This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa
File: ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa (raw, json)
Hash identifier: jgkPErExP/y7rF8upmCLU4giiwVRl4Cl7lPXOeTTDSs=
Subject key identifier: 19:70:6B:23:37:D2:A4:86:1C:F1:30:A6:C2:21:4B:3B:2E:6A:98:2F
Certificate issuer: /CN=d455139a-f627-4743-8284-7fbd2f76dd8b
Certificate serial: 010D0C9F4328584C0B06146A4BF78021EA0D2F80
Authority key identifier: 05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa
Signing time: Mon 01 Dec 2025 14:00:39 +0000
ROA not before: Mon 01 Dec 2025 14:00:39 +0000
ROA not after: Sun 01 Mar 2026 14:00:39 +0000
asID: 16509
IP address blocks: 199.255.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 03:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:0b:06:14:6a:4b:f7:80:21:ea:0d:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d455139a-f627-4743-8284-7fbd2f76dd8b
Validity
Not Before: Dec 1 14:00:39 2025 GMT
Not After : Mar 1 14:00:39 2026 GMT
Subject: CN=9b379559-2ba9-4d5f-a24f-84bbb232bfb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:45:8f:34:81:27:19:a3:c1:1b:df:c5:c9:
55:35:50:76:a6:a3:2a:52:cc:ab:31:0f:fa:57:02:
45:05:ad:4b:8a:a0:e6:03:02:d8:d7:70:d8:e5:57:
f5:15:08:27:c5:1f:d9:f9:ed:55:fd:60:67:50:ce:
78:6e:d7:a3:62:9f:f4:21:52:be:0a:aa:9c:8e:d3:
0d:61:da:0b:d2:7f:8e:5f:50:b5:9e:90:63:e9:c2:
f9:e9:54:e0:71:40:f5:95:75:21:38:3c:91:67:b0:
01:f7:1c:0d:02:3c:36:a4:4e:00:d4:40:15:23:48:
9b:02:ac:af:df:da:41:4e:2d:9d:ba:06:3a:42:09:
8a:1c:8d:93:c5:71:37:3e:2c:e6:46:b6:b6:f2:01:
d2:8a:a2:f0:01:76:d4:1c:0e:9e:88:ef:72:3a:c1:
de:c2:5d:8b:90:ee:e7:1b:6d:6d:10:c9:3a:f8:bc:
12:c1:41:1c:01:1e:e7:65:be:42:4a:dc:a9:1b:3b:
97:9b:53:3f:ff:16:8a:52:e0:25:a8:15:dd:8d:f4:
62:79:0f:da:a8:0d:04:bc:b9:f4:e6:d3:44:87:5b:
25:d4:54:f3:9b:49:7e:1a:55:2f:39:3d:9d:a4:4d:
b7:9b:39:f1:9f:bd:12:8c:4a:1e:90:2c:65:15:72:
1a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:70:6B:23:37:D2:A4:86:1C:F1:30:A6:C2:21:4B:3B:2E:6A:98:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl
X509v3 Authority Key Identifier:
keyid:05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.255.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:e0:e0:02:2c:9b:76:48:aa:ee:70:59:6a:e7:2f:1b:3e:29:
1a:47:2d:a5:ca:e7:e0:5f:b7:40:40:e3:fe:c0:9f:56:03:01:
b0:c0:ac:fa:62:dd:e0:11:8e:fc:91:53:f9:2a:37:74:41:61:
7f:87:d2:bc:08:ea:ea:d1:28:50:2c:4d:d9:cc:64:ce:4f:7e:
53:b0:a5:78:ce:49:14:3b:5f:e0:05:18:9f:1e:9a:0a:74:86:
2e:9d:48:34:8d:f3:5b:b5:1e:f8:f0:19:de:a7:85:b2:ae:ef:
f8:ff:03:2e:3c:81:1f:5b:71:d4:8c:89:6a:68:8a:77:02:a0:
0d:15:25:1b:24:0d:81:7c:e3:3d:74:a0:0e:2f:e3:87:7d:5d:
13:0c:7c:ff:ea:d1:39:86:ce:fc:71:c2:49:19:80:48:80:69:
1d:bc:4d:3c:7d:4d:9d:26:5e:d5:90:90:01:9f:6c:1b:09:6e:
5f:37:37:7a:bf:0d:d4:69:67:ca:c3:d5:03:a3:84:8b:e0:f7:
0a:fc:73:2b:95:72:3f:13:5c:a7:b1:fe:bf:19:81:7e:08:92:
5b:db:fe:b2:4a:61:5e:29:bb:13:2e:14:17:d3:84:b3:b9:d5:
3d:5d:59:8f:7d:0c:48:fa:df:61:6e:15:18:31:a9:10:3c:d6:
b4:3c:87:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:40:02 2025 by rpki-client