This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/a5aae8bc-a6ed-382f-af18-c5e191e02393.roa
File: a5aae8bc-a6ed-382f-af18-c5e191e02393.roa (raw, json)
Hash identifier: KWNqgLdI57KTsHyp74KShdIpow44mkX/mEsg169JoAs=
Subject key identifier: EA:7E:B5:B8:0D:F9:BB:5E:0D:51:5C:57:17:2E:3C:FF:FB:FB:33:6F
Certificate issuer: /CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7
Certificate serial: 010D0C9F4328584BF080869BE71C7E80EC2670C0
Authority key identifier: E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/a5aae8bc-a6ed-382f-af18-c5e191e02393.roa
Signing time: Sat 22 Nov 2025 02:00:30 +0000
ROA not before: Sat 22 Nov 2025 02:00:30 +0000
ROA not after: Fri 20 Feb 2026 02:00:30 +0000
asID: 398091
IP address blocks: 64.140.172.0/22 maxlen: 24
64.185.238.0/24 maxlen: 24
64.185.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:f0:80:86:9b:e7:1c:7e:80:ec:26:70:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7
Validity
Not Before: Nov 22 02:00:30 2025 GMT
Not After : Feb 20 02:00:30 2026 GMT
Subject: CN=6862cd59-0354-4c35-b7ad-24d9a7237d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:fb:e3:f7:f3:e4:6f:3f:b7:76:20:0e:ff:
93:e4:6a:59:97:0d:b1:69:6f:2a:65:f3:a0:cb:6c:
c9:cf:17:66:53:de:0f:9b:e9:e9:3b:e3:b7:b7:a9:
75:09:17:d2:e5:ac:60:f0:6e:db:a1:c8:62:a8:4a:
4e:42:19:58:89:c1:93:9f:69:52:45:f5:b5:af:91:
14:74:e4:69:97:55:6e:ed:83:74:7a:9d:08:74:bb:
fa:2a:b6:bb:6e:fb:57:85:15:be:f1:0c:9b:b2:ea:
f0:ff:25:49:ab:46:5e:d7:8d:18:32:ba:97:c9:95:
26:6e:33:68:d8:88:35:5d:1d:d0:7e:a9:03:68:db:
e9:5c:07:ac:a5:a2:2d:a7:c8:63:3a:2a:32:ae:97:
31:ec:98:5b:54:00:0d:e0:e2:50:50:09:47:d3:a9:
a0:71:02:bf:e6:5a:87:51:57:64:68:99:4a:2b:5d:
34:cd:fa:5e:fc:f0:21:e1:86:fb:36:47:49:87:90:
22:b7:89:05:ed:a5:87:42:80:83:4c:c8:70:88:ee:
f4:eb:92:60:85:bb:47:be:66:1e:ec:40:51:e8:dd:
8b:69:84:bb:a0:43:e1:44:90:a3:83:77:b0:c1:4f:
3b:2a:8d:36:2e:26:41:6b:3c:8b:7f:0c:e6:01:d3:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7E:B5:B8:0D:F9:BB:5E:0D:51:5C:57:17:2E:3C:FF:FB:FB:33:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/a5aae8bc-a6ed-382f-af18-c5e191e02393.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl
X509v3 Authority Key Identifier:
keyid:E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer
sbgp-ipAddrBlock: critical
IPv4:
64.140.172.0/22
64.185.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:1c:09:0f:85:4c:f3:9f:78:d8:61:a1:21:e6:c3:88:47:38:
2b:e7:d5:08:8b:ec:3f:34:49:41:e4:6d:fe:32:d1:78:49:b6:
84:4f:fc:50:9a:13:d8:02:86:56:3e:26:24:07:35:2f:e6:c1:
ee:95:4f:17:09:cd:d0:76:63:aa:bd:c0:19:13:a2:d3:ec:59:
bf:ea:52:1c:d3:66:2f:74:3d:96:e0:fc:8c:fd:c5:ae:ca:3f:
9b:34:1f:9e:d8:f7:15:8d:ab:8e:48:c5:26:93:a4:b7:df:c0:
64:a4:78:54:52:24:7c:4b:08:24:06:45:9b:dd:d8:53:8a:96:
19:d9:d6:a8:80:d4:10:8d:47:57:32:d3:d8:e8:49:4a:15:88:
b1:c9:a3:02:2e:05:f8:6d:84:4c:eb:f9:50:c4:f8:5a:6b:22:
56:4c:8c:97:e0:77:bf:c3:a5:5a:ae:5c:c3:59:87:58:db:92:
db:4a:b4:b0:16:af:45:e7:08:4c:3e:91:30:a0:e3:3c:ff:86:
1d:92:78:65:02:95:ec:06:52:63:4d:c8:0d:19:aa:67:8f:a5:
e7:bf:c6:8a:9f:10:87:c3:3e:44:00:46:85:82:0c:b5:ca:c5:
42:5f:a1:d6:6c:60:d4:58:1e:56:e8:79:f8:06:d5:3a:b0:52:
3a:68:a7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:13:30 2025 by rpki-client