This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/748352b8-7882-3a18-91aa-3227aa0d217a.roa
File: 748352b8-7882-3a18-91aa-3227aa0d217a.roa (raw, json)
Hash identifier: hhRT72AuSiSlGaqxNlVSj158E7NfkjxupmydObSO1rc=
Subject key identifier: E9:D0:D4:3B:6A:25:D6:43:B1:50:DD:6B:48:3F:02:6A:85:BD:10:B7
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C37B12054D7388FEA4EE2FDC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/748352b8-7882-3a18-91aa-3227aa0d217a.roa
Signing time: Wed 17 Dec 2025 14:00:39 +0000
ROA not before: Wed 17 Dec 2025 14:00:39 +0000
ROA not after: Tue 17 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 2604:2e88:4400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:37:b1:20:54:d7:38:8f:ea:4e:e2:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Dec 17 14:00:39 2025 GMT
Not After : Mar 17 13:00:39 2026 GMT
Subject: CN=18de0332-1497-4fc4-9f29-2ca001d0ed3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e0:19:29:40:01:19:08:72:55:cd:cc:e2:f8:
c4:7d:74:70:89:91:92:e5:96:e6:61:d6:e7:ce:fe:
82:9b:86:8a:59:a2:f2:00:21:c2:ad:b4:d3:b5:1d:
7f:31:c4:d9:21:6a:ee:03:54:91:0f:19:19:41:b0:
b0:60:a5:e8:bb:7d:36:44:3d:a0:aa:54:f1:af:3a:
a1:75:d0:7a:07:27:ae:51:e9:2a:9a:63:a6:d1:64:
ef:40:b8:08:a3:3c:26:97:7b:b7:fc:c2:84:09:80:
1e:e0:96:1d:f4:64:85:49:7d:1c:1f:f5:28:c7:61:
60:6a:3c:a5:89:6c:43:89:c8:2d:2d:eb:41:52:4b:
82:d2:c4:cb:fd:54:61:ee:6c:04:e2:8a:44:41:dc:
e3:5d:85:ad:b1:8b:cd:3a:b7:86:c1:0f:ba:4c:1d:
0c:70:ab:7f:15:c1:bf:8d:ac:e6:c2:f3:7f:64:9d:
59:bc:b5:07:17:4a:b2:1e:fb:8b:80:c8:52:a2:ae:
ee:30:85:51:0a:23:75:73:a9:45:97:59:31:0f:ca:
6e:b8:3c:c7:0b:af:07:c2:f1:75:13:44:e9:c0:01:
54:74:a1:ed:1f:6d:19:0d:aa:0a:6f:ce:28:9f:bf:
8f:68:12:d2:ef:ae:3e:85:49:8f:1e:a9:e6:a1:7f:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D0:D4:3B:6A:25:D6:43:B1:50:DD:6B:48:3F:02:6A:85:BD:10:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/748352b8-7882-3a18-91aa-3227aa0d217a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e88:4400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:5b:5d:7f:24:f7:79:18:4d:bd:04:f9:25:dd:3e:7c:d5:6d:
96:2e:73:53:ff:b5:3f:9e:ae:91:ac:d7:dd:53:6c:ab:72:63:
ae:2d:b2:e8:4d:c2:d7:92:86:04:24:6e:00:ed:95:63:f1:34:
7d:11:f0:76:ff:83:56:53:60:b8:75:2e:bf:98:0d:35:32:58:
db:cd:80:ab:4d:f2:db:4b:70:c4:6d:d7:5d:92:3d:14:63:05:
2e:ae:99:05:68:09:1c:5c:43:d8:19:9a:09:b5:26:c2:f4:5f:
b9:82:8a:6d:85:3d:db:1b:0d:9d:3b:a5:f6:df:9f:37:27:fb:
af:a7:87:6d:4d:56:0d:51:9f:b4:03:8b:ad:8a:7e:9e:74:35:
3e:e6:dc:47:fc:5d:34:00:f5:93:9d:5b:11:ff:e7:94:d1:4a:
67:fa:fa:b6:64:11:d3:8f:ea:2f:e5:c0:c2:ff:e8:2f:5a:eb:
b7:10:8c:42:32:a3:5c:8e:72:28:ae:bf:74:16:b8:5c:fc:fc:
52:57:83:2a:c1:ac:58:d5:4a:2f:97:f3:be:45:a9:96:c6:47:
aa:51:22:26:9a:75:02:d8:05:65:16:4b:3f:c7:02:b2:95:a0:
64:c8:29:5d:0e:23:ca:e5:50:31:14:59:e9:34:2c:c8:6f:d9:
35:93:10:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:22:25 2025 by rpki-client