This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa
File: c289adc8-f56d-36ed-9305-ee284f075f34.roa (raw, json)
Hash identifier: WID9Ty2XtNzXUNdbEDaMIa451X3P2nbWojjZWmWNNGA=
Subject key identifier: E8:A7:95:E9:58:6F:D0:FD:50:AE:7A:4F:C0:EE:B5:C2:BF:54:37:14
Certificate issuer: /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7
Certificate serial: 010D0C9F4328584C13C370578AD8A395A6420F80
Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa
Signing time: Fri 17 Oct 2025 13:00:39 +0000
ROA not before: Fri 17 Oct 2025 13:00:39 +0000
ROA not after: Thu 15 Jan 2026 14:00:39 +0000
asID: 3527
IP address blocks: 128.231.0.0/16 maxlen: 25
137.187.0.0/16 maxlen: 25
156.40.0.0/18 maxlen: 25
156.40.64.0/20 maxlen: 25
156.40.80.0/21 maxlen: 25
156.40.88.0/22 maxlen: 25
156.40.92.0/24 maxlen: 25
156.40.96.0/19 maxlen: 25
156.40.128.0/18 maxlen: 25
156.40.192.0/22 maxlen: 25
156.40.196.0/24 maxlen: 25
156.40.198.0/23 maxlen: 25
156.40.200.0/21 maxlen: 25
156.40.208.0/20 maxlen: 25
156.40.224.0/19 maxlen: 25
165.112.0.0/16 maxlen: 25
192.231.145.0/24 maxlen: 29
192.231.146.0/23 maxlen: 29
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:13:c3:70:57:8a:d8:a3:95:a6:42:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7
Validity
Not Before: Oct 17 13:00:39 2025 GMT
Not After : Jan 15 14:00:39 2026 GMT
Subject: CN=0d5d317d-9eb8-42d8-82af-8e9f5d8a5f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:84:3f:a4:19:79:7a:04:d0:2d:c8:68:92:
09:66:83:a2:89:29:b9:2c:99:2b:eb:6e:36:c2:fb:
33:6d:23:48:51:12:70:a2:b1:b7:c5:e8:54:90:60:
bd:4d:7b:40:72:8e:fc:e2:dd:c3:df:e0:16:71:1d:
16:7b:3c:20:4f:82:39:c1:9b:21:96:a9:7e:b0:42:
dd:5b:51:01:75:70:c0:bf:00:7b:52:8b:2b:7e:b7:
58:94:7f:ec:62:9f:40:41:8e:56:c0:fa:72:35:18:
f7:67:bf:99:22:95:36:c1:51:93:66:28:c5:c4:9b:
2e:c6:3e:b4:f8:17:59:36:c4:fd:f7:4c:5d:34:c9:
8b:37:eb:0f:1c:50:57:34:17:18:64:79:d2:99:8e:
3c:f6:1c:2b:89:10:f6:9e:df:70:f1:93:39:ed:be:
82:7f:26:cb:45:6b:1f:bd:1b:be:93:ee:00:d3:dd:
01:8e:87:bf:17:ed:cb:3c:40:d4:e8:2d:31:cd:5b:
85:28:6f:3c:e7:a8:7b:5f:03:64:5d:21:78:48:ea:
de:ce:97:64:8e:e0:f7:d9:ef:b8:46:73:ea:41:80:
15:ff:2c:8a:a7:78:fb:ae:94:96:93:a8:1a:03:1a:
b8:99:ff:73:a1:48:ed:7a:9c:91:14:83:30:c6:4d:
74:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A7:95:E9:58:6F:D0:FD:50:AE:7A:4F:C0:EE:B5:C2:BF:54:37:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl
X509v3 Authority Key Identifier:
keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer
sbgp-ipAddrBlock: critical
IPv4:
128.231.0.0/16
137.187.0.0/16
156.40.0.0-156.40.92.255
156.40.96.0-156.40.196.255
156.40.198.0-156.40.255.255
165.112.0.0/16
192.231.145.0-192.231.147.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:0e:5d:9c:ac:b8:43:3b:13:c7:79:75:13:91:c9:a6:ae:b4:
15:6f:3f:99:52:a7:73:40:b1:32:11:4f:d2:0d:f3:a5:66:d1:
9d:b0:81:77:8a:06:5b:bb:22:a4:a7:91:df:dc:59:9a:52:da:
14:d5:36:87:46:03:12:84:36:93:51:59:ec:5b:fd:f0:c6:76:
83:a7:55:8f:ca:07:ec:af:a7:6f:df:98:48:c3:57:a2:97:cd:
6a:74:53:89:c7:61:7c:47:52:cf:28:c0:22:07:69:56:e0:39:
5f:a0:80:d0:bf:69:5d:fd:ba:da:33:db:38:a4:01:59:0d:6a:
9b:5f:84:fd:68:18:85:4c:9a:85:f6:db:a2:3b:ef:0c:3d:1d:
80:cf:70:f5:50:00:53:ed:0b:5a:2f:be:09:11:53:11:24:b4:
81:34:1c:0e:a7:92:9f:4a:1a:0f:dc:5c:3f:5e:c1:21:d4:4f:
70:17:da:46:98:cf:6b:a6:b1:da:08:a2:3d:32:fe:a2:5a:fd:
08:af:07:6c:54:71:ca:ab:9f:73:4c:ed:84:a6:2f:57:a5:2f:
85:bb:49:18:bb:a1:88:8d:0c:25:67:53:1e:48:32:3f:34:ec:
70:11:19:54:92:7a:53:b1:7e:fa:8a:d0:36:9b:7e:0a:d0:1d:
a8:f0:a8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:08:02 2025 by rpki-client