This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/dd732f92-179e-33d5-9832-59f3b948cc7c.roa
File: dd732f92-179e-33d5-9832-59f3b948cc7c.roa (raw, json)
Hash identifier: 1FdMY8CGKVUN7Xvc+tbFEOvQslOML691D7y7kAP3GIE=
Subject key identifier: 58:43:A2:20:3B:1F:C7:17:2B:26:F0:70:53:AE:3C:D1:88:87:9C:B9
Certificate issuer: /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial: 010D0C9F4328584C0140FB73287945B929FD6578
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/dd732f92-179e-33d5-9832-59f3b948cc7c.roa
Signing time: Fri 28 Nov 2025 02:00:30 +0000
ROA not before: Fri 28 Nov 2025 02:00:30 +0000
ROA not after: Thu 26 Feb 2026 02:00:30 +0000
asID: 31898
IP address blocks: 67.20.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:01:40:fb:73:28:79:45:b9:29:fd:65:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Validity
Not Before: Nov 28 02:00:30 2025 GMT
Not After : Feb 26 02:00:30 2026 GMT
Subject: CN=169f3618-5c57-49f2-a08a-3c8a266fb75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:36:00:b3:76:60:30:24:f7:15:76:34:29:
6e:b4:bb:20:e0:54:ff:c8:f5:93:e2:21:c8:d3:56:
fe:77:15:65:24:04:c5:50:e5:14:73:09:ba:b5:c3:
68:d3:83:2c:88:01:09:be:78:d3:0f:b8:b1:40:49:
57:a0:56:c8:73:56:b2:7f:9b:00:f2:76:a8:a6:7a:
bf:7f:d3:65:aa:89:ec:3d:bb:46:b8:3a:09:e5:1b:
05:84:70:6e:46:66:7f:29:6d:04:6f:c6:00:4a:1c:
8f:64:1a:5b:af:36:f9:c7:16:68:14:ab:2c:d1:8c:
fe:c5:53:5d:36:cc:7f:9f:e3:00:48:35:9f:08:19:
87:c6:e9:18:f0:58:88:34:24:07:fb:e4:47:39:80:
07:ca:ad:60:ad:42:a4:b2:f0:3c:70:2e:14:bb:32:
b3:a2:85:5e:7b:4b:80:7f:13:9c:1f:c5:00:09:56:
75:19:53:23:9e:88:91:f7:84:3a:4f:89:a5:d8:b8:
6c:3f:d6:c6:4b:50:54:97:33:fe:a0:71:25:c3:b5:
62:1d:74:35:de:d6:d7:b5:df:17:87:e6:16:22:c9:
e5:fe:53:e2:9a:68:bc:6c:a5:68:69:b3:2c:11:1f:
f6:7e:8b:c6:d1:ad:1d:4d:ae:29:3a:0e:93:6d:71:
82:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:43:A2:20:3B:1F:C7:17:2B:26:F0:70:53:AE:3C:D1:88:87:9C:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/dd732f92-179e-33d5-9832-59f3b948cc7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
X509v3 Authority Key Identifier:
keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
sbgp-ipAddrBlock: critical
IPv4:
67.20.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:25:d6:b2:8d:e5:f4:44:fc:be:24:1b:3d:33:bf:2c:99:f0:
3e:1a:7d:36:bd:94:8a:c8:96:ea:5d:7d:ad:21:c5:8e:87:a7:
66:27:a3:08:48:a6:0e:be:a4:53:7a:45:88:58:be:2d:46:b5:
80:f5:64:af:f8:7a:6d:e2:2d:b7:ed:5d:3c:a3:3f:fd:e8:33:
2a:e4:14:55:c6:1f:04:6f:06:11:db:ff:6c:ac:6c:0a:8f:d9:
18:bd:3f:78:6a:a6:ba:49:4d:ed:0f:ab:00:73:77:5e:89:1f:
ea:ff:72:ba:85:21:cf:e6:25:66:d7:e5:e1:90:9f:d8:f4:01:
34:42:3c:9f:69:ae:60:02:9f:e3:6c:7b:2c:3f:7b:22:c3:1e:
c1:12:03:8a:8f:88:47:b2:81:50:5b:24:b0:e7:af:73:4e:30:
d6:41:3d:ae:d4:d3:0f:62:ea:8c:7c:07:4b:2e:e3:45:b9:51:
1c:4d:1f:05:7e:1c:d0:d3:7f:e0:b0:ab:42:98:32:91:50:3f:
2f:51:cc:eb:7a:17:ea:55:55:d9:1f:46:01:d9:a6:8b:78:2b:
2a:3f:17:7a:05:3d:02:8a:89:23:8e:30:d4:b3:f3:28:e0:e9:
f5:9f:51:e5:2d:56:7a:78:8f:00:d1:4d:69:be:5d:f2:28:d9:
ef:2b:39:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQPtzKHlFuSn9ZXgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWIyZTdlZDAtNzMxMC00ZWM2LWE0MzItZjlkZWQzNGFi
OTFiMB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk
MTY5ZjM2MTgtNWM1Ny00OWYyLWEwOGEtM2M4YTI2NmZiNzVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyM2ALN2YDAk9xV2NClutLsg4FT/yPWT4iHI
01b+dxVlJATFUOUUcwm6tcNo04MsiAEJvnjTD7ixQElXoFbIc1ayf5sA8naopnq/
f9NlqonsPbtGuDoJ5RsFhHBuRmZ/KW0Eb8YAShyPZBpbrzb5xxZoFKss0Yz+xVNd
Nsx/n+MASDWfCBmHxukY8FiINCQH++RHOYAHyq1grUKksvA8cC4UuzKzooVee0uA
fxOcH8UACVZ1GVMjnoiR94Q6T4ml2LhsP9bGS1BUlzP+oHElw7ViHXQ13tbXtd8X
h+YWIsnl/lPimmi8bKVoabMsER/2fovG0a0dTa4pOg6TbXGCCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFhDoiA7H8cXKybwcFOuPNGIh5y5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJl
N2VkMC03MzEwLTRlYzYtYTQzMi1mOWRlZDM0YWI5MWIvZGQ3MzJmOTItMTc5ZS0z
M2Q1LTk4MzItNTlmM2I5NDhjYzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWIyZTdlZDAtNzMxMC00ZWM2LWE0
MzItZjlkZWQzNGFiOTFiLzliMmU3ZWQwLTczMTAtNGVjNi1hNDMyLWY5ZGVkMzRh
YjkxYi5jcmwwHwYDVR0jBBgwFoAUM0oT3qhiRI5j8VyZHha75VAqtPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJlN2VkMC03MzEwLTRlYzYtYTQzMi1mOWRl
ZDM0YWI5MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQxRAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG8l1rKN5fRE/L4kGz0zvyyZ8D4afTa9lIrIlupdfa0hxY6Hp2YnowhI
pg6+pFN6RYhYvi1GtYD1ZK/4em3iLbftXTyjP/3oMyrkFFXGHwRvBhHb/2ysbAqP
2Ri9P3hqprpJTe0PqwBzd16JH+r/crqFIc/mJWbX5eGQn9j0ATRCPJ9prmACn+Ns
eyw/eyLDHsESA4qPiEeygVBbJLDnr3NOMNZBPa7U0w9i6ox8B0su40W5URxNHwV+
HNDTf+Cwq0KYMpFQPy9RzOt6F+pVVdkfRgHZpot4Kyo/F3oFPQKKiSOOMNSz8yjg
6fWfUeUtVnp4jwDRTWm+XfIo2e8rOXY=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:26:20 2025 by rpki-client