This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6c2844af-1fa7-3735-8c66-5c4dfdf73557.roa
File: 6c2844af-1fa7-3735-8c66-5c4dfdf73557.roa (raw, json)
Hash identifier: BYYJoOqgdb4jBWAgyo2TKVtiflE78oK+E0LrkhxUyFw=
Subject key identifier: 84:78:EB:EA:FD:6B:D1:C8:99:D4:9A:EB:C6:94:A2:33:56:A1:74:2E
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584BDCF5EF53AD56EED21C214F00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6c2844af-1fa7-3735-8c66-5c4dfdf73557.roa
Signing time: Sat 15 Nov 2025 02:00:32 +0000
ROA not before: Sat 15 Nov 2025 02:00:32 +0000
ROA not after: Fri 13 Feb 2026 02:00:32 +0000
asID: 31898
IP address blocks: 209.17.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:dc:f5:ef:53:ad:56:ee:d2:1c:21:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Nov 15 02:00:32 2025 GMT
Not After : Feb 13 02:00:32 2026 GMT
Subject: CN=64b013f9-7bec-48fd-8cb8-79f4438e83b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:78:8f:01:4f:06:b9:ae:2c:9f:4d:8c:a6:e1:
f3:ee:6d:e5:d0:6d:ea:6a:71:22:b6:af:9c:58:f8:
82:b2:d9:fd:28:3a:63:87:da:8e:38:2d:ef:69:06:
36:85:14:47:d1:44:0c:85:9a:81:77:91:61:27:3b:
fb:b1:7c:6d:7c:c1:a3:9e:f0:e8:04:32:c6:b9:98:
3f:11:b1:ca:a6:f9:e6:da:74:e8:d4:a0:88:31:74:
fd:53:63:3f:cd:0b:bf:45:39:eb:c6:1d:18:77:c6:
55:d2:14:f6:df:c8:c1:76:f8:f4:f5:cc:8e:a0:e9:
f2:ed:05:6f:1f:3d:d9:36:52:9a:94:1b:eb:5d:19:
41:bb:ae:23:6b:28:de:c1:3b:93:2c:67:2e:c6:91:
13:81:1a:2b:2c:91:3c:78:12:9d:57:27:1b:79:d3:
97:72:fe:80:26:aa:d7:88:92:2a:fc:08:81:d1:21:
25:5c:3e:60:48:31:2d:d3:f3:c9:b9:18:80:40:c9:
98:70:35:90:69:6a:d7:0d:21:c4:fd:a6:85:46:03:
3d:a3:08:d1:3e:d8:ff:21:f8:7c:b3:6e:38:85:0f:
42:77:62:73:3b:eb:e9:1f:d4:04:78:f8:12:55:13:
41:69:e2:f9:4b:85:3d:30:7a:fb:51:74:1b:ec:0a:
1d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:78:EB:EA:FD:6B:D1:C8:99:D4:9A:EB:C6:94:A2:33:56:A1:74:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6c2844af-1fa7-3735-8c66-5c4dfdf73557.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.17.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:26:be:ff:b9:44:7d:ad:93:bb:f0:76:fc:31:dd:25:8a:e0:
48:97:7f:93:b0:59:8e:c7:c3:12:21:a1:39:9b:db:0a:ac:54:
6d:4d:71:77:01:6a:0c:50:26:bf:f5:30:de:99:43:b4:7b:c2:
3d:be:83:ee:5a:12:3d:d8:d4:8c:35:84:fe:aa:eb:4c:92:08:
9e:8a:10:90:54:92:c7:57:6a:48:fe:f1:c3:8b:27:c5:4a:62:
19:62:9f:34:78:9c:74:ab:12:1e:f4:3a:4b:52:c6:e3:72:c9:
44:09:ee:dd:a2:8c:0f:74:72:e5:49:a0:a2:cc:ba:fb:bf:f2:
8c:77:d2:74:f8:b7:b5:f7:7f:00:ad:86:d9:52:85:6c:01:ed:
52:94:d0:be:75:38:c9:f8:c0:42:54:e3:b6:8f:4d:c0:81:e1:
e0:f2:c9:f5:38:c3:34:e3:91:4b:88:ae:11:79:25:ee:67:f7:
15:98:c2:e4:34:e8:03:27:ff:db:84:be:82:79:d4:06:fe:45:
50:13:1d:3a:35:61:4e:f8:5a:53:36:0e:3b:5f:9e:32:50:18:
7e:c7:a7:df:9b:0c:5d:02:9a:71:c1:b2:0b:50:b8:51:e3:9c:
85:e2:42:03:e3:a9:5f:bb:d8:9f:ac:3b:99:7c:5c:c1:92:32:
e2:33:a1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:54:00 2025 by rpki-client