This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a5878-6524-3bfe-ac80-9915b7eeefb6.roa
File: f39a5878-6524-3bfe-ac80-9915b7eeefb6.roa (raw, json)
Hash identifier: N3v9hDha/4gVgMj9qwpio/DXNIW975wlkcCaeSqYXGc=
Subject key identifier: 2D:F0:4E:96:EA:7B:8A:42:68:0C:C7:66:5C:76:1A:C7:DB:2F:78:42
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584C45A760C731E0A9BB909D8D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a5878-6524-3bfe-ac80-9915b7eeefb6.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 40306
IP address blocks: 70.41.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 26 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a7:60:c7:31:e0:a9:bb:90:9d:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=68658172-1c04-4336-9c60-89548ed7c87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8c:b2:a7:e4:92:c3:69:f0:f6:14:08:63:f8:
7e:5a:69:31:00:d6:7f:97:17:8f:46:21:0b:f1:01:
c1:5e:3b:70:c4:93:36:a7:d1:8d:61:4a:35:af:c8:
fa:c8:21:9b:6c:72:ae:ac:2d:97:bc:67:e7:43:f4:
51:34:cd:45:1e:d8:d8:f2:ad:16:6f:01:ca:4a:65:
5e:74:5e:14:5d:1f:d3:fc:80:1a:7b:d7:92:46:94:
d0:eb:f7:54:4f:f7:01:3a:bc:6d:95:50:b7:23:f5:
f3:23:0f:0d:32:01:04:79:b2:7b:39:6c:5b:c8:86:
22:01:14:50:54:89:ac:16:a5:e8:54:6f:9c:f8:f5:
1b:92:13:91:59:53:40:be:ef:e3:73:48:fe:3f:b0:
8a:9d:9a:c8:00:ee:59:13:3f:d5:91:cb:39:d5:2b:
a2:3f:18:2f:09:9b:ca:9d:bd:f9:95:4a:1c:0d:2e:
0a:fe:e3:10:cd:d0:24:7a:da:24:11:3c:b6:83:54:
20:3f:5f:69:59:56:1b:f6:3f:04:22:b1:4d:60:e6:
09:b6:a4:f8:98:2e:50:b9:e6:db:8c:ae:2b:e0:92:
35:e3:42:a0:8f:9e:80:c1:37:ce:a1:e9:a0:6e:2f:
75:51:27:d0:20:cc:9d:d2:52:77:c6:9e:cb:c9:22:
49:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F0:4E:96:EA:7B:8A:42:68:0C:C7:66:5C:76:1A:C7:DB:2F:78:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a5878-6524-3bfe-ac80-9915b7eeefb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:8d:9f:e4:1d:60:46:15:12:49:60:d3:89:1b:9a:bb:79:8e:
20:1e:84:c9:58:e6:f9:19:65:ca:22:25:5d:68:f0:9e:57:20:
09:c7:f5:5c:24:bd:6d:39:f1:49:6d:14:23:fe:8b:b3:1c:3c:
45:83:92:d7:33:14:04:13:54:c6:14:5c:1d:6b:0e:71:a4:8b:
4f:e0:32:6b:f2:e9:61:4e:dd:d0:ae:88:32:b5:71:ab:74:2d:
57:33:c2:2d:27:d2:7b:e6:6e:40:82:aa:ee:3d:8d:ee:d4:f9:
95:b6:3d:04:89:b3:cb:fb:fe:ff:b0:8e:45:c2:24:e2:ff:d0:
2a:f8:4b:6a:57:71:17:a4:85:63:37:5c:35:cb:9e:0a:c4:4e:
3a:84:ef:e5:56:4f:ed:a7:19:9c:67:82:9f:5b:96:4d:c1:ca:
18:d6:e3:a2:c4:0a:75:95:91:46:9e:41:1f:77:35:13:87:50:
a3:ae:83:f7:96:de:3e:95:df:3a:fb:ba:bb:04:4a:5c:6a:05:
91:8c:84:0b:bc:21:f6:1d:2f:73:3d:3c:2b:46:46:5c:bf:15:
7f:74:4f:72:d1:95:a9:bb:bc:19:e8:18:a1:4a:fe:a0:33:92:
31:ed:cc:8f:05:d0:57:69:6f:a6:9c:c9:93:f4:78:47:7d:c5:
42:b4:2e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 00:59:58 2025 by rpki-client