This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa
File: d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa (raw, json)
Hash identifier: Ao9RXIHXbt/es99cyohxsGcIE4knykI+B4kaV+8gDoM=
Subject key identifier: FE:EE:C2:A3:8B:5B:2E:A2:B4:8F:3A:32:26:DD:37:7E:41:0B:79:76
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F4328584BF8E0B7F3037EFE4EE26B9240
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa
Signing time: Tue 25 Nov 2025 02:00:31 +0000
ROA not before: Tue 25 Nov 2025 02:00:31 +0000
ROA not after: Mon 23 Feb 2026 02:00:31 +0000
asID: 11232
IP address blocks: 67.217.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:f8:e0:b7:f3:03:7e:fe:4e:e2:6b:92:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Nov 25 02:00:31 2025 GMT
Not After : Feb 23 02:00:31 2026 GMT
Subject: CN=5058b30d-1257-4351-99c3-90a4ee101c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:62:f3:7b:92:5d:58:e0:a1:4d:3c:bf:7a:
7a:ef:fa:c5:2c:5c:d1:7d:43:ed:99:af:a5:77:d7:
3f:e6:65:8d:0b:a1:7e:e1:c1:c9:68:88:32:bd:2d:
ba:f8:7c:cf:d1:60:75:ad:93:06:de:98:46:97:39:
46:47:83:ad:38:d9:4e:69:98:8b:8d:c1:a4:b8:69:
60:57:26:3f:46:d6:ce:22:f0:a0:1a:a5:ff:93:61:
b0:7c:5f:74:88:6f:ca:45:39:27:69:c4:d4:6d:2f:
ce:5a:f5:10:2f:0c:9b:69:47:bd:49:ea:6a:de:70:
b3:af:34:3c:b4:69:b9:8b:3e:e1:21:c0:d4:f5:3b:
bf:58:49:ad:3e:50:f1:b2:ec:2d:c9:e4:8f:89:2c:
38:1e:ef:a3:55:ee:62:d9:3c:43:55:d7:57:ad:02:
77:11:fb:a6:97:bf:26:97:67:f6:0a:3f:36:73:65:
06:3e:fc:a2:48:11:2f:11:44:26:75:0c:ae:df:72:
bf:91:78:48:53:4d:95:8c:ce:e0:99:d0:bc:bd:92:
48:4b:48:31:71:26:f3:6f:cc:a1:6a:07:5c:5b:7e:
bf:ff:6d:e6:13:b9:f7:2e:24:95:25:6c:f1:a8:29:
6c:5d:d1:02:99:c3:e6:86:d1:d5:fa:69:a1:45:d8:
17:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EE:C2:A3:8B:5B:2E:A2:B4:8F:3A:32:26:DD:37:7E:41:0B:79:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
67.217.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:e9:5c:2b:86:ed:c5:b7:e8:f8:ab:ae:2e:fd:be:d6:e6:f8:
c8:2c:52:77:26:20:ec:92:2a:96:dd:5a:e9:fb:09:c6:db:db:
50:92:7d:a6:21:20:85:ff:cb:0d:08:08:de:e5:30:94:1c:d3:
0f:9a:c6:58:b6:bb:e9:9e:8f:a1:fa:e7:ff:f2:aa:b9:11:9d:
f2:99:17:25:32:fe:aa:57:e4:79:d8:b3:ca:c4:1a:76:b2:84:
03:8c:49:a1:ef:0e:3f:97:45:e7:fc:54:e6:50:31:31:54:89:
2e:7f:26:43:6f:88:85:90:16:e2:cc:97:70:87:4e:09:53:66:
32:10:76:0f:e3:e9:58:c4:82:2b:df:6a:3d:58:16:ea:0f:53:
7c:a9:30:3f:4b:05:ba:f2:96:1b:16:2a:a0:a0:78:a0:e5:99:
50:67:ea:cf:92:f6:07:aa:4a:31:ae:4d:2d:52:d2:64:77:3b:
96:87:6f:79:59:41:82:62:c8:a7:3a:1e:df:5f:49:c8:f6:a1:
72:d3:db:c3:17:28:86:a5:8f:b5:e5:91:67:5b:75:54:a6:3c:
50:68:c6:dc:d1:10:16:ce:29:72:91:f4:41:44:62:3b:7c:b2:
26:42:ee:54:a9:d6:f0:6c:8e:c3:75:c3:40:c1:c6:ab:7b:76:
a2:7b:2d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:05:07 2025 by rpki-client