This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cfa7fa22-536d-32e9-bf94-1a91729f09b6.roa
File: cfa7fa22-536d-32e9-bf94-1a91729f09b6.roa (raw, json)
Hash identifier: wCLJgu9B96sdXR9HpIUiBQQdE7dAaR434kPTzwCZ+4Q=
Subject key identifier: 3A:17:AC:1F:08:25:06:24:1A:51:21:AD:36:13:C4:C9:A1:9B:68:B3
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584BDCF5ECD032521982121F6880
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cfa7fa22-536d-32e9-bf94-1a91729f09b6.roa
Signing time: Sat 15 Nov 2025 02:00:32 +0000
ROA not before: Sat 15 Nov 2025 02:00:32 +0000
ROA not after: Fri 13 Feb 2026 02:00:32 +0000
asID: 31898
IP address blocks: 192.22.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:dc:f5:ec:d0:32:52:19:82:12:1f:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Nov 15 02:00:32 2025 GMT
Not After : Feb 13 02:00:32 2026 GMT
Subject: CN=6eb88ea3-c726-46bf-a01a-9eb1173d009e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c7:92:14:46:2f:46:06:39:7f:9f:4d:f9:73:
6b:a4:0a:11:a7:bf:45:69:43:6b:18:cd:01:0f:2c:
46:82:25:58:7f:ff:55:a4:42:ad:a8:3e:c3:d8:12:
55:e6:3b:a8:b9:32:9f:8b:d3:19:02:28:74:ac:b9:
fb:36:98:77:fc:83:1f:af:42:21:fd:23:c1:75:ec:
52:96:58:ea:66:45:55:c3:72:58:6e:dc:9a:7c:1a:
1b:82:f0:d6:77:56:0a:b7:fb:6b:f4:56:8b:d9:c9:
94:e8:63:ba:0a:95:e1:24:e4:43:6c:b4:c8:7a:69:
08:f5:23:b1:d5:95:e3:6f:a9:72:c9:38:10:74:f5:
66:35:70:65:ea:ba:6b:7f:4a:a1:29:b4:73:63:52:
5f:0b:a1:8f:c8:0c:97:04:f5:51:ce:4e:51:69:07:
47:15:c5:54:74:f1:70:3f:5c:03:29:ce:a6:13:1f:
22:0c:d2:5c:f5:6e:75:58:98:1f:88:86:f6:83:c3:
f3:15:cc:74:49:53:0c:5e:57:a6:f1:5e:ac:7f:e9:
77:5c:b3:05:17:88:e4:2b:4f:12:75:aa:52:89:f0:
53:59:7e:fd:41:c6:9b:82:78:4d:df:b2:3e:f9:15:
59:a6:da:bd:86:99:70:2c:ed:cd:15:ee:03:28:d7:
6b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:17:AC:1F:08:25:06:24:1A:51:21:AD:36:13:C4:C9:A1:9B:68:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cfa7fa22-536d-32e9-bf94-1a91729f09b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
192.22.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:e7:30:eb:c4:0d:38:d4:f5:49:c9:ea:b3:92:d1:4f:7f:1d:
ff:ad:e0:bf:2b:9d:60:45:2f:8f:bd:a8:9c:ef:ec:f0:26:ae:
f8:de:fa:e7:e9:f8:ea:80:f3:58:b0:c5:06:db:f0:ef:fd:e7:
62:33:ef:04:a0:ee:ac:2f:d5:19:2a:c6:84:3e:1e:ae:13:0b:
75:bb:e5:ac:3c:28:b8:01:ee:7c:11:67:79:3e:c5:ff:4b:0f:
af:97:4e:40:1f:26:a3:2b:c6:3c:28:cd:60:a4:c4:9d:7f:ba:
a4:0b:ea:a5:cb:63:24:47:3d:93:e9:e8:bc:5b:45:9f:6a:c5:
ff:65:2b:02:92:7b:7c:41:52:9e:71:21:d1:57:50:9c:50:27:
52:06:3a:be:27:06:3c:cc:bf:07:15:e4:6a:57:f9:94:c0:d1:
30:c9:f3:e0:e8:8a:6c:c0:c4:12:09:5f:79:b3:f0:13:36:6f:
71:a0:95:98:c8:ad:a7:b0:9e:b2:48:ba:22:cf:99:d9:ef:59:
bc:b4:6f:e5:13:ba:72:36:4b:c7:ab:bb:64:70:ee:7e:66:8f:
fe:7f:cd:b1:f5:68:78:e1:40:a7:9c:f6:77:ce:df:51:dc:1a:
4c:dc:be:cf:56:83:c7:d0:d9:3b:92:12:f1:ec:d3:b2:46:18:
8b:29:33:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:33:31 2025 by rpki-client