This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9a8d255d-f1df-38c9-9a43-23ba403e4905.roa
File: 9a8d255d-f1df-38c9-9a43-23ba403e4905.roa (raw, json)
Hash identifier: 2zaeXr3W50H5NFW1w+rc8RupY8IWkkFC08tyQMCHZfo=
Subject key identifier: B8:37:48:EF:52:33:E8:5C:CF:C0:F7:37:EA:25:43:BE:87:62:49:2B
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584BF8E0ACA54BFFC1FD0C8D9680
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9a8d255d-f1df-38c9-9a43-23ba403e4905.roa
Signing time: Tue 25 Nov 2025 02:00:31 +0000
ROA not before: Tue 25 Nov 2025 02:00:31 +0000
ROA not after: Mon 23 Feb 2026 02:00:31 +0000
asID: 3223
IP address blocks: 104.250.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:f8:e0:ac:a5:4b:ff:c1:fd:0c:8d:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Nov 25 02:00:31 2025 GMT
Not After : Feb 23 02:00:31 2026 GMT
Subject: CN=3dda5a04-4a64-4e45-bbe1-e580cef8e515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:86:1a:94:49:ed:e9:c5:bc:11:8a:92:a9:ad:
db:f8:4a:e1:32:c9:69:ab:a3:bc:e6:a2:71:5e:23:
a8:99:4f:78:18:ee:6f:d1:69:b4:e7:f4:4f:1e:1b:
e3:00:e7:22:c2:05:34:21:d9:bb:ed:f7:e6:43:38:
6b:43:25:1b:fd:75:10:77:c8:57:a5:24:44:d5:32:
e4:c0:5a:19:ee:c3:50:e6:8d:6c:02:73:14:6f:cd:
3c:14:c7:85:50:71:b8:61:ef:09:a2:70:34:53:87:
a6:70:d5:7e:67:31:9c:76:a2:eb:b3:7f:a8:db:32:
a3:78:57:8c:c7:45:3c:49:89:1c:f3:a3:c3:e8:89:
df:9e:36:2f:94:61:9a:52:39:e2:be:2c:cb:86:ae:
60:9d:c1:e9:74:b9:55:c0:6e:10:7e:25:66:72:d0:
0f:c5:4a:6b:52:d7:5e:5b:ab:f5:27:ac:18:e6:61:
2f:4e:68:04:65:b7:7f:2b:c6:4d:bf:ed:53:3d:ae:
04:ea:80:b3:c5:5c:9c:d2:6a:a0:68:2a:cf:a8:de:
48:5e:ea:6a:d0:a0:06:a0:53:38:cf:24:05:d6:95:
07:1d:25:66:ce:c3:ca:c9:25:ae:61:bb:bd:b0:5f:
1e:33:04:00:73:1a:81:b7:70:dd:a9:48:73:ef:16:
84:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:37:48:EF:52:33:E8:5C:CF:C0:F7:37:EA:25:43:BE:87:62:49:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9a8d255d-f1df-38c9-9a43-23ba403e4905.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:2a:10:9d:57:58:67:d7:a1:6e:5c:04:63:33:11:f9:94:e8:
cb:2e:cd:d6:22:02:8c:de:d3:d8:54:96:1c:ec:ee:f4:33:ba:
49:35:4c:9e:63:c8:09:14:9f:40:40:cc:71:02:e0:f9:0c:a1:
40:52:d6:5c:10:19:d4:bd:cb:7c:04:46:d1:86:08:5c:c9:16:
ff:0d:7c:55:bb:a0:e9:34:57:f6:ab:26:04:c0:94:58:15:f7:
45:e1:cf:f7:78:7e:ba:5b:29:ed:42:85:2d:9a:24:c4:08:85:
b6:7d:4e:c6:3e:4f:05:a0:c1:f9:93:d5:ae:e7:19:34:08:ae:
6d:30:45:7d:71:82:d9:23:87:71:3d:9b:e9:7e:d0:37:26:e0:
e6:a8:a5:7d:58:c1:d2:1a:2a:11:59:a5:7c:53:64:0b:67:7e:
4f:df:d5:2f:3f:94:1e:ee:fc:8c:62:1f:17:a7:77:2b:80:e6:
a7:32:06:89:64:08:d8:26:d0:44:a1:23:9e:3f:79:63:4a:c1:
9e:90:0b:2b:6c:2d:00:00:13:ac:b5:18:3b:3b:82:75:71:c1:
99:c6:a9:4d:9a:13:79:3d:81:68:11:64:f9:18:b0:3d:54:2b:
c6:6e:c7:a0:e1:b5:16:83:91:9a:fb:c7:fc:e7:81:13:ab:41:
5c:40:92:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:45:30 2025 by rpki-client