This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5cdda1a-73a0-3eb7-b87b-e89780eaa57f.roa
File: c5cdda1a-73a0-3eb7-b87b-e89780eaa57f.roa (raw, json)
Hash identifier: sz2g53smZYuRJbJaAfuXn0QL5GT2cZh8kK+cAL0AcDo=
Subject key identifier: F0:D9:04:6F:61:F0:16:D8:8F:B2:BC:58:14:BB:86:E7:04:19:EF:8E
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584C37D81B4F22A53060BCDF5640
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5cdda1a-73a0-3eb7-b87b-e89780eaa57f.roa
Signing time: Wed 17 Dec 2025 15:19:31 +0000
ROA not before: Wed 17 Dec 2025 15:19:31 +0000
ROA not after: Tue 17 Mar 2026 14:19:31 +0000
asID: 13335
IP address blocks: 38.96.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:37:d8:1b:4f:22:a5:30:60:bc:df:56:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Dec 17 15:19:31 2025 GMT
Not After : Mar 17 14:19:31 2026 GMT
Subject: CN=f2b234ab-72a5-4eaa-8b24-493ae5de7962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0b:a1:ad:2c:20:05:f7:05:03:5e:df:e7:37:
ec:09:7b:52:db:dd:e5:33:c7:09:c7:08:14:09:00:
a4:d8:b2:f7:cd:71:26:78:69:57:a2:40:05:18:35:
05:2c:45:ec:88:60:6e:e5:f6:c0:e6:b5:66:68:e1:
6f:06:f9:fa:06:a4:b2:50:c1:8f:74:36:ec:3f:04:
58:f2:3f:e9:7c:39:5a:f5:95:66:6a:29:01:8f:2d:
3e:75:36:d8:41:9c:db:d9:71:81:74:f6:dc:22:c3:
03:bf:36:42:a8:c4:85:fa:bb:16:81:b3:0f:53:1a:
66:c4:69:d2:02:8f:12:79:8d:5d:b1:6b:91:3b:8e:
c6:0a:ec:5a:23:2d:11:bc:cd:04:be:15:b5:fc:89:
73:aa:ea:99:c7:57:e4:09:a3:2c:2a:ad:26:c1:98:
e3:56:2c:89:a9:44:2e:2d:e1:cc:0c:c1:2c:d1:42:
e4:da:61:3b:32:4c:8c:7c:ca:71:41:2d:c2:ec:83:
b7:4a:a8:42:4a:af:1a:b6:92:1d:87:64:b8:38:95:
cc:9a:57:e3:1a:f6:49:c1:25:62:ab:1c:3e:9a:58:
4b:48:8a:2f:05:aa:b7:7d:13:db:b7:ca:9b:f1:33:
04:ae:71:78:ff:e5:da:1b:54:c6:55:6d:e2:20:dd:
20:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D9:04:6F:61:F0:16:D8:8F:B2:BC:58:14:BB:86:E7:04:19:EF:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5cdda1a-73a0-3eb7-b87b-e89780eaa57f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.96.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:44:3e:fb:75:f9:1f:32:2f:0d:a3:b9:04:5b:b9:e1:65:5c:
6f:99:62:78:ba:22:a0:85:60:23:ee:cc:0e:46:37:9e:fb:7c:
bc:fb:5d:a2:07:72:af:67:07:69:22:cc:21:65:f6:0d:9f:1d:
69:1e:ac:7a:bc:a2:67:25:cb:94:d4:50:74:1f:72:10:46:2f:
1e:21:2a:cf:9e:f8:0d:21:4f:06:aa:b5:9a:fb:5f:25:78:17:
1f:e8:d9:3f:24:04:cc:97:ab:0f:79:d3:6f:ce:f8:10:0f:ab:
7b:ce:f6:24:01:64:66:c5:26:cd:e9:2a:cb:82:79:d3:3a:77:
a3:7d:99:b7:9a:2a:66:7e:1a:0b:c1:15:09:0f:c1:f3:d5:7d:
a7:14:d0:19:9b:73:59:74:63:af:13:b2:54:bf:64:be:91:d7:
6f:37:ce:82:6f:b1:29:ae:c1:e5:73:97:8c:53:cb:4d:7d:5b:
86:f9:51:72:b2:49:41:ab:64:47:10:51:f9:15:f3:f8:74:5e:
6e:ce:71:b0:61:85:9d:d9:e1:d0:f1:52:98:71:c7:38:92:2a:
4f:b0:ad:05:d3:68:d1:37:ea:1b:48:36:99:fb:ac:b4:3b:4f:
0d:6a:e1:84:27:93:cf:62:82:a6:41:be:72:32:e7:57:80:95:
d8:59:c6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:32:58 2025 by rpki-client