This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a5df221-7242-3427-b1c2-b75cb9a35e0e.roa
File: 4a5df221-7242-3427-b1c2-b75cb9a35e0e.roa (raw, json)
Hash identifier: 96Zp9gmITz1kkUizT1Nx1ghp1pEl+UJZdufV4QC0Xg0=
Subject key identifier: 00:E5:29:AB:87:F7:5A:E6:13:42:72:E3:96:84:C8:00:D6:76:B7:A8
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584C1FF633BC5640256BEF6DEAC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a5df221-7242-3427-b1c2-b75cb9a35e0e.roa
Signing time: Tue 09 Dec 2025 02:00:31 +0000
ROA not before: Tue 09 Dec 2025 02:00:31 +0000
ROA not after: Mon 09 Mar 2026 01:00:31 +0000
asID: 0
IP address blocks: 72.31.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 24 Dec 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:1f:f6:33:bc:56:40:25:6b:ef:6d:ea:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Dec 9 02:00:31 2025 GMT
Not After : Mar 9 01:00:31 2026 GMT
Subject: CN=528d9921-2b08-4cdc-a71e-e0f095485d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:84:0c:c9:a8:a3:9d:02:02:55:1e:e6:34:
ea:dd:42:b4:e5:2f:90:3e:34:28:33:5d:19:79:c1:
c4:69:b3:53:d3:13:12:0a:fe:ed:32:80:90:a4:3e:
4c:27:44:dc:41:4f:f5:43:cf:ee:02:27:9e:a6:e1:
5e:33:0f:58:02:e4:2d:52:b6:f5:7e:dd:8b:31:e0:
3b:4c:b8:8d:de:7f:af:09:26:68:b9:9a:9e:e2:04:
60:de:57:50:83:52:4b:d8:64:5a:9c:6f:58:57:10:
75:3f:10:44:67:63:c5:25:6d:80:17:8d:c0:f0:f2:
d5:21:85:4d:66:0d:a9:4d:05:1a:25:7a:4a:87:91:
f0:b8:2f:ed:92:84:e5:ee:4a:61:d7:5f:33:60:a3:
88:04:6a:fb:22:40:7d:63:ec:4f:91:15:79:93:30:
f2:59:7c:88:5b:fe:cc:b4:8f:09:6d:bf:a9:a3:6a:
b2:db:cd:59:b6:9c:3f:02:88:f6:ba:77:db:c2:1b:
53:dd:4b:bf:4e:7b:90:b5:07:91:24:51:52:68:3b:
c1:23:41:cd:f3:f9:06:a1:33:58:fd:ae:58:95:1e:
5c:38:28:91:72:35:40:b7:69:ab:63:58:6f:ff:ee:
e5:06:29:a5:14:e1:20:54:57:fe:ad:8e:19:b0:96:
3f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E5:29:AB:87:F7:5A:E6:13:42:72:E3:96:84:C8:00:D6:76:B7:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a5df221-7242-3427-b1c2-b75cb9a35e0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
72.31.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:b5:31:f1:59:f4:af:c5:f9:9c:dc:40:b7:8b:ea:7c:f7:39:
b0:e9:e5:fe:a0:5b:17:3f:e3:ee:99:19:27:e2:02:13:a7:6c:
84:4b:e6:83:9f:fb:39:f4:3a:fd:00:0a:22:c8:c0:1a:c3:6e:
80:98:09:64:81:06:6c:c0:14:d7:68:98:9e:0d:eb:9f:62:9a:
08:82:92:37:eb:79:ad:f7:a0:5f:9f:70:e0:b9:2f:a9:7f:d2:
aa:51:6f:85:c4:74:ea:03:2b:88:41:f5:0f:79:f5:b0:c9:3c:
10:8c:5d:47:dd:d8:4b:03:4c:6c:56:97:59:57:85:6e:19:aa:
ec:8e:8a:16:2b:7f:da:9e:73:e5:3a:a2:98:80:c9:25:26:90:
ff:07:53:d0:61:70:88:fc:ba:e8:c8:4c:20:96:15:15:d9:f7:
e3:81:22:d4:d1:4c:f1:ea:0f:fa:95:45:bb:80:2b:9e:13:b7:
f1:aa:d7:d6:fc:4b:38:70:bd:a5:cd:e0:94:ed:69:49:71:33:
1b:76:53:64:8d:16:9f:2e:27:d7:af:f2:c4:e7:eb:2b:15:58:
11:fd:f5:7e:55:ca:28:df:1d:26:7b:86:65:a8:4a:21:80:eb:
c2:2a:cf:05:e1:e2:3a:8f:08:c7:1a:a7:26:71:96:b1:d7:fa:
97:c0:ff:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:48:29 2025 by rpki-client