This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a748f777-8b79-3ad6-9127-8ead7a4cf7d1.roa
File: a748f777-8b79-3ad6-9127-8ead7a4cf7d1.roa (raw, json)
Hash identifier: mgOWg5uoUsUFMGHUsJkPkFyOBJCojcjTehqKarUwVz0=
Subject key identifier: BA:A2:79:9D:FA:B4:2B:B2:F6:00:12:A5:8D:34:62:30:EE:6A:C3:C6
Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial: 010D0C9F4328584BC96AF8B9CCC2E5CAF99B6040
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a748f777-8b79-3ad6-9127-8ead7a4cf7d1.roa
Signing time: Sat 08 Nov 2025 02:00:30 +0000
ROA not before: Sat 08 Nov 2025 02:00:30 +0000
ROA not after: Fri 06 Feb 2026 02:00:30 +0000
asID: 7181
IP address blocks: 72.29.96.0/19 maxlen: 24
72.249.0.0/17 maxlen: 24
72.249.128.0/18 maxlen: 24
74.112.92.0/22 maxlen: 24
74.114.180.0/22 maxlen: 24
74.118.40.0/22 maxlen: 24
74.120.208.0/22 maxlen: 24
74.213.128.0/19 maxlen: 24
96.31.160.0/20 maxlen: 24
98.142.80.0/20 maxlen: 24
104.37.108.0/22 maxlen: 24
144.202.128.0/17 maxlen: 24
162.216.52.0/22 maxlen: 24
162.220.104.0/22 maxlen: 24
162.222.96.0/22 maxlen: 24
162.248.248.0/21 maxlen: 24
173.237.128.0/18 maxlen: 24
173.240.48.0/20 maxlen: 24
174.136.0.0/18 maxlen: 24
192.197.58.0/23 maxlen: 24
198.35.116.0/22 maxlen: 24
199.21.64.0/21 maxlen: 24
199.87.60.0/22 maxlen: 24
199.96.248.0/21 maxlen: 24
199.188.208.0/22 maxlen: 24
199.193.140.0/22 maxlen: 24
199.193.176.0/22 maxlen: 24
199.233.224.0/22 maxlen: 24
204.11.208.0/22 maxlen: 24
204.15.100.0/22 maxlen: 24
204.16.108.0/22 maxlen: 24
205.147.202.0/24 maxlen: 24
205.147.208.0/24 maxlen: 24
205.147.218.0/24 maxlen: 24
205.147.235.0/24 maxlen: 24
206.123.64.0/18 maxlen: 24
206.245.164.0/24 maxlen: 24
207.8.244.0/22 maxlen: 24
207.45.160.0/20 maxlen: 24
207.154.0.0/18 maxlen: 24
207.210.192.0/18 maxlen: 24
207.254.208.0/20 maxlen: 24
208.67.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c9:6a:f8:b9:cc:c2:e5:ca:f9:9b:60:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Validity
Not Before: Nov 8 02:00:30 2025 GMT
Not After : Feb 6 02:00:30 2026 GMT
Subject: CN=641b3c90-b40b-4791-84cb-03eac6773225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f4:04:5d:96:e8:5c:6d:10:0a:06:27:68:c6:
0c:37:a8:f2:2f:3a:cb:17:c2:d6:0c:7b:9e:97:b5:
9d:e9:b2:00:93:4f:40:fa:28:27:cc:86:b4:a8:2f:
cf:3d:73:67:05:23:bc:d0:6e:dc:cd:50:4d:b6:64:
ac:95:d3:d1:eb:02:df:f2:cf:2b:9c:70:ad:d6:ce:
bf:75:6f:ec:a3:d0:e1:8a:ad:5b:d9:a6:21:38:8f:
d5:8a:d1:2d:0c:8c:dd:47:f3:87:db:09:30:2b:64:
0e:19:f9:d4:47:ac:0f:03:b6:a3:e1:08:c3:63:e2:
12:77:a1:54:90:c5:fb:bd:63:86:9d:6c:3e:de:e2:
9e:63:a5:73:4a:3b:6a:3d:fd:99:3d:fc:d5:d5:0d:
8b:80:c4:d8:d5:ee:6a:33:6f:31:e7:3d:81:82:e6:
27:48:32:4e:7e:96:57:35:fd:6c:ec:6a:86:91:ef:
a4:55:44:a3:62:3a:84:a4:a6:94:46:63:c1:2a:b0:
45:5e:18:7f:32:2e:e0:b9:14:be:fb:55:eb:76:21:
70:c2:69:2f:ec:ab:af:9e:b7:6f:d8:0f:28:1c:f4:
9e:4d:f0:2b:ff:f1:5c:9c:ce:48:57:df:7a:ce:89:
ca:81:8d:aa:25:ee:65:3c:af:04:e6:44:f4:1e:9a:
82:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A2:79:9D:FA:B4:2B:B2:F6:00:12:A5:8D:34:62:30:EE:6A:C3:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a748f777-8b79-3ad6-9127-8ead7a4cf7d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
X509v3 Authority Key Identifier:
keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
sbgp-ipAddrBlock: critical
IPv4:
72.29.96.0/19
72.249.0.0-72.249.191.255
74.112.92.0/22
74.114.180.0/22
74.118.40.0/22
74.120.208.0/22
74.213.128.0/19
96.31.160.0/20
98.142.80.0/20
104.37.108.0/22
144.202.128.0/17
162.216.52.0/22
162.220.104.0/22
162.222.96.0/22
162.248.248.0/21
173.237.128.0/18
173.240.48.0/20
174.136.0.0/18
192.197.58.0/23
198.35.116.0/22
199.21.64.0/21
199.87.60.0/22
199.96.248.0/21
199.188.208.0/22
199.193.140.0/22
199.193.176.0/22
199.233.224.0/22
204.11.208.0/22
204.15.100.0/22
204.16.108.0/22
205.147.202.0/24
205.147.208.0/24
205.147.218.0/24
205.147.235.0/24
206.123.64.0/18
206.245.164.0/24
207.8.244.0/22
207.45.160.0/20
207.154.0.0/18
207.210.192.0/18
207.254.208.0/20
208.67.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:94:34:50:a2:e4:67:44:6b:57:db:a3:b4:47:db:4a:14:e8:
1b:3b:45:77:b8:93:71:21:05:3f:0c:dc:d7:65:1e:8c:d2:dd:
6d:39:a8:cf:93:fb:d2:46:5b:d7:04:06:e8:de:6a:dc:63:5c:
90:3d:31:7f:0c:97:f5:b8:ab:c5:ce:1b:a2:04:19:85:bb:ee:
5b:39:6d:1a:47:2b:36:43:92:84:d1:5a:7e:de:59:02:fa:bf:
68:22:34:3f:5b:d1:34:6e:bc:a3:12:00:3f:6d:02:01:62:58:
c4:8d:64:19:42:ac:b3:99:53:0f:03:0e:07:8b:54:06:e6:99:
f1:c0:f5:b6:e7:ac:63:34:41:7b:97:41:a0:5e:b8:77:8f:ba:
f3:3f:b1:0b:53:b6:5b:0f:89:e8:2d:d1:12:52:cb:d8:8c:7f:
90:60:65:7d:35:d4:9e:36:3c:7c:24:33:2f:bd:53:81:7a:2a:
82:e4:17:f0:7a:6c:1d:3d:87:20:bf:c1:3e:1c:dd:da:a7:05:
2d:74:b3:00:4c:fc:fa:55:50:48:33:dd:8b:93:65:b1:8d:80:
e9:db:a9:68:de:b7:78:97:9a:6f:74:35:ac:7f:1b:e7:7a:a7:
4c:a6:a0:a0:19:88:ac:7e:a7:b9:d4:a6:70:5e:20:21:b9:2f:
a6:58:36:41
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:42:02 2025 by rpki-client