This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a32b982b-80c0-30f4-9738-db8d8a2a0644.roa
File: a32b982b-80c0-30f4-9738-db8d8a2a0644.roa (raw, json)
Hash identifier: iV2iW7din3+VxDahD2X1gu4eCU8Dg9Ljwulf5Eopung=
Subject key identifier: 3E:6A:01:8F:01:7B:64:BC:2C:AC:1D:91:BA:1E:04:9C:AB:3D:0D:6C
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584C42DBE960D8BFF776B58E5B50
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a32b982b-80c0-30f4-9738-db8d8a2a0644.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 12041
IP address blocks: 65.22.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:db:e9:60:d8:bf:f7:76:b5:8e:5b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=c7a94a5a-280d-4e44-bad4-29d7060fb2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:47:fb:3a:e7:60:5a:9d:bb:94:78:56:0b:
b1:dc:5d:4b:49:00:f2:ca:08:a3:62:2d:a6:4f:5f:
e9:8f:ad:02:7e:ea:6c:d5:a4:2a:17:73:69:dd:fc:
02:9c:1a:9b:54:5c:24:63:63:f2:ba:d0:9c:e7:86:
d9:94:94:02:19:df:71:a5:7f:ab:42:bb:e1:b3:9e:
04:fa:00:6e:16:06:59:63:4b:25:0e:a7:77:5c:e6:
69:1d:c4:ce:64:ec:e7:28:df:62:8a:9a:45:b7:2f:
0d:a0:1f:c1:9c:e0:20:aa:b6:a9:e8:fe:c7:c1:56:
cf:15:c7:b4:d3:75:ef:b1:f6:43:f1:35:dd:13:d0:
4d:18:60:ad:94:0e:af:7b:c5:ac:a4:ec:f6:38:a0:
ac:09:ad:86:3c:c2:d0:d3:be:98:96:47:9c:d0:ea:
15:96:0a:63:6e:ac:b7:9d:84:05:cb:38:1d:b7:42:
cc:ec:d8:05:bf:d6:7c:9c:e9:4e:b2:fb:3d:bd:d2:
99:76:49:e9:1c:e5:04:d9:91:fd:d6:a5:1a:11:0e:
ab:36:b7:03:d6:fc:d2:72:e3:8d:e7:75:81:62:e6:
93:77:b8:ef:43:96:35:cf:09:2e:9d:56:e4:54:30:
0a:4c:9b:0a:ed:09:b1:48:4c:ee:97:6a:3b:ea:f2:
65:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6A:01:8F:01:7B:64:BC:2C:AC:1D:91:BA:1E:04:9C:AB:3D:0D:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a32b982b-80c0-30f4-9738-db8d8a2a0644.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
65.22.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:f6:5e:e0:60:12:9c:c7:1a:ac:da:23:49:d5:ba:dc:ba:7c:
06:de:50:b7:5f:8c:ec:dc:00:1c:c5:61:fe:95:54:88:e3:26:
c0:f2:39:73:6a:93:c8:5c:86:7b:c8:b6:92:98:9c:d4:16:c4:
32:65:19:64:d3:55:5a:30:a8:39:49:5d:ba:13:3e:f7:40:3b:
4d:c0:bd:b8:e6:f5:74:e9:c6:a4:89:c2:d4:2e:f3:c8:52:d8:
23:6f:2a:7f:bf:c2:f3:d4:ab:b6:b8:02:92:5c:46:d8:a9:ef:
9e:a6:e9:fc:8e:0a:6e:d0:8d:95:9c:9f:5a:32:c3:0c:66:4a:
86:01:34:6d:a4:68:90:2c:dd:6d:3b:9d:7b:66:80:8b:b8:bc:
59:7d:0b:b7:01:cc:d6:84:ff:79:39:0a:0d:b4:ab:bc:e4:71:
ed:5a:d1:a4:84:70:92:3a:37:e9:a6:ba:2c:78:94:78:16:8e:
03:85:e0:de:1b:fc:a1:ce:d8:38:a8:4f:6e:b1:b5:7d:b6:41:
da:57:7a:72:44:99:7a:e6:3f:10:26:79:7e:24:59:16:6d:4a:
c4:32:f3:21:62:6b:8a:1c:aa:c8:98:ac:a2:fd:2b:08:fc:e7:
c1:a4:ed:b1:de:fb:38:28:bb:4e:3c:f6:e7:c6:1c:2c:31:34:
1e:69:67:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC2+lg2L/3drWOW1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk
YzdhOTRhNWEtMjgwZC00ZTQ0LWJhZDQtMjlkNzA2MGZiMmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur1H+zrnYFqdu5R4Vgux3F1LSQDyygijYi2m
T1/pj60Cfups1aQqF3Np3fwCnBqbVFwkY2PyutCc54bZlJQCGd9xpX+rQrvhs54E
+gBuFgZZY0slDqd3XOZpHcTOZOznKN9iippFty8NoB/BnOAgqrap6P7HwVbPFce0
03XvsfZD8TXdE9BNGGCtlA6ve8WspOz2OKCsCa2GPMLQ076Ylkec0OoVlgpjbqy3
nYQFyzgdt0LM7NgFv9Z8nOlOsvs9vdKZdknpHOUE2ZH91qUaEQ6rNrcD1vzScuON
53WBYuaTd7jvQ5Y1zwkunVbkVDAKTJsK7QmxSEzul2o76vJlNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD5qAY8Be2S8LKwdkboeBJyrPQ1sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTMyYjk4MmItODBjMC0z
MGY0LTk3MzgtZGI4ZDhhMmEwNjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRadMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFL2XuBgEpzHGqzaI0nVuty6fAbeULdfjOzcABzFYf6VVIjjJsDyOXNq
k8hchnvItpKYnNQWxDJlGWTTVVowqDlJXboTPvdAO03Avbjm9XTpxqSJwtQu88hS
2CNvKn+/wvPUq7a4ApJcRtip756m6fyOCm7QjZWcn1oywwxmSoYBNG2kaJAs3W07
nXtmgIu4vFl9C7cBzNaE/3k5Cg20q7zkce1a0aSEcJI6N+mmuix4lHgWjgOF4N4b
/KHO2DioT26xtX22QdpXenJEmXrmPxAmeX4kWRZtSsQy8yFia4ocqsiYrKL9Kwj8
58Gk7bHe+zgou0489ufGHCwxNB5pZwM=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:34:49 2026 by rpki-client