This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa
File: a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa (raw, json)
Hash identifier: K4jXsee6R6LWxM0Uz1rNrABpfYaUWj3If0LBhBzp5po=
Subject key identifier: 00:53:E0:69:52:3E:2D:A6:72:F9:DA:91:39:83:AA:91:4A:21:25:BF
Certificate issuer: /CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b
Certificate serial: 010D0C9F4328584BD5FB08F7EA77A0C0372F1E78
Authority key identifier: 0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa
Signing time: Wed 12 Nov 2025 14:00:37 +0000
ROA not before: Wed 12 Nov 2025 14:00:37 +0000
ROA not after: Tue 10 Feb 2026 14:00:37 +0000
asID: 399668
IP address blocks: 198.206.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d5:fb:08:f7:ea:77:a0:c0:37:2f:1e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b
Validity
Not Before: Nov 12 14:00:37 2025 GMT
Not After : Feb 10 14:00:37 2026 GMT
Subject: CN=18827d63-e7eb-42f1-8ac1-99d99c8f87af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:a2:de:63:26:5f:b3:3c:76:37:6b:3f:eb:
30:63:e1:14:46:ad:99:18:ec:3f:2b:9e:41:9e:4d:
40:68:ea:12:60:d0:f6:fb:c0:4c:57:4d:e8:66:8d:
a8:36:b9:a9:b4:ae:4f:43:8b:c9:bb:62:67:19:a8:
61:b4:99:02:81:d0:d7:00:23:98:1b:ca:d9:88:c7:
34:c9:2a:bf:ad:6c:30:cc:85:f6:aa:cb:1e:ab:1e:
f3:a1:52:36:6e:e3:f4:43:c3:25:25:e5:d1:47:38:
f0:8b:6c:a3:4c:29:af:02:2d:4b:b6:a0:d1:1c:11:
2b:08:c1:06:d4:c0:9f:ae:9d:d0:b8:05:22:f7:8d:
39:12:d7:e9:ac:62:59:b3:66:85:59:e7:fc:3c:a8:
c7:8a:4e:69:c2:e0:1c:f8:6b:2f:bc:e3:b8:58:38:
3d:a7:f0:ef:cc:aa:31:f2:50:c9:1f:08:9d:ac:fa:
6d:aa:e0:a5:48:a0:1c:ae:5f:a3:77:35:5b:71:fc:
41:aa:4f:8b:0f:ca:fe:01:2e:53:d7:bf:a9:79:dd:
9c:9f:e2:8e:50:72:d1:ac:c1:61:3a:06:b8:7b:51:
da:6e:1f:b0:00:52:28:7a:f4:38:02:63:5c:a7:04:
23:f0:d6:c5:0c:2a:ec:5f:0a:c8:13:e4:47:fc:ef:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:53:E0:69:52:3E:2D:A6:72:F9:DA:91:39:83:AA:91:4A:21:25:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl
X509v3 Authority Key Identifier:
keyid:0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.206.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:a2:63:6a:c3:d8:f3:cb:f5:1c:30:6b:92:f7:9a:9a:9e:4c:
d7:4d:e4:9c:55:c3:a2:bd:29:c7:ec:7d:20:05:cc:b6:98:21:
5a:8b:9d:e2:27:5b:a8:ff:12:dd:bb:05:66:40:e5:b2:43:1a:
13:b1:90:46:62:5c:ab:a4:66:4d:1c:42:c8:d0:f2:22:55:5a:
ea:1c:ee:58:3b:a6:a2:53:36:09:91:a2:81:bf:ac:a1:66:2a:
4c:51:1d:ce:f4:3a:26:24:d3:1c:d5:27:5b:42:6d:d8:51:5d:
b7:ae:ea:ba:c8:63:48:6e:b1:b2:36:c0:33:90:59:84:41:3c:
9f:57:b6:31:50:4a:89:07:bf:6d:d6:0e:a4:13:47:29:c5:8b:
62:c8:a6:d3:94:ab:9a:25:1f:f2:79:06:ad:9a:f9:77:f1:60:
36:33:ad:3b:06:65:ee:72:49:eb:e3:63:98:6c:ce:0f:40:97:
49:ae:6b:12:13:8f:6a:28:c7:9a:51:42:66:22:8b:7d:68:3a:
9c:a6:e1:ac:23:db:eb:8d:a5:b7:b8:51:9e:1b:35:56:94:e4:
c4:3d:da:18:95:36:cc:87:a0:8a:b2:56:66:4f:f5:6e:33:81:
14:30:13:03:f5:cb:29:a7:22:c5:00:cb:3c:9e:14:50:82:8b:
db:28:a4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:07:16 2025 by rpki-client