This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa
File: f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa (raw, json)
Hash identifier: ehKWKho1OWJP3f0Ov9wcJufFvw53lVmSQMIkmg8qLNc=
Subject key identifier: B0:2A:D6:38:02:2A:66:9E:B8:F3:19:DF:70:AE:70:EE:EB:7B:D7:AE
Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial: 010D0C9F4328584BEC5087188392442859985840
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa
Signing time: Thu 20 Nov 2025 14:00:39 +0000
ROA not before: Thu 20 Nov 2025 14:00:39 +0000
ROA not after: Wed 18 Feb 2026 14:00:39 +0000
asID: 22267
IP address blocks: 208.118.228.128/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ec:50:87:18:83:92:44:28:59:98:58:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Validity
Not Before: Nov 20 14:00:39 2025 GMT
Not After : Feb 18 14:00:39 2026 GMT
Subject: CN=9be1d062-698d-46b8-bd0d-f3cd24b3df7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:96:dd:8c:39:aa:4b:fa:35:00:87:32:5d:29:
2d:7d:9c:5d:8b:5b:1d:8c:4e:19:6c:fe:0c:f4:40:
a7:4a:15:e5:59:a8:aa:02:3a:b5:4b:4a:76:a0:09:
7d:bc:f0:19:4d:25:97:61:97:ab:be:2c:db:34:36:
2a:b4:4e:a8:53:b1:ec:13:bd:07:da:01:b3:2b:24:
b5:64:49:95:5d:b9:27:72:b6:66:7d:a2:64:70:2d:
ab:60:45:e0:3d:f3:57:a0:11:cb:07:37:72:c3:4f:
cf:0c:c1:94:6a:fe:be:8f:98:6a:16:46:c6:17:ff:
c7:23:23:f5:87:36:2f:c0:ba:ef:ae:43:54:14:17:
7e:58:3a:a1:0a:7a:41:95:b3:bf:40:16:e5:3d:0a:
ec:81:4c:46:2f:1c:36:9a:c0:1d:79:ea:b1:a9:54:
59:dc:60:93:de:68:17:56:30:39:32:49:e8:6a:a1:
b6:94:c8:b8:7b:3c:b3:f2:c9:ca:e0:80:40:42:fc:
60:de:47:df:ff:66:83:f4:57:6d:80:fe:47:8d:75:
35:f7:1e:05:fa:9f:31:5c:f8:5c:e2:7e:cd:70:21:
aa:90:80:bb:b1:1a:ba:18:c7:0e:a3:41:c1:0d:fc:
47:81:b3:2b:1d:a4:d1:55:0f:fb:9f:ec:d8:85:98:
9e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2A:D6:38:02:2A:66:9E:B8:F3:19:DF:70:AE:70:EE:EB:7B:D7:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
X509v3 Authority Key Identifier:
keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
sbgp-ipAddrBlock: critical
IPv4:
208.118.228.128/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:01:66:8f:fe:43:51:2a:f7:1d:89:0a:bb:f0:91:ae:30:79:
2a:ab:87:63:80:ea:57:81:12:fe:1e:91:2d:9c:51:7d:88:18:
9c:d2:f6:97:6f:5a:da:ba:fa:04:9b:86:b6:53:77:b9:b7:dd:
73:d1:dd:66:f9:59:72:b6:b8:ea:7b:0e:cb:19:78:bb:7d:8f:
f5:fd:44:37:f9:6d:7c:25:b7:76:db:e5:4e:1b:2f:7f:f2:b7:
f3:f7:9e:94:7e:61:71:91:a1:c3:ed:b1:fb:45:d6:81:38:0b:
1e:74:32:fe:d6:22:1d:cf:d4:2f:51:e9:4b:2a:57:99:da:cc:
53:18:44:2b:14:82:cc:50:cd:82:f0:0c:a0:c6:38:65:9b:c1:
09:58:12:ec:74:c5:c6:ff:77:2c:22:6c:5b:24:6a:10:16:f1:
52:0b:92:28:4f:a7:85:16:bb:9e:66:ee:2d:f4:30:7d:8d:3f:
d0:94:e8:85:48:49:ff:c4:75:82:66:f7:31:98:16:49:3a:6a:
66:58:21:ba:7b:4a:5f:f6:ae:ff:86:db:fb:fb:87:00:28:0a:
cf:1e:ef:ec:1d:5b:f1:83:ef:20:12:84:eb:4f:2a:88:4a:de:
0b:13:b6:33:d1:ef:f5:8b:e3:21:2f:23:48:d3:a5:71:73:24:
29:2c:99:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:16:41 2025 by rpki-client