This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/0a4f85f8-d007-3b6c-b72a-222b64951050.roa
File: 0a4f85f8-d007-3b6c-b72a-222b64951050.roa (raw, json)
Hash identifier: wYqrMhzAefKeuOknrGIrfWl4OmM27sdFHS2PqhjjFrc=
Subject key identifier: 7E:39:C9:91:E6:AE:0D:4C:71:42:53:CC:F5:72:D0:7A:40:D0:FB:98
Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial: 010D0C9F4328584C0DD0BE6FD820DD7C93CD9300
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/0a4f85f8-d007-3b6c-b72a-222b64951050.roa
Signing time: Tue 02 Dec 2025 14:00:39 +0000
ROA not before: Tue 02 Dec 2025 14:00:39 +0000
ROA not after: Mon 02 Mar 2026 14:00:39 +0000
asID: 88
IP address blocks: 66.180.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:0d:d0:be:6f:d8:20:dd:7c:93:cd:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Validity
Not Before: Dec 2 14:00:39 2025 GMT
Not After : Mar 2 14:00:39 2026 GMT
Subject: CN=7913b374-2e8d-4c0b-b9bf-5c6a20b4a7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:72:f8:de:6b:e9:96:12:7d:d9:05:78:42:56:
9d:06:05:68:e8:e1:02:94:28:f4:af:4e:00:6d:db:
67:fe:60:9b:85:07:6a:60:0d:30:32:c0:a6:a7:c5:
15:76:bf:43:22:c4:99:93:53:b1:00:3a:d6:5e:11:
a6:c2:1a:7d:52:51:40:c7:de:be:0c:a3:50:5c:13:
cf:ec:bb:7c:29:88:de:cc:5a:35:5b:41:e6:ef:1e:
1b:82:d7:89:fa:28:77:4f:9c:8b:5c:fa:d6:55:dc:
4c:5e:ba:2d:77:98:f4:d1:44:45:a2:26:dc:8e:61:
90:50:48:a4:c8:3c:ca:24:8a:5b:74:1b:a8:5b:98:
e2:a5:5e:80:f5:5d:7c:78:a3:a2:b1:e0:cc:50:ec:
72:55:50:8f:bd:5c:6f:04:77:77:68:9e:76:fb:5d:
12:fb:d8:99:28:95:8c:45:81:50:00:26:86:62:18:
b0:60:7a:71:9a:c3:75:10:af:3b:66:a7:0a:87:69:
7c:23:95:93:9c:5c:1b:55:93:10:17:e1:26:82:0a:
87:8c:39:e3:85:44:8e:a3:d7:bd:d6:e8:31:54:2b:
91:8f:6c:d1:c0:94:50:dd:92:d5:e0:be:5c:5e:c1:
ba:a2:12:db:c5:d2:05:7c:3f:1e:12:7b:e3:8d:6c:
d0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:39:C9:91:E6:AE:0D:4C:71:42:53:CC:F5:72:D0:7A:40:D0:FB:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/0a4f85f8-d007-3b6c-b72a-222b64951050.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
X509v3 Authority Key Identifier:
keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
sbgp-ipAddrBlock: critical
IPv4:
66.180.190.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:18:51:d9:71:5e:a3:f8:5a:12:95:cc:d7:91:4e:c5:30:50:
8f:90:d4:55:d5:4b:1d:2c:a8:37:3c:77:b6:9f:2f:ac:dd:93:
a8:c8:c3:b1:a1:f7:fd:b5:dd:bd:4d:e4:eb:a2:83:4d:08:7d:
a9:4d:e6:c9:c7:7f:6c:ad:8e:4f:3f:df:b3:90:aa:45:45:09:
fa:42:fc:df:92:aa:90:0c:57:c3:1f:27:87:8d:3d:7f:ec:60:
3f:f5:cf:f2:82:bb:57:d2:d9:af:8c:af:69:21:c9:e7:12:00:
d8:e5:71:1e:6d:72:c7:39:b5:4c:fa:2e:d8:75:e9:04:08:9b:
d5:26:aa:86:d0:bf:ec:d7:32:71:d9:4a:8f:fd:01:cf:ae:7e:
17:f8:1a:89:3d:78:08:f2:6b:99:d6:89:b1:e0:7f:02:f0:16:
d0:16:53:ae:8a:cf:11:42:24:1c:e3:09:9d:b3:97:fa:60:64:
44:7a:cc:cf:a6:3a:02:ce:d6:33:d7:f0:88:46:89:c2:5a:4f:
05:8b:fd:28:53:b3:39:ac:cf:d6:cb:08:02:dd:86:54:9a:bd:
1a:ec:3f:12:b8:2e:96:65:45:a0:9b:ad:92:98:07:8b:0a:96:
06:cf:7f:e0:a6:ee:b5:bf:fa:2a:61:06:e6:59:74:57:5a:d4:
f5:fd:0a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:50:49 2025 by rpki-client