This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa
File: eff20afa-d256-340d-8b13-7a8f9e404a25.roa (raw, json)
Hash identifier: jd9694A9N9vrwAOMkBq5+U31ns+T0jNveMQp2jtp8zw=
Subject key identifier: CA:7B:BE:92:14:60:2A:89:F4:CC:06:AD:47:25:89:F9:B5:68:CA:41
Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial: 010D0C9F4328584BF1E5E75AFE24F26FE085836C
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa
Signing time: Sat 22 Nov 2025 14:00:39 +0000
ROA not before: Sat 22 Nov 2025 14:00:39 +0000
ROA not after: Fri 20 Feb 2026 14:00:39 +0000
asID: 21559
IP address blocks: 104.238.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:f1:e5:e7:5a:fe:24:f2:6f:e0:85:83:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Validity
Not Before: Nov 22 14:00:39 2025 GMT
Not After : Feb 20 14:00:39 2026 GMT
Subject: CN=aa280a48-adc2-4c8e-9c20-630f7696113b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:be:93:9b:fc:ea:f5:e6:c8:10:b7:4e:65:
a3:6c:63:6a:ae:f0:c9:1d:0e:8e:91:36:0b:b9:da:
9f:8a:83:48:22:72:98:46:8b:07:07:ca:17:7e:12:
fa:8b:54:4f:25:8b:49:4a:50:37:5d:91:22:41:67:
b6:23:5e:a0:f1:cf:61:45:4d:5f:3b:b9:de:5a:89:
10:20:c0:3a:9a:ce:61:79:3d:22:12:e2:97:03:ae:
96:99:98:d5:7e:56:3f:d0:a3:3f:cb:17:9e:74:77:
01:49:52:c5:6b:6d:39:5d:c1:db:ee:fa:bf:ca:96:
ed:1f:1e:2c:b3:92:b0:57:b7:90:60:b0:e6:59:4f:
3e:ec:8d:44:25:38:fb:6b:f7:db:6f:0b:58:5c:85:
47:1a:56:57:80:20:20:b5:7d:63:14:ff:78:ca:b5:
4a:ea:13:71:77:4c:c8:05:38:bc:e5:5f:f1:cd:4d:
08:ad:cd:17:93:89:42:1a:e0:ca:ab:22:10:51:b6:
20:d7:37:85:48:eb:fd:84:5d:f6:cf:fc:67:f7:d4:
0c:2c:50:87:8f:ba:b8:82:8c:ed:ee:1a:d9:af:46:
4d:eb:d7:d9:67:bc:90:93:93:9c:38:c6:82:02:a1:
2f:79:83:c3:8f:34:79:3f:02:51:30:4c:e4:28:fd:
a2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7B:BE:92:14:60:2A:89:F4:CC:06:AD:47:25:89:F9:B5:68:CA:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
X509v3 Authority Key Identifier:
keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.238.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:a1:6d:78:01:ec:24:01:d5:d9:0d:ff:3f:e9:5a:d9:a1:c1:
9a:8f:49:17:4f:c8:2e:af:e1:24:aa:08:e6:df:8f:ac:0b:42:
74:46:da:46:f5:f5:a0:f4:50:36:d2:54:b9:3b:5a:a7:d0:8c:
0d:c5:e0:3d:c8:0c:93:d5:cb:5d:d4:35:b9:4e:94:ba:8a:ab:
c0:32:4d:44:c2:e0:14:44:7c:f3:14:c9:c8:af:6d:94:73:02:
97:f8:51:a9:35:a5:6c:4b:af:7c:3c:b2:57:9e:9a:5b:2f:b8:
41:1d:8a:21:8d:a1:30:b6:07:bb:c0:89:05:bb:70:a6:54:60:
ba:b3:b5:9f:04:28:76:3d:00:dc:39:9e:30:ed:58:24:c8:b5:
20:64:d4:bf:ad:e7:79:7d:59:04:30:21:87:44:fd:90:c2:e4:
94:ec:8d:4a:71:a7:fe:bc:ed:bc:8c:32:59:1a:e7:0a:61:5b:
3e:78:fd:f1:9a:60:28:19:e6:df:58:c2:d6:e8:0d:f0:81:37:
d6:f7:db:91:8d:81:db:79:80:6a:cc:00:4c:38:cc:d0:70:66:
02:11:54:16:e7:1e:9d:d8:5e:47:07:00:39:73:ba:71:7f:98:
62:f8:eb:0e:59:e1:19:f5:48:ff:f6:ba:1e:7d:b8:c2:c4:95:
32:48:c2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:55:35 2025 by rpki-client