This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/ecc1db62-c0dc-36d1-a903-9bd84f7ec7ac.roa
File: ecc1db62-c0dc-36d1-a903-9bd84f7ec7ac.roa (raw, json)
Hash identifier: GCSJcLzGusN5cv2653esR/QZdQKaiAlDFKVIU5SSLSA=
Subject key identifier: 08:97:DF:ED:CC:77:5A:1B:E1:B0:E2:FF:33:BD:C7:B4:C8:97:77:97
Certificate issuer: /CN=d41a3f41-d9b3-4528-8251-900156f4efac
Certificate serial: 010D0C9F4328584C1630CFE6B9F7542562032C80
Authority key identifier: 39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/ecc1db62-c0dc-36d1-a903-9bd84f7ec7ac.roa
Signing time: Fri 05 Dec 2025 14:00:38 +0000
ROA not before: Fri 05 Dec 2025 14:00:38 +0000
ROA not after: Thu 05 Mar 2026 14:00:38 +0000
asID: 14525
IP address blocks: 64.22.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:16:30:cf:e6:b9:f7:54:25:62:03:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41a3f41-d9b3-4528-8251-900156f4efac
Validity
Not Before: Dec 5 14:00:38 2025 GMT
Not After : Mar 5 14:00:38 2026 GMT
Subject: CN=434677a8-0868-4599-9f36-09a310ccee45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fb:6c:10:cc:10:73:7f:99:57:23:8b:38:8d:
c2:47:5d:1c:d9:3f:a3:c2:4e:b1:b6:98:22:8f:09:
27:52:b5:39:bd:a4:22:26:8f:81:9e:61:f3:63:cf:
ff:a8:a2:3e:de:c8:8c:65:d6:4d:47:5c:d2:f5:2a:
9d:88:ef:70:fa:f2:a8:e5:c6:8b:f4:3a:bb:ef:df:
68:19:72:2e:3f:fe:0c:35:c5:cd:32:b2:43:b1:d5:
ff:db:d3:6c:3b:10:a5:58:b3:e3:1e:71:9b:49:45:
1f:4f:d2:de:e4:dd:e1:7b:2a:5c:5d:01:06:6f:18:
b9:63:b3:7d:89:8e:4e:f7:ae:b8:ee:26:31:a6:ae:
c8:35:ce:8b:a7:9a:05:3c:1e:e4:ac:00:6f:27:a9:
3b:77:fb:e4:54:7a:63:92:bb:b4:1c:1e:5a:49:54:
f2:0c:23:a4:8d:0f:f6:1e:8d:44:91:0d:aa:b7:9a:
96:7a:23:e3:0b:21:4f:fa:70:ab:ac:cd:01:c3:b3:
b5:5d:cd:9b:a9:aa:5c:4b:36:0c:f6:6f:58:fc:b2:
3f:23:2a:99:31:28:b4:06:dc:26:5a:9a:f5:a0:ca:
09:50:52:07:e1:8a:14:d5:57:5b:81:4e:9b:56:1a:
85:0c:2d:4d:e9:1a:51:ae:01:95:60:a1:14:39:a3:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:97:DF:ED:CC:77:5A:1B:E1:B0:E2:FF:33:BD:C7:B4:C8:97:77:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/ecc1db62-c0dc-36d1-a903-9bd84f7ec7ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl
X509v3 Authority Key Identifier:
keyid:39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer
sbgp-ipAddrBlock: critical
IPv4:
64.22.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:61:4d:27:08:e0:68:b3:66:d3:dd:32:52:70:cc:64:25:b8:
40:f0:f0:8b:81:a0:f9:bd:c7:2a:d5:ac:cf:d5:2f:3c:12:b4:
6f:83:e3:21:b7:1d:0c:df:2f:ad:3b:70:fe:05:d1:62:d9:0c:
42:bd:0a:b7:a3:66:29:46:6f:76:45:0b:96:2a:98:36:73:e2:
e7:cc:e6:30:6b:ad:0b:16:83:92:90:54:6c:dd:44:3b:20:f5:
7f:65:5e:74:2f:62:89:4f:01:37:12:6f:dd:d6:6a:43:5d:fb:
1f:20:1e:d6:0d:ed:9e:e8:cd:78:01:0f:cb:25:e8:26:e1:f3:
30:15:f6:68:49:a4:97:84:a0:73:fa:74:65:99:68:e2:ea:74:
53:c6:52:7a:79:5a:7e:aa:e1:12:9f:90:f0:ef:a6:1b:2e:ab:
15:5c:c2:8e:f4:98:a7:3c:35:ee:25:e7:d5:88:22:ef:80:6a:
bc:09:20:aa:11:a8:2f:f8:6f:22:f2:93:47:d8:b5:d6:42:78:
84:ba:82:fc:68:03:a0:1f:62:84:00:c8:ec:21:20:52:91:73:
ed:a5:38:41:6d:7c:32:d2:c5:a5:a1:af:4b:29:f0:5d:22:ad:
57:69:a8:fa:1a:d4:0e:42:e6:f8:dd:e9:ff:87:65:7d:e5:a5:
dc:3b:1a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:26:09 2025 by rpki-client