This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b8594a1d-88e8-3e24-9b09-64e0cbe25293.roa
File: b8594a1d-88e8-3e24-9b09-64e0cbe25293.roa (raw, json)
Hash identifier: OJQyfzgObG6GBYGNkfc9U6ixyiZJRsJj8Ho5SJBLg3Y=
Subject key identifier: 14:BA:70:E5:6A:96:56:38:EA:45:E6:60:AD:A6:4D:85:81:D3:5B:F4
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584C34E659553139C4DBE9226C00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b8594a1d-88e8-3e24-9b09-64e0cbe25293.roa
Signing time: Tue 16 Dec 2025 14:00:38 +0000
ROA not before: Tue 16 Dec 2025 14:00:38 +0000
ROA not after: Mon 16 Mar 2026 13:00:38 +0000
asID: 41264
IP address blocks: 104.133.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:34:e6:59:55:31:39:c4:db:e9:22:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Dec 16 14:00:38 2025 GMT
Not After : Mar 16 13:00:38 2026 GMT
Subject: CN=7210ab0c-f35a-4c67-9c6b-0e2d7c11b8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b7:2d:b9:08:36:5d:a3:ce:da:76:32:33:ce:
85:8a:8c:ad:9b:47:06:8d:64:87:0c:20:5a:2c:bc:
2f:4f:02:8d:1c:45:08:a4:b7:9e:a8:94:36:e5:de:
0b:32:a3:86:1f:4b:61:14:ea:83:c5:0d:b4:0c:cd:
2e:b4:2d:1c:c5:75:40:bf:75:42:d8:d1:ea:de:de:
93:11:ed:51:8b:0c:e6:79:88:21:04:9e:36:e1:f5:
7c:6d:9c:71:d0:1f:be:9a:04:80:6e:5f:7f:3c:7b:
31:2e:54:3e:80:4a:64:cc:da:03:4d:fb:28:a0:5a:
23:d7:c4:9d:1d:85:ec:2f:de:a1:54:e4:9d:9b:9d:
07:30:32:48:e5:7c:89:d5:9e:ec:e9:ed:40:95:a3:
cd:47:42:37:1e:d9:e6:50:87:0c:7c:a7:4b:b4:cc:
f0:83:ad:6b:12:9d:55:ba:de:75:70:c1:6d:23:c4:
df:f5:b2:48:67:6f:7b:25:0e:80:87:5d:f1:15:c0:
2e:f1:4d:03:14:b6:30:d2:ac:ec:f6:20:4d:82:75:
7b:64:83:a3:9d:90:1f:83:42:56:4a:c6:ac:02:be:
2a:ed:06:5b:5b:83:11:96:ea:c2:d0:99:bf:90:af:
2a:14:cb:d3:50:b7:0f:4f:5e:ac:e9:77:62:29:ae:
2b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BA:70:E5:6A:96:56:38:EA:45:E6:60:AD:A6:4D:85:81:D3:5B:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b8594a1d-88e8-3e24-9b09-64e0cbe25293.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:25:ec:db:3f:c8:c4:8d:7d:65:d9:e5:0b:70:67:b7:ae:31:
1e:22:58:e6:2d:20:96:e7:04:3e:ba:82:7b:d0:86:94:4d:45:
ab:fe:0f:01:12:ac:96:81:57:ff:69:5b:49:1e:ae:60:51:2d:
17:b3:8d:65:a0:02:73:6f:47:d4:77:3e:17:14:56:07:81:1a:
37:07:2b:0d:f1:5a:c7:6e:9e:f7:5f:91:34:b4:19:07:87:41:
35:7d:53:91:00:f5:fe:c1:44:5b:af:e5:24:48:59:0f:34:ab:
82:bb:63:e0:32:44:d0:64:91:bb:44:b4:7d:38:68:13:92:a2:
97:31:80:0f:c5:ab:7c:21:38:ec:58:bf:3f:55:67:6b:0c:e9:
43:ed:b8:f1:99:0d:af:79:e2:59:c4:21:26:80:ed:b4:95:20:
a6:2a:00:41:88:c8:d9:23:bf:af:31:15:23:b0:82:a3:4e:da:
08:4b:29:1b:38:47:b2:db:94:9b:27:ea:58:09:4d:4f:51:63:
6b:83:24:19:09:fa:67:42:43:67:ac:10:d4:ab:af:b9:00:89:
a0:1d:4a:0b:ef:e9:75:b7:75:f9:98:54:d4:42:76:85:ee:d3:
a5:86:d3:dd:22:98:0d:60:4d:84:c3:4e:7d:3d:6a:aa:dc:16:
37:2b:ed:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 17:32:12 2025 by rpki-client