This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/40c350d8-3bc0-3793-8928-ecb678b7c49c.roa
File: 40c350d8-3bc0-3793-8928-ecb678b7c49c.roa (raw, json)
Hash identifier: PTHLIfuKOqlWpAq655Gw7+7PVEhmST/1UAXBI7UKs5M=
Subject key identifier: 70:68:CC:F6:23:A7:D5:EF:08:17:54:F4:C5:AB:81:C1:6D:69:BC:6C
Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial: 010D0C9F4328584C2B20FC60D390EC823C197540
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/40c350d8-3bc0-3793-8928-ecb678b7c49c.roa
Signing time: Sat 13 Dec 2025 02:00:30 +0000
ROA not before: Sat 13 Dec 2025 02:00:30 +0000
ROA not after: Fri 13 Mar 2026 01:00:30 +0000
asID: 14593
IP address blocks: 204.48.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 24 Dec 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:2b:20:fc:60:d3:90:ec:82:3c:19:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
Validity
Not Before: Dec 13 02:00:30 2025 GMT
Not After : Mar 13 01:00:30 2026 GMT
Subject: CN=6bda6161-701e-4aa8-9e2a-94d1b6312595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:63:16:79:4a:50:4a:5a:ba:c4:6f:27:c6:88:
c4:68:6c:99:e4:fe:08:ee:05:a3:70:fe:43:59:df:
72:1b:1f:b8:e2:67:50:35:ed:af:97:a8:1d:d6:2d:
58:5f:1e:3f:d3:20:65:98:35:27:3d:c9:69:bd:0b:
45:09:e2:77:bf:6a:eb:30:33:68:3a:ea:73:11:f2:
40:60:8a:91:af:d3:e6:e5:98:be:3d:1a:62:30:ba:
ec:01:f8:33:55:14:e5:68:ce:6b:5f:a8:70:db:4d:
f1:91:d5:cc:45:d9:cc:10:27:37:06:8b:ef:13:7f:
1d:af:cf:fe:6b:6a:2d:31:b5:99:f6:7c:ec:ed:2e:
cd:fc:54:4f:9e:1b:f7:38:40:7f:cd:d3:77:2e:0e:
96:d2:72:f7:dd:10:48:6f:90:0a:f6:91:81:82:71:
b9:9c:c9:52:49:b3:7d:f2:ce:ce:d9:64:34:20:15:
f5:a6:f9:7c:5e:59:aa:b5:b9:e4:90:1d:f8:f7:60:
68:c1:e5:03:10:82:cb:fd:0f:41:4e:8f:98:fb:0b:
9f:d4:5e:c3:93:08:7e:29:2e:ca:e4:8a:d3:eb:35:
6c:c0:25:97:a2:1b:ba:82:20:5f:f8:ea:da:4d:8d:
c6:51:bf:88:fd:65:14:bb:a0:6e:89:0b:81:62:eb:
5d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:68:CC:F6:23:A7:D5:EF:08:17:54:F4:C5:AB:81:C1:6D:69:BC:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/40c350d8-3bc0-3793-8928-ecb678b7c49c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
X509v3 Authority Key Identifier:
keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
sbgp-ipAddrBlock: critical
IPv4:
204.48.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:80:1f:7f:a1:58:c4:6f:73:bf:98:ae:36:5c:8d:1c:9c:f6:
b8:88:9f:c2:a7:3d:d5:20:76:93:5c:33:4f:6b:65:f4:50:7c:
65:99:ba:ba:c2:f9:8a:a7:b4:b8:2f:17:7e:03:17:ab:bc:f0:
34:e9:60:1d:fe:d7:0c:65:0b:0e:be:cc:29:4a:de:9a:72:ad:
34:fb:64:2c:70:ea:03:73:95:65:1c:02:2a:7d:71:82:43:44:
fc:bb:2f:5f:87:4f:82:46:3c:11:76:86:e2:20:d0:2d:d1:3d:
4d:2a:6d:7e:cd:e6:d6:31:fa:9d:91:6a:13:df:8f:c4:b3:4f:
63:eb:87:d3:45:c4:11:33:94:23:fe:87:6a:2d:32:ea:0a:ab:
4b:d8:11:b2:5b:8a:f7:57:2f:32:3b:21:fd:63:b6:8c:16:bb:
2a:06:14:3a:e6:f3:3a:ed:87:47:29:17:dd:e3:2b:f2:c0:49:
40:b0:c9:40:a4:56:f0:9d:4b:22:e5:3a:22:13:2c:c0:cc:fc:
ff:df:33:9b:33:7a:95:7a:71:00:5d:92:04:14:1c:6b:eb:d4:
42:df:0d:f9:66:9d:82:0a:6c:10:e2:8a:ca:a3:d7:f6:3b:70:
ff:d1:43:c0:89:e4:74:65:20:37:d1:c3:03:45:e9:68:df:5b:
19:32:67:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 10:51:09 2025 by rpki-client