This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa
File: 59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa (raw, json)
Hash identifier: W+1LOGpKdDRzwAHUAMBSkpsDZd6lsezJz2mPq+L4wUA=
Subject key identifier: D5:8F:E6:AB:1F:F6:AF:8A:C7:96:91:F1:FC:54:9A:ED:E8:1D:81:01
Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial: 010D0C9F4328584C0C6B58CBF2E3AA4702344D40
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa
Signing time: Tue 02 Dec 2025 02:00:30 +0000
ROA not before: Tue 02 Dec 2025 02:00:30 +0000
ROA not after: Mon 02 Mar 2026 02:00:30 +0000
asID: 22142
IP address blocks: 170.186.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:0c:6b:58:cb:f2:e3:aa:47:02:34:4d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Validity
Not Before: Dec 2 02:00:30 2025 GMT
Not After : Mar 2 02:00:30 2026 GMT
Subject: CN=95e0b3a0-0c8c-433a-b08a-67e7ba0a14e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:9c:16:7f:d4:ed:0d:8d:a4:85:ad:5b:6a:cf:
4c:fa:bd:87:83:34:7b:fb:04:b1:18:4d:b3:cd:a3:
8a:08:c7:cc:41:13:2b:85:dd:8f:ed:e1:20:4b:bb:
85:15:40:66:b3:60:cf:ab:d1:f8:a8:95:e1:fd:21:
49:62:0a:e2:ac:63:91:53:d7:55:99:e1:c0:1f:da:
f0:34:f3:5a:a6:a5:83:88:af:da:b0:44:ac:d8:d3:
4e:98:2c:46:8e:85:74:2e:1a:89:6e:dd:94:13:77:
2f:8d:c1:f9:d1:db:4d:42:0b:6f:b2:b2:3d:f0:fd:
5b:40:03:5e:e7:31:4b:22:e1:1d:99:09:2f:ab:7c:
77:d6:85:64:2e:69:51:89:ec:0e:d1:86:79:92:be:
b9:8e:10:56:56:6b:35:71:44:87:f0:02:4a:f5:1e:
e9:28:c4:c9:22:f3:8e:4d:20:8b:ac:db:3e:1b:7a:
fe:46:98:89:85:69:53:c5:cc:52:99:26:41:a6:f7:
ef:a9:7f:a8:68:e4:7b:64:ef:64:6c:78:11:7d:0b:
ae:56:8e:5d:44:08:dc:e8:08:87:ca:8e:d2:3c:1b:
3f:4e:ef:fb:be:74:77:c4:21:0e:6b:bc:59:8b:a7:
34:61:2b:19:b9:40:4f:5b:37:d8:db:ec:4e:d9:a1:
e4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8F:E6:AB:1F:F6:AF:8A:C7:96:91:F1:FC:54:9A:ED:E8:1D:81:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
X509v3 Authority Key Identifier:
keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
sbgp-ipAddrBlock: critical
IPv4:
170.186.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:7e:59:d0:97:1c:72:41:fd:86:f8:9d:e4:81:a2:21:0f:a1:
0c:32:28:40:80:6e:57:4a:03:72:e3:39:98:05:0f:c3:12:38:
5f:26:68:e2:45:b8:cd:83:a6:55:5e:fc:78:8b:9a:fa:f8:9b:
77:7b:60:7c:9e:ee:0e:69:36:24:76:0b:00:af:d4:47:a6:c2:
aa:05:f7:8e:66:c0:21:29:d7:ef:84:47:8c:94:bb:48:b2:8a:
d0:41:16:2d:b3:75:5f:cc:32:50:ef:53:66:f9:ba:c1:c0:d0:
ba:f5:ff:cc:e2:fd:7a:98:7e:02:82:6c:e1:4e:98:15:c1:ae:
c9:ed:cc:b7:f7:f4:05:3d:6d:d5:e4:ec:37:86:79:25:0c:79:
41:fb:68:a9:59:61:75:09:91:12:af:65:61:f0:2b:f0:14:32:
99:a9:53:8e:5b:f8:8e:51:77:da:88:66:64:48:d2:b4:bd:bb:
16:b8:fb:93:98:c3:c9:02:18:3d:2b:a1:b7:e6:12:37:b7:c6:
c2:ef:d8:d9:a5:d0:da:5d:b5:55:e4:e1:dc:f6:02:55:b3:56:
f4:fa:b8:e8:41:81:c4:1b:eb:3b:b2:11:09:8d:17:ff:ac:da:
ca:9d:89:8b:e3:43:2a:b4:aa:44:09:6e:a6:5f:bc:97:81:b0:
71:3c:cf:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:50:51 2025 by rpki-client