This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa
File: e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa (raw, json)
Hash identifier: 7+nL7S3n4yCxZW4+LHpMYFt72TmaNNRsApEKdYvoy6g=
Subject key identifier: EE:BC:1B:92:1B:5C:40:B5:D4:B8:17:F3:69:52:1F:23:60:8D:D7:00
Certificate issuer: /CN=42c8c6f3-4a22-4b09-90b8-6f74ee90beb5
Certificate serial: 010D0C9F4328584C0570BFE0D9E566F119461E80
Authority key identifier: CB:58:6C:B4:1F:C7:2C:0C:FE:27:FB:97:2D:BF:0B:EB:05:46:FB:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa
Signing time: Sat 29 Nov 2025 14:00:39 +0000
ROA not before: Sat 29 Nov 2025 14:00:39 +0000
ROA not after: Fri 27 Feb 2026 14:00:39 +0000
asID: 400458
IP address blocks: 23.148.104.0/24 maxlen: 24
194.164.84.0/24 maxlen: 24
2602:fbc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 09 Dec 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:05:70:bf:e0:d9:e5:66:f1:19:46:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c8c6f3-4a22-4b09-90b8-6f74ee90beb5
Validity
Not Before: Nov 29 14:00:39 2025 GMT
Not After : Feb 27 14:00:39 2026 GMT
Subject: CN=50d5af0b-a055-4c9e-8ff1-a93d02b62669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:51:0d:39:8f:7e:d9:c8:64:17:12:90:f3:e4:
3c:aa:d8:a3:fd:45:f7:de:66:86:10:b2:92:42:b4:
c1:c1:d6:60:53:5d:9a:65:4f:cf:fe:ce:14:71:d6:
ef:4a:17:9f:90:7a:a8:50:ed:ae:5d:a1:a8:df:50:
88:ec:ac:4f:fc:27:bf:aa:e4:50:5f:4d:cc:6f:f5:
e1:db:ef:57:1f:af:66:7d:fd:a4:95:dc:68:2f:95:
10:b4:7f:98:a0:27:8c:99:7a:ba:d3:eb:63:e5:98:
80:c5:0d:00:70:b2:fe:70:5c:de:0f:0b:d8:9f:78:
12:fc:a0:4c:17:ce:af:13:bb:fd:d2:8b:89:e7:27:
62:70:c3:69:9a:c0:e4:44:c6:5c:53:0b:53:32:cd:
ce:5b:37:f4:e3:39:a1:0b:c3:fd:d6:8c:87:1b:c8:
d0:25:8d:9f:63:9d:0d:c9:28:66:35:59:2a:7d:92:
ad:23:0c:76:05:8e:98:83:bf:72:78:6c:66:2d:b3:
04:58:eb:92:65:03:e6:f8:b6:e3:e6:94:af:88:80:
f4:19:c5:46:6f:56:dc:69:71:47:ee:4b:22:42:bd:
4f:ec:51:44:7d:a0:af:8b:0e:bd:b7:e1:f6:c8:4b:
bb:54:7c:88:83:3e:22:75:4a:69:1e:35:67:e2:77:
07:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BC:1B:92:1B:5C:40:B5:D4:B8:17:F3:69:52:1F:23:60:8D:D7:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.crl
X509v3 Authority Key Identifier:
keyid:CB:58:6C:B4:1F:C7:2C:0C:FE:27:FB:97:2D:BF:0B:EB:05:46:FB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.148.104.0/24
194.164.84.0/24
IPv6:
2602:fbc0::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:50:51:32:91:f0:ee:9a:bf:ab:ee:1a:d9:93:29:f9:a4:cd:
ae:ad:a3:7f:16:61:03:85:6a:ac:8e:d4:24:bc:c7:43:23:f8:
35:84:ad:2a:75:c4:db:8d:cd:4a:69:3f:81:36:de:0c:ed:47:
a5:1f:d0:c5:08:2a:06:67:cb:80:34:ec:f1:9a:c9:ea:55:cc:
aa:ce:bd:b8:2f:bd:63:33:2f:82:45:31:b3:a2:86:3c:d8:d2:
96:d8:48:9a:f3:ff:12:26:9f:82:5c:64:a2:7f:20:19:86:4e:
37:c8:8d:83:18:2f:b6:63:8b:69:dc:17:be:40:d8:d0:45:07:
89:df:c1:b1:9f:94:33:27:a2:5e:41:18:52:f2:e6:88:ec:85:
1a:df:26:06:11:7c:d5:f2:d7:e0:fb:d7:8a:15:14:2b:7b:0f:
99:6f:5a:86:b4:a0:b2:70:7d:88:5b:db:4a:5e:64:43:4e:57:
28:aa:03:90:f2:f6:7c:b2:7a:7b:47:fc:75:b9:08:a9:ac:53:
66:28:fb:4b:36:1d:29:b3:11:3d:da:70:dd:c3:ee:98:31:20:
08:e6:08:7c:65:2a:49:8a:33:bc:43:5f:1c:e3:0d:e2:00:5d:
88:cb:b3:81:1f:f2:4b:3f:f6:a1:9f:70:1f:f0:a4:87:af:e4:
e8:48:ac:f7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Dec 8 09:30:14 2025 by rpki-client