This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ada8083d-f38d-3f27-99a2-b33c58b226ac.roa
File: ada8083d-f38d-3f27-99a2-b33c58b226ac.roa (raw, json)
Hash identifier: rKwZ4plhlcK3KOT8UOhdQgrRlMdE36PYCrAHvpqUUvo=
Subject key identifier: F1:2F:ED:A9:B0:23:1F:9F:65:87:9E:DE:4B:22:88:A7:CB:0D:0F:17
Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial: 010D0C9F4328584BD1CB0A439C4F3A856E0DDC00
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ada8083d-f38d-3f27-99a2-b33c58b226ac.roa
Signing time: Tue 11 Nov 2025 02:00:30 +0000
ROA not before: Tue 11 Nov 2025 02:00:30 +0000
ROA not after: Mon 09 Feb 2026 02:00:30 +0000
asID: 395591
IP address blocks: 66.206.199.0/24 maxlen: 24
66.206.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d1:cb:0a:43:9c:4f:3a:85:6e:0d:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Validity
Not Before: Nov 11 02:00:30 2025 GMT
Not After : Feb 9 02:00:30 2026 GMT
Subject: CN=82d048b2-4d48-46cf-a493-dbd778d17932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2c:e5:a0:2b:17:0a:08:9a:87:24:73:ac:90:
81:41:64:4a:db:9e:11:6c:2b:02:ea:20:96:b6:7c:
63:b9:24:25:3c:f0:c7:fe:96:f0:b5:73:64:a0:a7:
04:c8:08:4e:92:91:24:4a:aa:f7:d6:18:d6:fb:a3:
c2:1c:5b:d4:b4:80:5d:7d:c6:fa:85:16:b9:3d:e5:
eb:3f:b7:b1:b8:e1:d5:cd:12:12:60:46:f1:89:4f:
38:5e:ae:c6:54:b2:17:a6:77:8b:06:6c:f3:4f:cb:
93:d8:5f:46:d2:ab:05:b1:d1:16:b7:53:e9:fd:43:
33:6b:41:1a:f9:42:52:12:60:8b:4e:3c:46:5a:aa:
af:dc:b6:14:ea:26:b0:b8:58:d6:fb:15:c1:78:3e:
0a:a5:a8:85:29:49:84:e7:38:d0:fa:d3:5b:2b:f4:
95:84:87:61:fb:1e:df:5e:11:85:62:61:25:56:e0:
f8:60:f0:ca:71:e1:74:a0:56:cc:c9:fc:e2:61:6b:
05:b4:cd:46:a4:ad:73:3e:28:05:6b:84:99:5e:c8:
ff:9e:8e:c5:03:f2:71:e1:b3:c4:69:73:09:4b:21:
09:27:ee:7e:02:37:d1:19:18:57:d7:7b:2c:4c:c8:
13:70:ac:e6:cc:6e:9d:ee:11:61:b9:25:91:94:ea:
4c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2F:ED:A9:B0:23:1F:9F:65:87:9E:DE:4B:22:88:A7:CB:0D:0F:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ada8083d-f38d-3f27-99a2-b33c58b226ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
X509v3 Authority Key Identifier:
keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
sbgp-ipAddrBlock: critical
IPv4:
66.206.199.0/24
66.206.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:2a:dd:14:6e:0f:0a:1f:09:67:aa:ed:0d:e1:5c:2b:b6:2d:
50:e6:46:ce:ef:0a:e1:e4:40:ae:de:52:be:01:6a:36:e4:de:
c6:54:1f:e7:f9:0b:53:a8:de:0a:e5:e8:b4:3e:f6:f1:95:f0:
ea:ef:b7:d0:7b:b7:c5:01:81:cb:cc:b5:08:cf:e6:77:ba:d6:
41:0e:e3:d5:ab:63:c4:49:52:93:69:6f:dd:56:8c:75:70:db:
51:9f:e4:6f:e7:f4:ce:fe:68:8d:c4:01:95:2a:1e:ad:d5:19:
58:e7:e7:b5:f1:ca:5b:3e:8d:1f:09:42:49:3c:e1:31:ab:80:
47:be:5e:1b:76:8b:52:7f:34:4e:dd:b5:02:66:dc:1e:de:7b:
bb:80:22:c2:93:88:0e:07:34:fe:39:15:09:4e:39:a6:74:8c:
8c:9c:2f:a4:79:30:c5:eb:49:d2:cb:dd:54:81:eb:4f:10:d8:
35:90:11:45:16:f5:47:01:98:37:8b:a5:17:d0:15:33:d6:01:
1c:f0:99:76:fc:a3:67:62:6b:35:1b:1d:c6:c3:44:23:ca:e4:
af:70:72:df:85:1c:f5:cd:54:d7:fb:80:2e:05:86:f5:40:37:
65:54:9a:5d:0a:f6:ea:c1:ea:4c:9b:47:db:49:ad:19:3f:f7:
3d:d7:63:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:38:23 2025 by rpki-client