This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9badc66-0c28-3b61-96ab-5f7b68b0b852.roa
File: a9badc66-0c28-3b61-96ab-5f7b68b0b852.roa (raw, json)
Hash identifier: x8kb2p2QvbncPlfVZqdBuheU62eB9AO5LvNhR5r94Yw=
Subject key identifier: 32:03:21:38:6D:4F:D9:BF:1C:59:99:B5:6A:12:45:56:79:2F:CD:D5
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584BFE760C6158964204C348B800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9badc66-0c28-3b61-96ab-5f7b68b0b852.roa
Signing time: Thu 27 Nov 2025 02:00:31 +0000
ROA not before: Thu 27 Nov 2025 02:00:31 +0000
ROA not after: Wed 25 Feb 2026 02:00:31 +0000
asID: 22773
IP address blocks: 98.161.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:fe:76:0c:61:58:96:42:04:c3:48:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Nov 27 02:00:31 2025 GMT
Not After : Feb 25 02:00:31 2026 GMT
Subject: CN=f31d64cc-1682-4ec2-8e55-7610615cd391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:90:9f:c9:5c:67:37:55:51:3a:35:26:47:ad:
21:32:f2:6f:02:3d:ec:da:64:fc:f3:f4:75:c2:cc:
a5:42:a2:9d:1a:b1:41:80:49:2c:f7:bb:9a:e3:3b:
2e:58:e3:c3:95:8e:82:ca:61:7a:a2:62:28:8b:0f:
6f:da:51:1f:d7:07:e8:36:8e:b4:a2:81:14:23:b6:
4b:9a:a6:67:ad:fe:94:5f:35:83:21:4c:23:f8:cd:
ef:06:5c:ce:5f:62:a6:6a:aa:23:87:c1:ba:1f:4f:
7e:b5:2f:53:23:1a:f2:8b:c1:d5:9b:f5:f1:b1:a5:
ba:51:f9:ea:f4:3c:4d:81:8f:25:d3:29:41:67:6d:
fc:18:1c:ae:7a:32:58:3f:54:b2:bd:f0:da:1c:54:
cd:d5:28:e7:1d:63:07:a5:78:10:08:7d:cc:b4:37:
66:17:4e:3b:4c:88:74:bc:7f:9c:3b:4f:5e:12:dc:
b3:c5:68:2f:fa:6d:50:ab:92:93:d6:b1:64:80:e6:
84:4b:9f:e4:66:95:43:03:2f:4e:eb:f7:4b:39:03:
2f:4e:a0:f7:73:8c:fb:c3:6e:79:22:31:b2:85:53:
02:84:e9:39:28:f0:81:cb:a6:ac:d4:79:1d:41:45:
c5:10:00:4d:a6:e4:04:81:e9:e5:ff:ce:3c:d6:3c:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:03:21:38:6D:4F:D9:BF:1C:59:99:B5:6A:12:45:56:79:2F:CD:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9badc66-0c28-3b61-96ab-5f7b68b0b852.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.161.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:1d:b2:9f:33:96:c5:ef:63:4c:ca:dd:d8:c0:d0:eb:3b:24:
43:32:60:f0:7f:c2:dc:6f:38:df:ca:6f:72:24:05:a8:fa:d3:
02:a4:f3:10:5f:fc:4b:11:72:80:29:88:12:7e:d6:6e:46:f3:
3a:20:6b:f3:83:c3:75:a9:3f:28:70:f6:c6:de:ff:bf:b5:6a:
a5:44:6f:f7:7b:4b:16:f7:65:53:dc:bd:1c:56:de:10:93:73:
ad:34:09:5b:05:af:fb:5e:69:0e:59:27:d9:0c:d3:33:12:13:
69:67:69:c2:30:03:4b:55:80:48:12:07:c9:96:ea:3d:43:65:
79:f2:48:84:4b:f8:17:3b:62:62:7b:48:ec:03:6b:3d:d5:19:
de:43:c0:7c:ba:60:2d:cf:15:5b:f3:a0:20:a4:a4:27:c5:85:
db:00:e9:e0:da:42:3f:a6:c8:a5:2b:4a:2f:82:a6:48:72:da:
1e:ec:85:d0:98:14:41:19:6a:43:cd:9f:df:62:e3:57:a8:d3:
97:c4:82:66:2c:b9:e1:04:37:9b:79:f1:e3:0e:06:a6:87:47:
28:3a:03:bf:46:a4:1c:68:a9:2b:22:40:9c:05:e2:9f:e7:2d:
75:a0:19:4e:69:6d:e3:5e:e1:f3:14:58:7b:ba:4e:dd:18:a7:
21:e6:9c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:17:02 2025 by rpki-client