This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/77008fd0-bbe3-3d06-b0e9-c02c39f6fec6.roa
File: 77008fd0-bbe3-3d06-b0e9-c02c39f6fec6.roa (raw, json)
Hash identifier: yW8R9uGQYd7zYhJkHqZzjGv0bbabKdTpnif0SJ9g4BM=
Subject key identifier: 4D:96:FD:EF:B6:2F:4D:28:D6:EE:F5:D2:4E:AF:A1:FA:76:72:BB:11
Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial: 010D0C9F4328584BCD9AFC82986D0C30773A96A0
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/77008fd0-bbe3-3d06-b0e9-c02c39f6fec6.roa
Signing time: Sun 09 Nov 2025 14:00:38 +0000
ROA not before: Sun 09 Nov 2025 14:00:38 +0000
ROA not after: Sat 07 Feb 2026 14:00:38 +0000
asID: 397423
IP address blocks: 192.154.224.0/21 maxlen: 24
192.158.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:cd:9a:fc:82:98:6d:0c:30:77:3a:96:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Validity
Not Before: Nov 9 14:00:38 2025 GMT
Not After : Feb 7 14:00:38 2026 GMT
Subject: CN=fc132bf5-b126-4017-9dd1-1e72ebf1810f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5e:d7:07:a9:4d:f8:0e:63:2e:93:a3:61:ba:
95:14:93:41:52:83:c6:16:a7:4e:42:6b:eb:5f:fe:
f7:32:03:1a:11:5b:8a:80:a1:6c:9f:1a:fd:e3:1c:
86:bd:f7:d4:f0:35:6c:8e:3b:57:d2:35:5b:b4:5a:
7f:8f:f5:ce:21:64:70:2e:93:c3:ac:dc:40:18:1f:
f1:a7:a7:18:25:f8:f2:ed:1e:69:0f:e0:56:e6:99:
df:a9:d1:0e:3e:b5:36:ce:1d:46:5b:66:e1:07:e8:
d8:3d:f2:01:f8:69:df:1f:41:01:1f:fc:5a:70:b3:
89:39:fc:d8:7d:ff:37:f3:75:63:9c:81:db:6d:eb:
0a:2c:a5:85:a9:2a:b0:80:0a:1b:3d:8b:dc:13:83:
17:16:ea:ce:8b:aa:c3:4e:ef:40:e5:ef:a3:8b:17:
ab:cf:77:c1:54:0a:91:72:2f:04:6f:e1:2e:18:24:
d3:b6:fc:fb:ba:07:1a:7f:a7:07:0f:5e:8d:85:b2:
84:46:f6:3c:4a:89:f1:8d:1d:87:25:48:c4:d9:99:
b6:20:ed:c9:a8:d0:f6:d0:55:4e:a0:5e:2f:d0:6c:
df:e1:37:99:68:77:4b:d5:71:51:05:78:f1:26:f5:
f1:b7:58:f3:fa:94:5f:95:b9:74:27:6e:fe:c3:50:
6a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:96:FD:EF:B6:2F:4D:28:D6:EE:F5:D2:4E:AF:A1:FA:76:72:BB:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/77008fd0-bbe3-3d06-b0e9-c02c39f6fec6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
X509v3 Authority Key Identifier:
keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.224.0/21
192.158.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:74:03:b5:f7:e6:1e:50:e7:40:93:5d:bd:f1:91:4f:fb:b9:
f1:fb:fb:86:ab:8b:73:7d:34:ed:8f:6a:e9:e0:00:6a:cb:6c:
d4:9a:7e:63:5b:c9:cb:70:8d:06:a7:c3:84:c8:5d:7a:8f:57:
69:ef:c4:7e:e4:1c:17:2b:6a:ec:f4:b6:d3:41:05:62:af:be:
25:52:7d:d9:fd:7a:c1:3b:88:21:c7:97:7f:e5:c5:66:23:19:
3e:27:a3:c9:1e:03:cd:57:dd:17:7a:01:5d:4a:6b:73:49:4f:
2e:e9:d3:2a:87:27:d7:fe:a8:81:d7:79:8c:36:77:85:95:cd:
c3:7b:e4:05:32:95:e3:c2:c9:24:29:f3:48:fb:34:f6:b2:22:
51:a3:4b:5d:c1:9c:92:35:47:a1:f0:1d:9d:9f:9c:ba:24:06:
79:8f:41:61:a8:39:c4:e3:b4:fc:0e:81:64:0a:f9:47:9e:a2:
79:9d:c1:30:c6:7e:41:76:c8:41:d9:3e:38:59:a6:c5:a6:0b:
8d:eb:7d:8b:e7:f2:27:72:ac:e2:52:2d:60:29:c7:a6:bb:d0:
66:ae:f7:5c:a6:d5:69:8b:80:8b:ee:69:43:3f:81:cd:c7:6c:
ac:09:24:cc:fb:d8:05:14:dd:13:97:ff:55:a0:4c:1a:6c:25:
d5:37:e6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:19:21 2025 by rpki-client