This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5f4f447f-f80f-3bfd-b703-13b492ddc181.roa
File: 5f4f447f-f80f-3bfd-b703-13b492ddc181.roa (raw, json)
Hash identifier: WX14TYsJ1ZiehUdE1JinmCRcaAoiV0DG4xw9jlobRKM=
Subject key identifier: F5:7F:D3:5E:E9:AD:BD:5F:A3:58:6F:9F:85:21:C0:55:6B:26:D4:25
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584C14202E32632B2ED878135F00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5f4f447f-f80f-3bfd-b703-13b492ddc181.roa
Signing time: Thu 04 Dec 2025 20:15:00 +0000
ROA not before: Thu 04 Dec 2025 20:15:00 +0000
ROA not after: Wed 04 Mar 2026 20:15:00 +0000
asID: 131267
IP address blocks: 38.135.66.0/23 maxlen: 24
154.46.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:14:20:2e:32:63:2b:2e:d8:78:13:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Dec 4 20:15:00 2025 GMT
Not After : Mar 4 20:15:00 2026 GMT
Subject: CN=f0213890-0965-4a6b-9dc5-e3fe6dfeeb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fe:3b:6a:a0:8b:80:ce:94:d0:fb:4b:0b:12:
9b:2e:b5:68:98:61:aa:45:89:98:d4:b3:b3:a9:73:
46:f0:7e:fa:c4:f4:04:f2:7f:df:71:1a:c6:e9:ee:
a4:50:c9:7f:5e:a9:8f:ef:1e:39:27:59:23:fd:81:
31:43:84:01:0d:1b:72:35:cc:0d:b1:8b:42:01:86:
ca:0a:36:b0:b8:59:87:d2:32:75:6a:94:03:0f:d3:
f1:fa:af:1d:3d:47:38:18:fc:e9:70:ef:ec:56:a6:
2f:6f:04:42:6d:1a:82:bb:71:13:c9:d7:99:6d:5b:
8a:a5:17:57:03:c9:69:19:3e:9b:53:d6:ba:dc:c3:
81:ed:23:de:66:ef:40:79:05:30:e9:53:c0:b3:06:
db:1d:7a:43:b0:bf:0b:f4:89:57:13:9a:99:5b:26:
2b:9c:dc:fc:37:d9:3b:89:2c:dd:9f:97:d8:ea:67:
18:df:5c:d2:51:d9:f9:db:7d:12:6b:1f:c4:ce:97:
a6:22:5b:a6:e8:68:03:5b:9e:54:30:6a:d7:50:2c:
52:7e:23:df:55:94:12:38:fe:58:47:c7:71:11:dd:
3a:05:f0:d9:96:c8:76:c5:3e:ea:e3:23:8a:a0:3f:
a5:24:5d:08:24:83:34:6a:31:ba:a4:88:55:7e:ad:
66:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7F:D3:5E:E9:AD:BD:5F:A3:58:6F:9F:85:21:C0:55:6B:26:D4:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5f4f447f-f80f-3bfd-b703-13b492ddc181.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.135.66.0/23
154.46.24.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:83:c0:34:9c:6f:e2:f5:6c:1f:ad:ea:25:50:8a:19:f7:b3:
76:e1:23:d9:f5:92:8e:ba:2d:fe:40:01:6f:8e:92:20:ca:04:
92:aa:02:df:1c:a1:31:9f:48:23:76:8e:72:ac:ea:da:82:4c:
e8:63:1f:c9:0c:c7:56:67:cb:bb:f0:91:db:a9:6a:e8:21:91:
88:07:6e:48:29:67:71:c7:76:fc:d2:ed:ca:31:48:33:2a:f7:
e5:0a:9e:45:b3:f8:23:dd:0c:e0:0f:c3:90:a5:6d:fa:47:e0:
28:b1:cc:07:bf:0a:9c:df:a2:a7:10:7c:55:04:d9:56:1e:cf:
a4:02:b9:54:2a:89:80:5e:62:15:ce:c2:15:f1:ff:b5:e6:7b:
93:e2:f6:82:94:09:ff:eb:82:da:95:77:09:c4:25:f5:d9:20:
39:8e:09:7b:82:90:f0:cd:47:2f:17:ad:9d:68:91:8d:b8:99:
af:53:19:51:a0:cf:f0:41:9c:72:d2:6e:31:0e:d6:73:8b:53:
8a:ff:1d:54:1f:09:de:5e:70:94:84:63:74:fb:3d:fc:94:fa:
74:61:f9:71:a3:43:6e:f3:7b:00:55:e8:9a:fe:f0:b5:26:ef:
f7:ad:ed:b7:37:7d:38:05:4c:12:d3:dd:9e:87:3d:01:24:7a:
b0:44:9a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:05:58 2025 by rpki-client