This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d98b870b-d634-3a37-82c3-af55f7ef3032.roa
File: d98b870b-d634-3a37-82c3-af55f7ef3032.roa (raw, json)
Hash identifier: nz/mkoW2mLRrbxFB45gqkggOLlL74l5g3Ckz9LAEY8k=
Subject key identifier: 3A:1A:C3:9E:94:E1:03:49:BD:34:0C:2D:01:11:ED:97:12:7F:85:AA
Certificate issuer: /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial: 010D0C9F4328584BFD10BD7B95453F5E2E2295F0
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d98b870b-d634-3a37-82c3-af55f7ef3032.roa
Signing time: Wed 26 Nov 2025 14:00:39 +0000
ROA not before: Wed 26 Nov 2025 14:00:39 +0000
ROA not after: Tue 24 Feb 2026 14:00:39 +0000
asID: 16509
IP address blocks: 64.95.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:fd:10:bd:7b:95:45:3f:5e:2e:22:95:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Validity
Not Before: Nov 26 14:00:39 2025 GMT
Not After : Feb 24 14:00:39 2026 GMT
Subject: CN=13a90386-e8da-4a08-8fa2-579a0ebbf9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ab:08:d8:04:bf:09:af:ad:9b:22:65:53:76:
11:90:77:e0:d1:2c:5e:28:5a:6d:b7:db:e6:e0:5c:
9a:7f:0f:03:de:db:24:07:a9:83:67:b7:f5:56:c2:
13:b3:1f:ab:57:1f:75:8d:1e:a9:88:f5:2c:a7:0e:
ef:ce:09:80:32:09:96:91:57:db:57:ee:4b:6d:6f:
25:d1:8e:af:53:3a:d4:0a:57:7e:16:48:b7:5f:df:
60:b0:d7:b3:70:fa:4d:8c:f1:91:cc:a7:b6:db:ea:
c2:b3:eb:a0:70:e0:a0:16:6a:a3:81:38:62:dd:97:
75:2a:91:47:91:d5:bc:90:5d:7a:43:4a:63:0a:27:
8b:03:dd:6c:e9:64:6d:f7:2c:a4:c2:2d:a0:c1:6f:
54:b9:19:73:da:32:0b:e5:1f:9c:82:52:7b:c7:db:
4d:87:a1:76:e5:7c:5c:35:21:a5:9e:dc:0e:e0:a9:
d6:10:c8:9d:48:06:c5:75:ec:81:45:a0:71:b5:12:
2f:43:2f:c2:69:38:a7:ec:c9:a6:da:80:1b:60:ce:
c0:b9:91:1d:2a:1e:25:b6:12:a0:e6:a7:ab:6d:08:
02:50:f6:56:cb:d2:0b:93:e4:33:a0:99:58:95:81:
01:05:4d:7f:2d:5c:f0:73:f8:3e:c8:98:87:43:21:
b6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1A:C3:9E:94:E1:03:49:BD:34:0C:2D:01:11:ED:97:12:7F:85:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d98b870b-d634-3a37-82c3-af55f7ef3032.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
X509v3 Authority Key Identifier:
keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
sbgp-ipAddrBlock: critical
IPv4:
64.95.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:fa:85:63:70:57:96:f4:49:f0:31:6f:4d:ec:92:72:01:b6:
74:57:67:ff:f5:36:45:1d:69:be:8b:43:71:e4:33:18:21:4f:
5c:9f:b2:66:3b:a4:a5:c8:ad:69:20:f2:60:0b:12:52:88:42:
02:74:8e:00:f2:d9:ea:b3:ce:8a:e2:6e:83:47:35:0b:e5:1d:
19:aa:e7:76:a7:19:6f:68:eb:83:46:8e:ea:1b:c0:68:db:35:
7b:a1:46:fc:80:eb:79:83:92:6c:74:45:1d:f9:63:85:54:96:
dc:4f:8b:a1:64:93:95:62:1c:fa:ad:1d:35:1b:22:6f:5f:62:
b8:a2:33:94:a5:66:fa:30:c6:b1:9c:bd:c3:d3:83:2f:1e:29:
47:cc:a2:69:21:c2:07:46:56:ee:e6:92:41:8b:85:7e:74:50:
8c:8b:9b:9e:65:b5:08:fb:6c:ca:a8:10:c5:32:f6:32:04:6d:
ff:41:f7:3f:a9:9e:46:80:88:81:57:6a:80:5b:9c:5f:2c:17:
07:d1:c2:bc:87:f4:df:41:73:d7:a6:a1:97:e5:4e:2f:2d:4b:
1f:af:5e:08:b4:9a:35:a8:da:cf:11:0b:3a:92:7b:9f:72:fb:
7a:02:a6:11:3a:b8:ab:9c:ca:66:05:2d:77:4e:5b:b6:f5:fa:
c8:12:00:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:05:37 2025 by rpki-client