This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73cfabe3-01c3-3cff-8521-8ad7eaf47739.roa
File: 73cfabe3-01c3-3cff-8521-8ad7eaf47739.roa (raw, json)
Hash identifier: ggS1k7oGeWqwhQMX0fSc/G0B1YIZQjTPffoMp5AAbf4=
Subject key identifier: 33:1A:6D:B8:81:5B:EC:EB:FB:62:40:24:FD:44:2C:A9:5B:42:9B:22
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584C2B20F6A3B5F78D9BB9484B20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73cfabe3-01c3-3cff-8521-8ad7eaf47739.roa
Signing time: Sat 13 Dec 2025 02:00:30 +0000
ROA not before: Sat 13 Dec 2025 02:00:30 +0000
ROA not after: Fri 13 Mar 2026 01:00:30 +0000
asID: 0
IP address blocks: 208.217.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:2b:20:f6:a3:b5:f7:8d:9b:b9:48:4b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 13 02:00:30 2025 GMT
Not After : Mar 13 01:00:30 2026 GMT
Subject: CN=68e2d607-67e2-459d-b821-a84d9f4e6b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6c:79:20:a5:76:48:ba:fa:13:6c:7e:0a:6d:
8c:d1:75:53:98:49:09:f2:ab:be:f3:fb:a6:72:b2:
ee:90:ed:08:d9:aa:6c:71:07:68:14:ef:11:ca:24:
c4:65:4f:cc:10:5a:f9:82:d7:cd:bb:73:9a:ff:b6:
9a:b8:14:a5:a1:63:e5:9c:d3:b9:0e:7e:f7:87:2f:
25:8a:55:a0:88:15:82:f0:0a:88:54:9b:ca:3f:8d:
76:8e:60:76:3c:c7:81:9e:8c:81:c6:a9:c3:3d:60:
3b:bc:23:e5:8f:bb:cd:34:31:6a:1a:4b:0d:b3:32:
04:1a:7b:47:99:6e:b7:f9:1b:09:86:b6:3f:21:b9:
5c:ca:0c:66:d5:e3:40:15:53:ed:5d:f2:9b:fc:19:
3a:be:f4:24:86:b3:09:01:4b:2b:67:c6:e4:5a:b6:
3d:87:b7:9e:b5:c8:76:bd:fe:67:99:01:07:13:19:
48:a9:ce:0d:e8:eb:e6:9a:b2:cc:df:f5:4c:04:4b:
10:9b:77:0a:01:18:48:42:e5:1a:1b:a1:32:70:6a:
d5:44:53:6a:d9:50:47:34:01:1c:c6:86:ac:f3:0d:
2b:48:45:45:e0:b6:8e:33:55:ba:2e:d0:23:4b:63:
20:ae:f3:0a:25:c4:51:a0:2f:13:5e:68:e6:ec:a6:
00:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1A:6D:B8:81:5B:EC:EB:FB:62:40:24:FD:44:2C:A9:5B:42:9B:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73cfabe3-01c3-3cff-8521-8ad7eaf47739.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
208.217.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:03:83:91:60:bb:3d:ad:99:bf:f1:87:b0:dd:d4:80:90:6e:
cb:40:ed:09:62:1d:ca:ee:f0:85:8b:60:9b:25:e5:ac:95:73:
4a:cb:3e:57:63:ad:2f:5f:04:14:43:3c:6f:e5:d6:86:7a:4e:
d6:a4:b2:aa:f3:36:00:2f:d8:e5:d0:e7:c8:ae:58:86:9d:97:
5f:4b:b3:dc:2c:f2:c8:36:4d:9e:63:02:29:24:28:99:26:1f:
c5:ff:1e:27:40:d9:87:4b:77:77:bd:eb:31:f5:ec:a4:6f:c3:
ca:ac:7b:a0:a6:af:12:ed:72:04:40:cc:cb:53:24:51:7a:51:
d0:f9:9a:7b:85:af:99:1c:48:5f:8d:0f:15:f3:cd:a7:0f:4e:
92:09:64:b1:24:08:ce:f8:c3:bf:a0:f5:98:c6:82:07:f3:66:
76:75:ac:17:71:24:9a:f1:2d:10:5b:ad:5c:42:04:75:8d:8f:
98:e5:e1:80:f4:99:cd:35:c7:f0:34:66:2b:f4:c2:7a:7b:0a:
b7:78:42:fa:05:9d:b7:0a:3e:eb:73:ec:64:b6:e7:0b:39:e4:
2a:be:74:7f:c9:44:c2:93:18:3a:55:1a:de:38:54:bb:89:31:
24:c7:8b:f2:a8:6f:d8:4c:f3:79:8a:c4:ff:dc:27:95:96:03:
11:b7:36:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:06:03 2025 by rpki-client