This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/570da3b2-99e4-30cc-b6f5-ed0f399797fb.roa
File: 570da3b2-99e4-30cc-b6f5-ed0f399797fb.roa (raw, json)
Hash identifier: AGhhgfhh+rHnUD69KT2UdmqtggoBNkH3Ri5+uLPFaeY=
Subject key identifier: 81:3A:F5:15:09:4D:F3:22:B5:92:A8:10:9C:05:CE:39:E8:54:1D:EA
Certificate issuer: /CN=2ff5ac87-7814-4f58-a2b6-2075afc56f21
Certificate serial: 010D0C9F4328584BFFDB7F9B5D9E6A94382E5880
Authority key identifier: AB:2B:9D:64:9F:90:C1:18:3F:2B:2E:38:1F:79:BF:7D:93:6A:47:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/570da3b2-99e4-30cc-b6f5-ed0f399797fb.roa
Signing time: Thu 27 Nov 2025 14:00:40 +0000
ROA not before: Thu 27 Nov 2025 14:00:40 +0000
ROA not after: Wed 25 Feb 2026 14:00:40 +0000
asID: 16715
IP address blocks: 67.220.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ff:db:7f:9b:5d:9e:6a:94:38:2e:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff5ac87-7814-4f58-a2b6-2075afc56f21
Validity
Not Before: Nov 27 14:00:40 2025 GMT
Not After : Feb 25 14:00:40 2026 GMT
Subject: CN=f19dbbcd-fb62-4abf-99a5-599c79339ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:75:fa:a9:48:89:f1:ec:8e:12:f0:4e:37:
1a:71:84:77:33:70:65:c1:3d:c7:c7:0e:05:39:68:
25:3a:9c:c7:af:8b:81:29:f6:de:b8:3d:21:04:0d:
41:73:f1:95:1e:c9:8d:35:8d:46:64:8e:5d:5e:fd:
c8:1b:9f:4c:ff:95:92:b6:d0:bc:05:ce:56:3d:a8:
54:83:b9:e3:b2:50:8b:06:f4:1f:d8:54:3a:c9:5b:
e2:85:b7:fa:18:d1:d1:bc:e6:a8:df:ac:3e:49:9b:
8c:dd:7e:9b:7a:8a:3b:0b:48:7a:77:f7:3d:d9:64:
d8:33:eb:4f:d2:61:69:50:7c:81:18:9b:d1:d6:02:
ac:66:61:07:90:ca:a4:fd:f4:48:ea:f2:a7:65:ad:
71:a8:f6:78:3a:b8:54:5c:fa:f4:cf:cc:87:21:3f:
75:9d:59:a7:1a:27:fc:da:63:a7:cb:66:bd:67:8a:
fd:1d:95:57:49:c5:de:7d:5e:fb:ee:08:8c:ef:82:
b1:2c:db:07:77:f3:33:39:2a:3b:bf:e6:15:2d:6c:
4d:99:fe:fb:04:ae:e7:a6:9d:b6:7a:f8:c2:a7:a9:
7c:e3:21:6f:88:ff:97:3c:72:44:07:ec:03:ea:c8:
66:0e:4c:13:b5:b4:9a:e4:64:a9:0c:e4:9d:cf:97:
5a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3A:F5:15:09:4D:F3:22:B5:92:A8:10:9C:05:CE:39:E8:54:1D:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/570da3b2-99e4-30cc-b6f5-ed0f399797fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.crl
X509v3 Authority Key Identifier:
keyid:AB:2B:9D:64:9F:90:C1:18:3F:2B:2E:38:1F:79:BF:7D:93:6A:47:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer
sbgp-ipAddrBlock: critical
IPv4:
67.220.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:df:65:58:bf:ff:82:0b:eb:a7:a6:30:92:0b:9f:1e:2d:c3:
e2:da:82:21:69:72:09:21:f2:6d:b6:c9:bd:09:a1:8f:87:ae:
d9:6c:9b:24:e6:0c:d0:fe:d7:bf:99:c0:36:6a:29:35:2f:4b:
fa:55:32:fd:40:41:fe:74:09:86:ae:36:9f:75:c1:c3:1a:d1:
8f:d3:69:46:49:16:cb:e6:18:1b:f6:1a:a8:1c:be:04:65:c8:
e3:ad:44:c8:a2:62:3c:cb:3f:4e:f5:8a:f4:ec:70:cb:2a:46:
d7:48:12:12:22:e2:8b:39:0c:ad:42:3e:96:d9:19:f2:39:94:
53:a8:98:45:3c:53:93:70:e7:64:95:be:82:bf:23:ab:ef:f3:
f5:2c:6c:bd:15:ae:72:c8:98:a1:b9:ce:f3:ec:4d:bc:52:0e:
c4:60:d9:da:c7:3a:80:62:b6:17:0c:21:fc:d3:ec:14:04:0f:
b4:fd:06:48:eb:d2:5c:65:f1:d5:53:37:6a:b7:71:45:41:21:
cd:2d:02:3e:2f:55:45:8e:20:28:cc:14:c4:c7:39:15:4e:5f:
f0:4b:b0:de:cd:51:f8:88:16:d9:d3:ae:97:db:1d:c4:40:a0:
9c:9b:af:aa:99:27:a5:c6:aa:88:c9:21:ce:8a:4a:04:a4:cd:
27:e8:a5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:40:11 2025 by rpki-client