b-8751-feb644f7e685.roa
Signing time: Thu 25 Dec 2025 02:00:31 +0000
ROA not before: Thu 25 Dec 2025 02:00:31 +0000
ROA not after: Wed 25 Mar 2026 01:00:31 +0000
asID: 40630
IP address blocks: 204.13.88.0/22 maxlen: 24
208.94.116.0/22 maxlen: 24
2607:ff18::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4c:a1:17:1c:ec:ce:e4:0c:87:05:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b23daa11-4037-452a-934b-684edbefcbf9
Validity
Not Before: Dec 25 02:00:31 2025 GMT
Not After : Mar 25 01:00:31 2026 GMT
Subject: CN=6f763004-7fc1-4885-8de8-aa66509f127c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:a3:69:04:7e:2a:f4:69:53:ed:78:9a:a8:
68:72:3c:17:ab:80:0b:40:bd:86:65:ba:db:eb:79:
35:2b:fe:36:b1:87:de:f5:cd:ce:4f:84:e0:31:6e:
c8:83:41:48:cc:b6:e1:05:45:6a:ee:31:5f:25:99:
31:8f:17:c3:33:bb:a6:a4:25:97:b1:2b:02:03:1d:
3a:e3:29:be:ef:bb:29:90:4e:b6:fd:70:4c:d8:79:
34:71:d7:69:cc:cc:32:13:a6:ce:82:17:e0:12:1c:
73:aa:02:bf:6f:0a:64:e6:4c:63:82:47:61:17:f6:
36:bf:54:11:2a:b0:ef:fd:03:b4:c2:ca:24:be:e0:
81:ec:81:dc:be:2e:bd:82:ab:71:52:cb:11:96:cf:
46:97:53:2e:54:2a:fa:4b:12:b3:99:02:32:57:3b:
f6:8c:f6:b8:d4:12:6b:51:a9:b1:bb:71:09:58:20:
be:07:de:1c:36:c4:62:f5:38:e7:67:b7:99:c9:8b:
6a:98:b7:70:af:73:aa:67:e8:36:84:ac:8e:34:65:
a6:e9:bd:c4:bd:0d:79:00:79:fa:14:ba:66:e9:14:
d2:03:01:5d:6c:fb:d1:37:fd:62:9c:c3:04:14:83:
4f:22:90:70:49:01:98:fa:d7:5b:fa:e7:a4:ad:25:
9e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EB:47:06:0E:5A:3B:E8:4A:52:FB:8B:2C:F4:45:8E:69:D2:FE:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b02a6d7a-d28d-3b6b-8751-feb644f7e685.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.crl
X509v3 Authority Key Identifier:
keyid:FC:30:9C:C3:3C:A6:E9:C9:D4:7A:91:03:88:4D:F0:1D:00:57:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer
sbgp-ipAddrBlock: critical
IPv4:
204.13.88.0/22
208.94.116.0/22
IPv6:
2607:ff18::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:60:17:b3:72:fc:3d:74:f4:8e:40:bb:53:6d:a6:80:15:f9:
fe:16:6e:a7:39:9e:08:c1:45:a4:12:9e:c4:f1:9e:ed:d9:a2:
aa:17:ce:77:1e:be:25:c4:fd:0b:1f:3f:d3:9e:74:79:2c:66:
86:13:31:bf:88:57:d7:62:cf:a8:bc:c1:1d:df:ee:4f:48:12:
9a:a2:6f:45:3a:0b:1b:4e:7d:2a:dd:60:69:f7:66:8b:97:34:
6e:39:cc:6b:74:f6:25:20:c0:cd:a6:56:59:0b:3f:8d:6d:25:
f7:c1:fc:02:df:3d:29:4b:4c:83:5e:59:d1:bc:89:57:b4:97:
c5:02:6f:58:6c:d1:50:9e:95:d8:cd:66:13:cb:56:e0:7c:12:
39:20:5b:27:52:b6:0c:90:50:bd:09:22:e6:71:2b:5f:bd:fd:
86:0c:0b:04:54:0b:d0:c4:bf:cd:ad:08:2f:37:ed:fb:4b:bb:
7b:a4:06:7d:03:2b:69:31:b3:9c:20:c0:32:2a:a6:bf:40:46:
db:49:33:da:85:2c:74:a1:8b:5e:23:85:bf:42:4e:b8:e1:66:
55:2e:7d:40:5f:ac:5b:3b:65:0d:b7:1e:25:3b:48:42:7d:45:
a2:64:71:f0:3e:84:45:71:7b:ce:b6:73:95:7b:06:b9:63:9c:
8d:f1:14:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:33:07 2026 by rpki-client