This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/28cb3218-2abb-3b5f-8174-9bbf7dde7bbe.roa
File: 28cb3218-2abb-3b5f-8174-9bbf7dde7bbe.roa (raw, json)
Hash identifier: WOsGlg6yV6er6rB5Tq5YoYP2jt7ZUPKfMzFw9KRa1u4=
Subject key identifier: E7:F4:87:9E:84:80:1E:32:EA:47:4D:2E:1E:25:F1:7F:3F:14:5B:35
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584C42DBC8CD322CB8D8F1B1AE80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/28cb3218-2abb-3b5f-8174-9bbf7dde7bbe.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 12041
IP address blocks: 65.22.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:db:c8:cd:32:2c:b8:d8:f1:b1:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=384a29ce-11a5-43b4-b597-bc5ab5d6e8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2b:3d:27:c1:7c:c2:80:f8:1f:7d:dd:79:b3:
3a:ca:01:45:60:f4:07:fc:ab:41:d1:43:76:1c:cd:
6e:5b:2f:1c:51:23:d1:bc:d5:8c:0f:53:e9:8c:33:
ad:a6:10:39:c9:d6:be:45:08:72:99:2e:a8:e5:62:
6c:19:ef:ee:3d:d5:77:b3:38:08:59:4e:9c:a7:15:
eb:96:0b:b7:89:33:04:78:11:6a:23:42:9e:77:d5:
cf:6d:1b:80:7f:cc:9a:8e:d9:cd:aa:cc:62:b3:cf:
21:bc:82:09:b4:47:a0:bf:24:32:83:ee:60:28:9a:
91:2f:03:e5:a5:21:32:f9:56:af:84:c6:b1:a0:f3:
03:be:1b:83:2c:26:44:c4:29:a2:d0:f2:f1:ba:6d:
53:06:cd:bc:a2:ce:4a:00:3b:f3:49:e4:42:92:53:
8f:1e:48:35:44:1c:cf:88:20:c8:c6:38:70:9d:a1:
af:73:0a:58:17:4a:d4:69:61:f7:54:66:18:1b:7d:
8d:64:ae:e6:07:b9:27:b9:08:48:cb:c3:2c:e7:ef:
21:75:1d:43:0c:cf:30:82:b7:4a:03:2a:66:46:05:
ed:32:ee:d6:c3:18:dc:6d:19:da:6c:49:76:9b:92:
71:c0:fa:85:98:47:64:81:57:16:06:b3:2d:f7:24:
a6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F4:87:9E:84:80:1E:32:EA:47:4D:2E:1E:25:F1:7F:3F:14:5B:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/28cb3218-2abb-3b5f-8174-9bbf7dde7bbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
65.22.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:55:31:03:d3:34:50:24:45:21:85:e9:39:da:43:7d:0c:b7:
5a:b3:48:76:03:a4:99:a7:4a:5a:80:8a:7f:25:00:25:26:89:
66:86:49:b2:c0:58:ee:03:54:5d:f0:33:a0:6c:de:9b:5c:5f:
8c:76:59:db:38:e9:81:95:a0:fb:a8:d4:05:5d:1b:38:81:27:
02:2a:44:a9:45:00:24:71:9a:08:69:ed:63:6c:54:12:cf:73:
bc:b6:96:02:61:59:02:db:90:14:1e:dd:5d:15:0e:0d:5d:65:
b6:f2:c0:29:58:8f:0b:cd:66:40:b3:53:01:e4:ad:ed:42:eb:
e4:b7:45:c8:c3:54:b2:f7:c1:e0:1f:58:76:df:88:99:6b:5b:
b7:a7:b1:a9:35:8d:3c:85:aa:25:8e:92:c9:80:c5:4e:a8:1e:
ca:5e:ef:a9:d3:9a:85:ad:ee:f6:42:2c:1e:32:ea:68:a9:8f:
8e:7f:58:98:6a:d7:84:24:4f:1c:b1:54:62:43:3c:36:52:11:
b6:95:d8:10:74:c0:f1:c9:f4:93:14:17:13:f4:f7:24:a8:ee:
4a:ff:03:ee:ca:5b:89:bf:a4:3a:a9:12:fb:33:07:2a:51:1a:
60:8a:41:8b:8b:87:1e:15:18:7f:cd:0c:5d:01:02:8e:85:89:
b5:93:14:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:35:02 2026 by rpki-client