This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d90ca4db-b805-32c3-a6aa-fed7bb7df542.roa
File: d90ca4db-b805-32c3-a6aa-fed7bb7df542.roa (raw, json)
Hash identifier: V3W3VENlUJ5C9ziKkaWLTXsv979URC2TEYviiL3sqn0=
Subject key identifier: 31:1C:28:C6:D1:86:74:02:EA:1C:59:3D:9A:E0:72:C6:B6:53:F5:3B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584C09A0B6D6B927D9931E638080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d90ca4db-b805-32c3-a6aa-fed7bb7df542.roa
Signing time: Mon 01 Dec 2025 02:00:30 +0000
ROA not before: Mon 01 Dec 2025 02:00:30 +0000
ROA not after: Sun 01 Mar 2026 02:00:30 +0000
asID: 399646
IP address blocks: 108.165.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:09:a0:b6:d6:b9:27:d9:93:1e:63:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 1 02:00:30 2025 GMT
Not After : Mar 1 02:00:30 2026 GMT
Subject: CN=063d4c8a-49b1-410d-b7b2-fdfcff10b801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:8e:a4:f3:8a:cc:4d:ae:c4:86:23:22:55:
2e:65:4d:11:ab:51:82:d5:b7:17:d0:b7:76:5a:c0:
66:7f:1a:24:08:3f:bf:26:95:b1:44:70:b3:6f:c7:
9e:98:aa:d7:5c:dc:83:6e:1f:2d:fa:16:a9:cd:62:
43:b4:36:bc:ba:97:24:44:10:0b:77:c4:fc:5d:df:
44:53:fe:84:cb:cc:12:6c:7d:89:10:cb:e7:17:96:
36:2f:9f:37:08:08:6e:5c:e4:a9:45:fa:a5:b5:8c:
67:ed:ec:85:de:d3:f3:d8:a7:b4:54:b7:ae:0e:e0:
7b:ce:9c:75:af:6e:64:89:33:ea:36:1f:f6:f5:1f:
1d:9c:19:c2:6a:cb:e2:67:2d:99:03:ca:5f:f2:b0:
44:ee:8b:76:70:a9:e3:ce:31:55:2f:2b:a9:ec:32:
ae:a1:0f:10:3e:8b:a8:66:8d:22:20:6b:e0:24:76:
44:4b:27:dd:d0:11:9b:9f:f8:f6:6d:ab:39:f5:a1:
8a:6b:bb:26:39:bf:94:c9:fd:cf:4e:8b:6d:d7:cd:
a1:d4:f0:91:0c:13:83:e3:fa:3f:21:bb:6f:25:9b:
b8:4b:0d:ab:2e:1c:cc:d2:8d:25:1c:2d:48:67:18:
ce:0c:5b:c2:37:21:d8:69:87:f4:da:86:d8:f6:77:
6c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1C:28:C6:D1:86:74:02:EA:1C:59:3D:9A:E0:72:C6:B6:53:F5:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d90ca4db-b805-32c3-a6aa-fed7bb7df542.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:46:b8:cb:b7:66:2d:03:95:d5:5b:68:c6:fd:40:d3:f1:ee:
07:0a:c9:89:25:25:22:e1:53:bd:c1:f2:6a:8e:3c:bd:11:21:
32:bb:d3:b5:79:e6:d3:c5:f5:af:fa:d6:1f:b6:71:15:a3:47:
66:56:c9:31:eb:7e:b4:c6:f3:12:3a:d0:74:87:6f:d2:84:cf:
74:2b:ba:61:62:dc:99:ac:49:89:02:7d:95:07:ef:9e:4f:0c:
12:71:90:aa:d5:ec:d0:2c:7f:c9:23:40:42:e9:3b:d7:db:1c:
db:72:cd:23:d8:fb:39:f7:9a:74:d2:83:36:15:80:26:20:fe:
ce:9c:3a:40:9f:b1:76:7e:8d:d8:32:67:df:97:b5:8b:9b:96:
76:8f:a3:46:5e:4f:67:50:04:1b:e8:a7:6d:4f:fe:bc:57:2e:
98:e0:7d:90:fa:55:6c:8c:dc:f5:3e:9e:a5:c9:ac:5b:d6:61:
df:82:a9:dd:2d:c7:5e:23:c8:8f:56:9c:56:a2:5c:ae:cf:27:
21:00:d9:4d:44:f0:9d:3d:1c:dd:df:03:5f:94:d1:85:23:16:
08:c5:db:0a:82:b2:3d:f0:ea:d9:f0:80:0d:58:20:de:dd:d8:
ca:93:ca:ee:bb:9b:46:de:09:87:c5:00:a2:cc:05:e2:06:f3:
04:80:ba:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:11:02 2025 by rpki-client