This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/aea7cd1d-a1ed-3404-852a-8f82586d17f4.roa
File: aea7cd1d-a1ed-3404-852a-8f82586d17f4.roa (raw, json)
Hash identifier: zFDvW/OnsZ/l71JCAIybV0yVfnBLc8oBEoSDjOO198c=
Subject key identifier: 02:47:9E:D4:C7:9E:D7:1D:7E:0C:95:E4:31:D8:A0:08:DC:00:C5:A0
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F4328584C0570E8A8ACE1607D725ADC00
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/aea7cd1d-a1ed-3404-852a-8f82586d17f4.roa
Signing time: Sat 29 Nov 2025 14:00:39 +0000
ROA not before: Sat 29 Nov 2025 14:00:39 +0000
ROA not after: Fri 27 Feb 2026 14:00:39 +0000
asID: 137409
IP address blocks: 64.64.104.0/22 maxlen: 24
64.64.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:05:70:e8:a8:ac:e1:60:7d:72:5a:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Nov 29 14:00:39 2025 GMT
Not After : Feb 27 14:00:39 2026 GMT
Subject: CN=2fa6cac4-b7b4-4f62-91b8-c794ab5fb724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:51:ee:c9:1a:d8:5f:b6:28:79:c8:6b:de:00:
49:ab:73:cf:38:3d:95:d2:40:7a:54:50:37:fc:47:
2d:47:27:0e:b5:92:38:07:eb:66:77:6e:c4:aa:90:
9d:07:98:65:ef:0f:54:73:4e:53:e3:2a:d8:ea:c7:
c9:46:42:7c:9e:89:8c:fd:5f:1a:cc:4a:87:26:8d:
c3:7a:c9:f2:2f:9f:9c:f8:8e:68:b2:56:a6:c5:e2:
a9:72:42:93:c7:94:6a:c6:ad:04:0c:08:2f:a1:19:
ce:b6:76:5c:67:10:5f:5f:75:db:c9:4e:15:3e:65:
d4:6b:08:fd:d0:0f:40:eb:ff:28:19:19:07:b2:19:
a1:32:e1:32:9e:90:ce:94:70:9b:08:c2:98:86:16:
a1:d5:05:e7:a9:fb:00:5e:d1:6f:7a:32:64:5a:91:
8e:a4:8f:5b:34:18:bf:f2:73:43:0c:c1:86:e6:70:
3e:4c:a8:37:31:4b:fa:3f:a8:66:c9:7e:97:99:84:
8d:3c:b7:94:65:05:8f:62:5b:4d:52:f0:c7:e1:cc:
71:24:e5:de:61:c7:f9:cb:cd:90:28:02:15:52:c6:
2d:b5:8b:3e:bf:4a:89:84:dc:0e:dd:82:41:f0:d7:
b1:b8:91:fa:e3:97:e2:7f:42:84:dd:a5:22:63:6d:
11:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:47:9E:D4:C7:9E:D7:1D:7E:0C:95:E4:31:D8:A0:08:DC:00:C5:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/aea7cd1d-a1ed-3404-852a-8f82586d17f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
64.64.104.0/22
64.64.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:88:a1:63:0a:91:f2:e0:81:53:46:79:6f:a4:61:e3:a2:f9:
0d:10:b9:98:f0:0a:eb:16:4f:f5:56:11:18:c4:cc:2a:8b:33:
b6:09:b1:6b:91:c4:31:4d:16:e3:4c:41:d5:7f:20:aa:1c:ed:
4b:f6:1c:6d:d5:e5:44:e6:04:ee:44:c0:e3:08:35:57:82:2c:
97:2a:ba:44:ab:b1:74:f2:fb:cf:2a:b8:48:a6:8e:40:29:20:
ec:3c:f5:3f:a4:8d:17:a8:5b:98:45:f3:56:94:56:4f:59:0d:
92:bd:73:87:d2:de:d6:de:d8:41:7a:7d:f3:a6:47:06:69:c0:
d8:92:3a:8e:cb:1b:46:de:62:ed:fe:bd:36:4a:8d:50:7b:ae:
62:f3:c5:15:ca:49:e4:63:10:29:1a:ea:84:06:e1:92:63:7c:
99:e6:c2:11:a6:f5:b6:14:70:f7:5a:21:24:66:9c:2e:f6:00:
20:9b:5f:f3:0a:f4:4f:f7:87:66:c4:ce:b6:b6:91:3d:2c:09:
3c:c2:4b:da:98:6e:6a:11:08:2d:2d:13:ed:af:78:99:b0:8b:
08:29:a1:47:c5:02:3b:49:72:48:27:89:78:f9:5f:ce:ea:cc:
b7:8c:29:9a:03:7f:9f:97:9e:b9:bb:2e:84:9f:c5:e3:a1:f6:
da:9a:89:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:20:23 2025 by rpki-client