This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/a608f793-5bc4-3f6e-a460-f0e592ab913e.roa
File: a608f793-5bc4-3f6e-a460-f0e592ab913e.roa (raw, json)
Hash identifier: 0G/AVKTCRcGdyyW+nxRQa/lspYY1AWSMalBqDEInfE4=
Subject key identifier: 5B:EB:12:30:06:81:82:7B:0A:54:41:83:8C:CF:75:B3:7B:A9:F2:A4
Certificate issuer: /CN=6396ecb5-3b91-4d1e-b787-089230813a23
Certificate serial: 010D0C9F4328584BFD10AC08B339BACB02C1B780
Authority key identifier: EA:59:6F:96:0F:E3:60:24:00:29:A2:A4:4B:82:50:23:00:6B:15:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/a608f793-5bc4-3f6e-a460-f0e592ab913e.roa
Signing time: Wed 26 Nov 2025 14:00:39 +0000
ROA not before: Wed 26 Nov 2025 14:00:39 +0000
ROA not after: Tue 24 Feb 2026 14:00:39 +0000
asID: 400777
IP address blocks: 66.59.204.0/24 maxlen: 24
66.59.205.0/24 maxlen: 24
66.59.206.0/24 maxlen: 24
66.59.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/6396ecb5-3b91-4d1e-b787-089230813a23.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/6396ecb5-3b91-4d1e-b787-089230813a23.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:fd:10:ac:08:b3:39:ba:cb:02:c1:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6396ecb5-3b91-4d1e-b787-089230813a23
Validity
Not Before: Nov 26 14:00:39 2025 GMT
Not After : Feb 24 14:00:39 2026 GMT
Subject: CN=de6d3248-4f76-4312-9325-daf47e4ba3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:b3:f5:37:97:ad:55:e9:c9:da:0d:d2:9a:
c2:ad:c2:95:75:57:a5:04:ff:75:46:12:1e:23:e6:
a2:3f:1f:7e:29:b8:01:df:10:bf:de:6d:99:c5:7b:
0a:f7:63:eb:bf:81:4f:66:d9:6d:11:c4:b9:1b:e9:
96:66:00:c6:f9:95:fa:83:10:ca:1c:39:21:1c:cb:
31:21:3f:eb:49:be:27:fc:61:00:9d:74:12:93:ec:
20:02:f5:6a:eb:9d:5b:9f:48:67:3b:bc:96:a7:22:
27:c9:e2:20:f4:ae:d9:5b:8e:f1:42:a3:2b:e1:f6:
fc:cd:59:3e:2f:de:36:da:bf:18:6d:2c:86:7a:8c:
aa:2e:58:55:93:09:04:28:f7:4d:bc:f1:e4:ee:92:
8c:54:c1:ca:98:73:7e:21:32:d7:90:d3:a9:dd:74:
2b:b7:01:7c:0a:6e:4e:e9:7f:3e:ae:61:89:db:28:
1f:f5:26:ca:21:18:e8:de:ae:59:ba:29:18:a1:64:
46:57:53:63:d8:8e:b0:f4:10:45:6e:00:8c:cb:6a:
78:92:81:c5:78:95:0e:99:6b:a2:aa:4f:df:a8:af:
cd:c8:ba:d7:7a:59:df:00:de:65:5f:67:a9:f5:cf:
09:bb:2e:cc:4d:7f:6e:ea:53:59:0d:0c:e9:1e:23:
27:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EB:12:30:06:81:82:7B:0A:54:41:83:8C:CF:75:B3:7B:A9:F2:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/a608f793-5bc4-3f6e-a460-f0e592ab913e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/6396ecb5-3b91-4d1e-b787-089230813a23.crl
X509v3 Authority Key Identifier:
keyid:EA:59:6F:96:0F:E3:60:24:00:29:A2:A4:4B:82:50:23:00:6B:15:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23.cer
sbgp-ipAddrBlock: critical
IPv4:
66.59.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:1d:9a:74:81:8b:50:5d:a4:d7:a2:9a:1f:c0:f6:e2:74:08:
4f:eb:45:e3:62:cc:16:0c:1b:ac:1c:f7:e9:6c:38:8a:e5:5c:
60:10:bb:fb:b0:45:bb:a7:23:df:11:e4:62:3f:04:37:24:e0:
f5:77:e4:8d:37:8e:d7:71:42:b7:52:17:1f:a7:ca:aa:94:33:
5c:76:99:2f:6f:ea:7d:44:13:56:7b:76:07:0d:11:d2:ec:ea:
24:8d:8a:26:2d:ea:83:c2:58:c5:ff:74:2f:3d:af:4a:8e:03:
f5:fc:1d:43:23:ac:cc:95:5b:44:3c:a3:a1:d2:87:04:46:f5:
a3:f3:0f:57:d0:a9:21:d1:df:48:4f:df:5d:02:fd:17:4f:9d:
c2:de:34:d3:a4:87:46:2a:df:4d:50:38:61:44:31:2d:23:05:
02:0c:93:7e:b3:d7:f4:f5:23:75:b4:45:b1:86:8f:b8:24:78:
9f:2c:58:a8:2c:76:66:d6:9c:41:0d:95:74:ad:d5:9a:82:5c:
bc:4c:76:10:53:5d:52:d7:f1:bc:8b:f2:de:d9:6a:bd:3c:25:
25:dd:3b:78:ac:10:b1:02:02:68:d7:e8:8c:b9:93:41:14:9b:
b2:fd:b4:99:21:6e:22:7e:2b:ab:2c:8f:5a:e0:d0:e2:69:28:
d9:96:25:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:10:20 2025 by rpki-client