This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/68b08497-d3bb-31ed-927f-aaf8d6bb70ba.roa
File: 68b08497-d3bb-31ed-927f-aaf8d6bb70ba.roa (raw, json)
Hash identifier: H3pG5tgTXwNSHed1pUGQPksvOnsHo/9hNGQx+ATZb3U=
Subject key identifier: D0:54:3E:CF:22:97:AA:F6:F5:F0:F0:80:23:77:43:3A:A9:BB:1B:76
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584C1A60D6F9666E6BC0E0B134C0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/68b08497-d3bb-31ed-927f-aaf8d6bb70ba.roa
Signing time: Sun 07 Dec 2025 02:00:30 +0000
ROA not before: Sun 07 Dec 2025 02:00:30 +0000
ROA not after: Sat 07 Mar 2026 02:00:30 +0000
asID: 23473
IP address blocks: 76.10.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 24 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:1a:60:d6:f9:66:6e:6b:c0:e0:b1:34:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Dec 7 02:00:30 2025 GMT
Not After : Mar 7 02:00:30 2026 GMT
Subject: CN=13e1a4ea-875b-4520-a1bc-53486674fe7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e2:2f:9b:9a:f2:36:f5:0d:73:eb:d1:e4:62:
52:dd:a8:9a:dc:11:84:94:d9:5f:2d:eb:f5:47:56:
c8:bd:1a:8f:d1:83:64:e7:d8:fd:18:4c:dc:88:6c:
61:34:b4:9b:82:dc:72:da:da:72:fe:94:f5:86:e8:
2f:cb:3b:2f:ad:be:a3:e6:5b:a7:1a:90:ba:4d:98:
b5:3c:8e:e0:f7:05:e0:c3:5f:b6:ba:fb:0e:a1:52:
09:aa:5f:6a:9e:e6:2b:d5:6f:0a:cc:bd:75:24:6c:
f7:3f:b0:e0:42:56:3d:a7:b5:59:d1:33:ad:05:30:
4f:06:69:c6:5a:78:de:8d:2d:80:db:d3:99:65:45:
72:03:29:d3:4c:76:28:10:db:31:39:44:bd:bc:be:
c0:6c:bd:4c:df:0a:d5:9d:75:04:68:56:05:f7:cb:
96:02:2e:76:bb:5d:92:70:b7:1e:11:0f:76:db:3a:
6b:e0:19:a1:20:a6:81:b7:ed:23:b7:fe:07:ab:5f:
04:90:83:c7:1c:d1:3b:bb:e5:6d:9a:fe:39:9c:d2:
d1:13:00:ef:10:e3:0f:80:03:33:2b:96:ff:9b:31:
33:eb:68:1e:4a:88:d3:b8:89:2e:05:92:78:a3:65:
45:0a:b0:d6:6a:86:28:38:30:e8:d0:f0:8c:b9:92:
5a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:54:3E:CF:22:97:AA:F6:F5:F0:F0:80:23:77:43:3A:A9:BB:1B:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/68b08497-d3bb-31ed-927f-aaf8d6bb70ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
76.10.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:25:2d:78:8c:b4:47:2b:0a:be:59:99:a3:9f:f5:01:2c:72:
2e:fe:a1:0e:1d:51:55:2e:b9:83:7f:ad:cc:3c:da:af:37:6d:
5b:ca:a9:78:d3:2c:5f:81:34:48:a6:b1:dd:49:f0:3d:a6:86:
c0:e9:05:39:a1:cc:b9:12:41:6f:db:22:d4:22:78:c0:78:c0:
19:26:a8:b2:46:39:a0:ae:1b:66:0c:67:97:91:72:bb:d4:f7:
1f:a6:e2:69:fb:d1:a0:cc:3f:60:61:a3:c7:12:4a:cf:a3:7d:
de:1f:f7:9a:ad:22:32:96:6b:f4:fb:d0:38:97:ae:97:53:04:
7f:7f:e0:24:88:73:bd:31:e6:fc:da:4b:7b:2f:20:1a:48:bd:
81:23:11:23:cd:1a:0d:2d:1d:bf:07:3f:2b:ea:ae:3b:30:1f:
4f:2a:a0:47:6b:15:5f:c6:52:ed:0d:34:2b:2f:9b:19:ea:a9:
02:ec:9d:d0:1c:a9:21:f7:92:4b:81:25:79:95:28:8c:cd:47:
b6:b2:35:42:62:03:99:b4:d9:62:d1:44:eb:02:27:1b:24:f3:
5d:18:a7:30:a0:ad:8e:3d:11:99:ae:a8:1a:67:eb:3d:d5:93:
d5:13:2d:ef:9c:33:71:f5:ab:97:bf:48:02:d9:ac:5a:fd:b4:
e3:fc:6b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:17:44 2025 by rpki-client