This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bfb9d0b6-2b39-3db3-b2d9-d6b802bbb5f7.roa
File: bfb9d0b6-2b39-3db3-b2d9-d6b802bbb5f7.roa (raw, json)
Hash identifier: /Oh7lPF0ghKsPtUXrr2KBIA4elmVMcsmvfGs4A7CegY=
Subject key identifier: 84:84:22:A9:5D:3E:E0:E2:FB:1C:1B:B4:10:1B:AC:34:17:B2:17:02
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584BD3305CE5A4043F5B38AEAF80
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bfb9d0b6-2b39-3db3-b2d9-d6b802bbb5f7.roa
Signing time: Tue 11 Nov 2025 14:00:38 +0000
ROA not before: Tue 11 Nov 2025 14:00:38 +0000
ROA not after: Mon 09 Feb 2026 14:00:38 +0000
asID: 398478
IP address blocks: 107.148.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d3:30:5c:e5:a4:04:3f:5b:38:ae:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Nov 11 14:00:38 2025 GMT
Not After : Feb 9 14:00:38 2026 GMT
Subject: CN=7c33274a-2596-48de-94d5-9082c2a48694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:52:5e:36:6d:0c:04:af:a7:77:68:89:28:b3:
73:80:18:69:e3:58:1c:5b:29:bf:b3:36:5a:64:71:
a5:86:f9:9b:f6:1a:44:cc:a7:74:7a:e4:e3:3f:09:
ac:43:16:92:84:c9:7f:dd:02:9e:aa:4c:ba:8e:aa:
e0:08:d0:e4:3b:86:25:0d:fa:cf:d4:68:08:f3:5c:
06:c6:e9:c3:83:08:62:fc:38:20:18:4d:9f:04:23:
2f:24:47:87:1c:c7:b6:89:20:62:e5:e9:7b:e9:a8:
3a:da:ab:c5:1b:04:1e:46:35:a2:8f:7f:e1:7e:f1:
66:e7:84:65:47:80:d2:80:43:1b:1a:24:0f:a0:7a:
5b:06:4f:19:00:2c:b0:21:31:e0:77:91:5c:64:b8:
76:03:73:d6:34:8f:14:93:30:4d:c1:ee:01:c4:85:
fa:2e:33:12:d6:f2:de:83:54:9a:41:42:05:c6:e4:
f4:ee:dc:07:4c:43:1f:95:94:67:20:e6:23:98:56:
5f:f4:ab:18:8f:80:d9:a7:c2:b8:3d:7b:2b:5a:ce:
d9:8a:78:ac:49:9a:20:1a:29:07:41:e4:bb:2b:51:
6a:aa:c4:e4:3e:bc:c7:86:02:cb:3f:e3:07:8a:a1:
7a:33:97:c5:f3:62:c3:1b:ec:a8:14:9a:e5:78:29:
06:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:84:22:A9:5D:3E:E0:E2:FB:1C:1B:B4:10:1B:AC:34:17:B2:17:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bfb9d0b6-2b39-3db3-b2d9-d6b802bbb5f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:58:58:9f:f2:25:81:45:4a:58:b4:d9:68:48:2c:a9:01:20:
4f:81:18:97:68:53:40:9a:37:1f:71:2f:e0:7f:0a:34:3a:61:
bd:93:52:2e:c7:61:bc:96:05:21:9a:5d:60:e3:06:eb:9c:53:
74:69:26:d3:31:3f:37:37:25:c4:c4:b4:c8:65:74:cb:58:1c:
3f:ef:78:a0:4d:42:fc:8d:79:a5:96:d8:d3:56:41:25:98:cb:
1d:07:ef:13:52:c3:11:bb:e9:51:c7:73:71:34:73:12:29:2a:
97:b9:a0:f3:36:b6:9a:2c:42:d2:22:95:f0:bc:49:e2:62:a8:
1c:69:b0:ad:71:fa:1d:4b:54:7d:2f:30:a3:d5:9f:52:8c:c6:
7d:85:27:bc:4c:23:7f:bf:44:0f:49:cf:17:b0:52:d2:39:0b:
13:4d:48:30:ec:f0:ed:21:09:6e:ab:ef:86:c1:5a:20:11:9c:
f6:ba:d9:ad:be:87:d1:d6:7d:00:ad:7c:b7:4c:9d:be:c4:aa:
68:aa:68:2f:09:67:b5:43:64:28:44:1e:56:af:e1:24:46:82:
cc:ae:29:03:4a:55:fc:c3:5a:36:24:0f:1c:26:ba:78:90:26:
50:3d:a2:ef:fb:66:77:bc:4c:ae:ec:c6:c7:19:bf:a6:30:48:
1f:fe:ea:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTMFzlpAQ/Wziur4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk
N2MzMzI3NGEtMjU5Ni00OGRlLTk0ZDUtOTA4MmMyYTQ4Njk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVJeNm0MBK+nd2iJKLNzgBhp41gcWym/szZa
ZHGlhvmb9hpEzKd0euTjPwmsQxaShMl/3QKeqky6jqrgCNDkO4YlDfrP1GgI81wG
xunDgwhi/DggGE2fBCMvJEeHHMe2iSBi5el76ag62qvFGwQeRjWij3/hfvFm54Rl
R4DSgEMbGiQPoHpbBk8ZACywITHgd5FcZLh2A3PWNI8UkzBNwe4BxIX6LjMS1vLe
g1SaQUIFxuT07twHTEMflZRnIOYjmFZf9KsYj4DZp8K4PXsrWs7ZinisSZogGikH
QeS7K1FqqsTkPrzHhgLLP+MHiqF6M5fF82LDG+yoFJrleCkG0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFISEIqldPuDi+xwbtBAbrDQXshcCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYmZiOWQwYjYtMmIzOS0z
ZGIzLWIyZDktZDZiODAyYmJiNWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDa5QIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACpYWJ/yJYFFSli02WhILKkBIE+BGJdoU0CaNx9xL+B/CjQ6Yb2TUi7H
YbyWBSGaXWDjBuucU3RpJtMxPzc3JcTEtMhldMtYHD/veKBNQvyNeaWW2NNWQSWY
yx0H7xNSwxG76VHHc3E0cxIpKpe5oPM2tposQtIilfC8SeJiqBxpsK1x+h1LVH0v
MKPVn1KMxn2FJ7xMI3+/RA9JzxewUtI5CxNNSDDs8O0hCW6r74bBWiARnPa62a2+
h9HWfQCtfLdMnb7EqmiqaC8JZ7VDZChEHlav4SRGgsyuKQNKVfzDWjYkDxwmuniQ
JlA9ou/7Zne8TK7sxscZv6YwSB/+6tY=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:15:30 2025 by rpki-client