This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/ab540f08-40ca-362e-a723-f3bf0d53cae8.roa
File: ab540f08-40ca-362e-a723-f3bf0d53cae8.roa (raw, json)
Hash identifier: +UZckTI7whKOKlC1B/N47JIuY+JT0iVlrjuKFhppkRI=
Subject key identifier: 27:72:A5:FD:17:85:CE:73:27:E8:17:2B:A1:04:D1:BF:35:8A:53:D8
Certificate issuer: /CN=67612b49-91a4-42d2-8352-16977b5d8e8a
Certificate serial: 010D0C9F4328584C109B6AAC7288B2A65228BA00
Authority key identifier: 26:B9:EA:BA:65:7A:DB:E3:64:D8:3F:BF:D2:FA:77:F6:5B:10:0C:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/ab540f08-40ca-362e-a723-f3bf0d53cae8.roa
Signing time: Wed 03 Dec 2025 14:00:38 +0000
ROA not before: Wed 03 Dec 2025 14:00:38 +0000
ROA not after: Tue 03 Mar 2026 14:00:38 +0000
asID: 14041
IP address blocks: 198.59.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/67612b49-91a4-42d2-8352-16977b5d8e8a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/67612b49-91a4-42d2-8352-16977b5d8e8a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:10:9b:6a:ac:72:88:b2:a6:52:28:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67612b49-91a4-42d2-8352-16977b5d8e8a
Validity
Not Before: Dec 3 14:00:38 2025 GMT
Not After : Mar 3 14:00:38 2026 GMT
Subject: CN=471348de-b1b9-4afd-8114-e6ba41c76b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0a:ce:c7:0e:4f:6a:37:5d:2d:c5:c5:95:b4:
1f:52:25:dd:11:66:c1:57:dd:39:fb:83:42:00:c3:
7e:cb:78:6f:1f:f2:17:64:05:69:08:db:a9:8c:19:
41:45:ae:fc:42:2a:a8:e6:36:94:7b:9d:4d:5d:7c:
8d:12:e0:03:77:4b:17:8b:b6:3f:3d:da:da:d3:3f:
89:3b:c7:fb:9a:bc:8c:23:b5:03:45:98:f6:19:8b:
7e:a6:31:1b:d3:75:9f:36:d2:97:e6:8d:4c:92:a8:
ae:7f:e4:40:9f:91:f6:63:45:61:e9:e8:27:d6:a0:
4d:0a:d1:08:30:22:5a:11:48:11:92:fb:70:33:b5:
b5:aa:e8:ec:d0:a4:bc:08:b9:61:62:c9:99:9b:d7:
88:67:f1:b4:c4:1b:0c:b5:cd:b8:2d:42:64:9a:fb:
4a:db:e9:3e:fa:19:8e:7f:6d:0c:ad:f3:a9:f7:f0:
19:13:ed:d0:79:00:20:7f:4b:f5:f7:40:44:79:f9:
59:9c:74:12:6d:56:bf:0a:fd:a1:6d:4a:29:f4:21:
34:d3:85:5b:3c:6f:01:ac:f8:e6:49:cb:29:ea:e4:
c8:74:b8:d0:cc:65:89:b0:59:6b:ac:a8:52:52:75:
df:b5:1a:1e:87:04:19:3e:79:2d:18:ad:22:c5:46:
74:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:72:A5:FD:17:85:CE:73:27:E8:17:2B:A1:04:D1:BF:35:8A:53:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/ab540f08-40ca-362e-a723-f3bf0d53cae8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/67612b49-91a4-42d2-8352-16977b5d8e8a.crl
X509v3 Authority Key Identifier:
keyid:26:B9:EA:BA:65:7A:DB:E3:64:D8:3F:BF:D2:FA:77:F6:5B:10:0C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.59.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:e1:0d:9c:2d:67:47:ab:70:a8:cc:0d:bc:3e:fa:17:39:29:
6c:7f:b6:e7:4c:3e:95:ce:0b:66:5d:6f:22:e7:b8:76:f9:21:
96:3e:f3:ca:49:13:1f:a4:ac:73:bd:d0:a4:59:67:0f:41:49:
a8:73:f6:96:d2:ac:fe:a7:62:02:ba:6d:9e:d0:68:87:96:f3:
13:08:1f:aa:38:61:b5:cf:29:0e:87:14:67:61:9b:07:17:3b:
04:05:f1:a3:52:86:76:f8:81:41:74:82:ba:81:8a:04:64:15:
c1:de:d5:e6:47:80:04:77:68:70:32:cc:06:8a:29:38:10:f4:
94:00:53:49:59:a2:c0:80:f8:ea:7d:f2:3f:40:94:12:4a:9b:
95:e0:4c:12:3c:d8:e4:0b:ce:3a:05:3d:4b:1a:74:b2:71:d9:
90:72:ee:7a:6e:8b:dd:4b:a9:93:dd:bd:78:ee:ef:35:96:54:
04:e7:75:51:55:64:3d:e1:81:cc:4e:73:61:9d:79:68:88:af:
19:d1:f2:88:21:ec:79:21:cb:89:92:e3:89:ea:59:a7:43:23:
65:2b:74:5f:ac:96:a0:ed:53:bf:85:54:d0:da:2c:cf:0c:11:
59:7b:0b:a5:c9:a9:37:5c:ab:d1:e4:2a:6b:99:ca:cb:03:c1:
e4:87:9b:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwQm2qscoiyplIougAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc2MTJiNDktOTFhNC00MmQyLTgzNTItMTY5NzdiNWQ4
ZThhMB4XDTI1MTIwMzE0MDAzOFoXDTI2MDMwMzE0MDAzOFowLzEtMCsGA1UEAxMk
NDcxMzQ4ZGUtYjFiOS00YWZkLTgxMTQtZTZiYTQxYzc2YjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgArOxw5PajddLcXFlbQfUiXdEWbBV905+4NC
AMN+y3hvH/IXZAVpCNupjBlBRa78Qiqo5jaUe51NXXyNEuADd0sXi7Y/Pdra0z+J
O8f7mryMI7UDRZj2GYt+pjEb03WfNtKX5o1Mkqiuf+RAn5H2Y0Vh6egn1qBNCtEI
MCJaEUgRkvtwM7W1qujs0KS8CLlhYsmZm9eIZ/G0xBsMtc24LUJkmvtK2+k++hmO
f20MrfOp9/AZE+3QeQAgf0v190BEeflZnHQSbVa/Cv2hbUop9CE004VbPG8BrPjm
Scsp6uTIdLjQzGWJsFlrrKhSUnXftRoehwQZPnktGK0ixUZ0hQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCdypf0Xhc5zJ+gXK6EE0b81ilPYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzYx
MmI0OS05MWE0LTQyZDItODM1Mi0xNjk3N2I1ZDhlOGEvYWI1NDBmMDgtNDBjYS0z
NjJlLWE3MjMtZjNiZjBkNTNjYWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc2MTJiNDktOTFhNC00MmQyLTgz
NTItMTY5NzdiNWQ4ZThhLzY3NjEyYjQ5LTkxYTQtNDJkMi04MzUyLTE2OTc3YjVk
OGU4YS5jcmwwHwYDVR0jBBgwFoAUJrnqumV62+Nk2D+/0vp39lsQDGkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzYxMmI0OS05MWE0LTQyZDItODM1Mi0xNjk3
N2I1ZDhlOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjsCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFnhDZwtZ0ercKjMDbw++hc5KWx/tudMPpXOC2ZdbyLnuHb5IZY+88pJ
Ex+krHO90KRZZw9BSahz9pbSrP6nYgK6bZ7QaIeW8xMIH6o4YbXPKQ6HFGdhmwcX
OwQF8aNShnb4gUF0grqBigRkFcHe1eZHgAR3aHAyzAaKKTgQ9JQAU0lZosCA+Op9
8j9AlBJKm5XgTBI82OQLzjoFPUsadLJx2ZBy7npui91LqZPdvXju7zWWVATndVFV
ZD3hgcxOc2GdeWiIrxnR8ogh7Hkhy4mS44nqWadDI2UrdF+slqDtU7+FVNDaLM8M
EVl7C6XJqTdcq9HkKmuZyssDweSHm8c=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:18:34 2025 by rpki-client