This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa
File: 0e86ddca-e803-349f-9e1e-d5560596f44d.roa (raw, json)
Hash identifier: GRV4Rk7/5xVCZlqQb993tdVpyfwwpbB1EesZXp+euEM=
Subject key identifier: A9:8A:DF:5A:9C:4E:AC:61:BF:41:6C:66:D4:C1:74:20:D2:DF:FE:4C
Certificate issuer: /CN=2b666ba7-a215-4f08-8204-c5b168b3360c
Certificate serial: 010D0C9F4328584C109B7D9FB49E25839F933240
Authority key identifier: AC:C3:A1:4F:EC:7D:26:06:8B:8A:E4:93:8D:2B:C6:45:EB:70:7F:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa
Signing time: Wed 03 Dec 2025 14:00:38 +0000
ROA not before: Wed 03 Dec 2025 14:00:38 +0000
ROA not after: Tue 03 Mar 2026 14:00:38 +0000
asID: 25661
IP address blocks: 199.119.140.0/22 maxlen: 24
207.167.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:10:9b:7d:9f:b4:9e:25:83:9f:93:32:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b666ba7-a215-4f08-8204-c5b168b3360c
Validity
Not Before: Dec 3 14:00:38 2025 GMT
Not After : Mar 3 14:00:38 2026 GMT
Subject: CN=2bb55d05-f2a1-4121-8a3f-53570eb8f506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:b3:6e:8a:cb:21:46:1e:97:d0:f6:fd:d1:
a5:32:9e:c5:1a:f7:06:b4:21:25:e3:32:d4:11:bc:
4f:53:2a:fa:31:40:cd:e0:67:fc:af:94:c4:c0:15:
2c:d9:49:33:b4:42:94:96:e6:ed:e7:33:e8:d3:2c:
44:ee:a3:54:ea:7d:a9:27:7b:4c:6d:7c:e2:e6:ea:
5e:89:23:2a:dc:7c:57:bd:8f:44:f4:b6:b3:d5:e2:
15:d4:db:8c:fe:6b:44:f2:aa:82:37:a5:d3:2e:c3:
f5:c7:ce:02:ac:47:09:0b:36:1a:75:c0:a7:88:df:
df:c0:b9:6d:58:72:67:35:e2:0f:2c:82:0c:44:67:
00:8c:9d:f1:65:5e:75:34:35:1b:3f:ec:15:ca:c3:
c1:ef:f6:ee:c8:df:7b:a1:f6:ec:ef:e7:62:e7:25:
1a:f4:8c:c7:f9:8c:13:7e:3f:9d:a8:bf:e5:da:d8:
50:20:25:a5:e4:0e:29:8a:51:41:f5:5b:2e:47:45:
c6:b4:09:f4:c0:2b:84:53:0b:97:bb:71:9b:8e:14:
2d:80:86:38:88:d7:ea:63:58:42:e6:18:5b:20:56:
1f:bd:d5:1f:bb:73:3e:ba:59:31:0d:c3:3e:64:3d:
60:82:5d:b5:06:77:c3:85:c5:08:a2:41:e7:1c:cd:
30:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8A:DF:5A:9C:4E:AC:61:BF:41:6C:66:D4:C1:74:20:D2:DF:FE:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.crl
X509v3 Authority Key Identifier:
keyid:AC:C3:A1:4F:EC:7D:26:06:8B:8A:E4:93:8D:2B:C6:45:EB:70:7F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.119.140.0/22
207.167.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:13:54:fc:a0:50:9a:f8:8f:5e:bb:70:78:31:02:41:30:2a:
93:68:08:25:a0:dc:f7:79:e7:6a:99:e8:f5:ae:84:d2:42:c5:
1d:6f:fb:d7:07:ab:8f:89:55:0f:84:8a:01:a7:25:b3:c9:84:
31:30:3a:5e:7f:5c:79:f0:4b:d6:33:58:d8:48:b5:10:f6:31:
20:6d:4f:8c:ef:fe:74:6b:46:ca:7e:76:2b:7c:77:e0:d0:bf:
8b:4e:9b:e9:9d:c5:1a:57:c6:d8:26:1f:d0:23:42:61:21:f9:
c2:4a:f4:b0:9f:6c:30:af:ac:3d:ae:f3:6f:61:3a:f6:ea:e5:
d3:bd:b4:49:de:ec:34:e9:e7:c5:0e:57:2a:37:4f:de:02:98:
43:77:1f:7d:6d:09:f9:cd:7e:74:6b:3a:cf:49:15:83:16:29:
0d:10:64:24:c1:a1:bc:57:3a:38:b6:0c:f1:6d:f5:04:cb:20:
5f:b7:6c:2c:87:1a:bc:85:04:0b:ab:31:c4:85:92:dc:c4:5f:
86:ca:29:b8:8f:a2:9f:34:9a:f6:81:14:81:48:f1:f6:55:9d:
fd:2c:b2:41:2c:d1:d6:48:8a:39:c7:8b:c7:b1:8f:34:97:62:
ba:1a:2c:83:ec:55:a1:2c:e2:77:4e:73:73:83:32:fa:d6:73:
f1:98:29:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 05:09:47 2025 by rpki-client