This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/eac23a77-4cd9-3842-a74f-1f07fb0b8625.roa
File: eac23a77-4cd9-3842-a74f-1f07fb0b8625.roa (raw, json)
Hash identifier: 4ZF5BBfj7ljiCmuHPPzIZh16ZBOiILUUQhC8WsBk88U=
Subject key identifier: C8:B7:28:FB:A1:41:E6:93:B3:81:07:2D:BB:10:A8:E5:56:DA:BF:B8
Certificate issuer: /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial: 010D0C9F4328584BEF1B4855260CBF506FEB4080
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/eac23a77-4cd9-3842-a74f-1f07fb0b8625.roa
Signing time: Fri 21 Nov 2025 14:00:38 +0000
ROA not before: Fri 21 Nov 2025 14:00:38 +0000
ROA not after: Thu 19 Feb 2026 14:00:38 +0000
asID: 32983
IP address blocks: 198.29.20.0/22 maxlen: 24
2602:f9e7:2e::/47 maxlen: 48
2602:f9e7:38::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ef:1b:48:55:26:0c:bf:50:6f:eb:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Validity
Not Before: Nov 21 14:00:38 2025 GMT
Not After : Feb 19 14:00:38 2026 GMT
Subject: CN=4830abeb-2cda-407a-95c9-0071f678509c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0d:04:cb:06:75:9b:34:3b:72:81:d3:ee:9e:
63:fd:86:62:b2:7a:1f:25:c4:96:00:90:4c:cc:41:
90:e2:64:5c:9c:1d:e0:78:ba:b5:53:68:27:51:79:
4f:b6:ce:43:f8:5e:9b:49:5e:7c:98:7a:78:db:d8:
65:2d:44:5f:78:93:c1:d0:f7:e2:21:f4:3c:93:ab:
09:e2:6e:d8:5b:c5:f6:7e:2f:59:4c:b6:71:03:4f:
15:ba:79:f4:45:d2:c7:45:31:d2:3e:83:d7:63:e2:
8b:98:b7:90:9f:be:08:26:ab:2b:06:fd:0e:d6:da:
f7:ca:36:9e:be:0d:4c:e7:7f:0a:a6:5c:eb:84:a1:
48:77:5d:09:9b:1b:d2:37:8a:e0:f8:b4:db:00:6d:
ba:09:0a:f8:f2:2f:5e:d8:02:ec:d3:aa:8d:f7:ab:
e1:5c:c2:0c:cc:b6:ac:4d:ef:23:47:b5:44:c5:a0:
59:e0:2e:52:28:2d:82:45:56:27:cb:01:a2:0b:a3:
85:c2:0e:8c:77:58:6d:b8:c1:a1:91:91:b6:bc:15:
2a:de:ed:c6:67:ee:23:18:64:24:72:ab:d9:c0:77:
e7:b1:7f:7c:f3:33:3a:e6:2a:9f:dd:03:b6:09:ac:
80:6f:6f:0e:5b:b7:1f:81:b1:33:98:8c:9a:fa:5c:
93:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B7:28:FB:A1:41:E6:93:B3:81:07:2D:BB:10:A8:E5:56:DA:BF:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/eac23a77-4cd9-3842-a74f-1f07fb0b8625.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
X509v3 Authority Key Identifier:
keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.29.20.0/22
IPv6:
2602:f9e7:2e::/47
2602:f9e7:38::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:28:7d:c3:1d:40:b8:a2:34:6d:2a:f4:c7:50:64:f0:a7:04:
74:78:bb:f9:30:e8:0d:6c:4f:5e:d3:27:1f:9c:a6:d8:e4:5d:
24:93:9f:d4:50:eb:c9:a1:1a:ec:61:26:40:49:0e:24:b6:d4:
01:c2:ab:22:a9:1e:59:9f:87:c0:0f:f0:19:5a:ea:a2:ad:f9:
c0:84:e7:06:9f:22:89:a9:aa:4f:2e:f9:bb:cc:07:06:d2:d9:
dc:1c:d2:6b:b4:56:ac:ec:ff:63:f5:db:c8:70:a1:b9:b5:c8:
a8:16:80:7b:9b:49:14:6c:19:15:9d:64:79:06:d5:64:4c:e2:
01:7b:27:6d:5f:54:5d:ff:2e:83:37:20:33:6a:e1:ab:4d:4c:
c3:15:37:13:3e:1b:bd:63:99:68:f9:f0:52:bf:80:a3:f6:b5:
ae:3e:9b:7c:a0:f6:33:88:e2:2d:a4:cc:18:6a:a6:6b:40:e8:
0f:f1:9d:0a:e8:7d:c9:a5:c7:17:11:3f:ce:25:d9:70:11:d6:
d0:b0:01:56:9b:b5:db:c3:1e:52:6c:46:76:28:f5:50:07:c2:
f9:65:63:2e:7d:15:a2:32:b6:5d:47:2f:12:ec:b6:b3:23:21:
e1:22:86:66:ac:50:1f:99:7e:6e:d8:e2:4b:d4:8f:e7:81:34:
01:a2:4f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:02:46 2025 by rpki-client