This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/a2157bfa-82b1-312b-b1ce-5486bb3ae492.roa
File: a2157bfa-82b1-312b-b1ce-5486bb3ae492.roa (raw, json)
Hash identifier: NMedwxP3kC45tESYf9k3XSIhM8anRpISfSN22QMYWl0=
Subject key identifier: B7:F3:33:DA:5C:D7:28:BA:89:13:81:51:B3:CA:92:A3:B6:D8:2B:FD
Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Certificate serial: 010D0C9F4328584BF1E5EDD916CB9E9B8C011B80
Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/a2157bfa-82b1-312b-b1ce-5486bb3ae492.roa
Signing time: Sat 22 Nov 2025 14:00:39 +0000
ROA not before: Sat 22 Nov 2025 14:00:39 +0000
ROA not after: Fri 20 Feb 2026 14:00:39 +0000
asID: 22612
IP address blocks: 198.187.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:f1:e5:ed:d9:16:cb:9e:9b:8c:01:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Validity
Not Before: Nov 22 14:00:39 2025 GMT
Not After : Feb 20 14:00:39 2026 GMT
Subject: CN=10d68453-0068-411c-a6c5-dd0583bf33d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ca:9a:e7:ed:0d:1b:e0:84:1b:4b:fb:4f:44:
c0:b2:23:c1:25:4f:bf:32:88:59:2c:08:8e:2f:e2:
10:d9:04:5a:c7:ac:00:29:b1:02:d3:5e:4e:89:14:
c5:07:87:29:fc:17:0f:db:11:48:e3:35:8d:a1:72:
0b:d4:db:6e:22:bc:5e:75:d0:df:b4:ab:74:d1:34:
54:ac:72:65:48:ce:eb:e1:32:9f:77:26:af:e9:60:
2d:55:fb:0b:ad:5a:96:0e:0d:78:76:43:20:99:50:
a6:ba:0b:d5:52:3f:3e:d5:4a:99:2f:f2:a1:25:57:
5a:24:31:26:43:6c:9b:98:40:17:3b:6f:2e:a0:09:
9e:e8:9e:64:50:41:fc:49:67:ff:b7:1f:06:22:40:
cf:5a:14:11:cd:e0:69:55:11:cd:a8:de:58:ba:f6:
0c:ed:de:e5:df:bf:d1:43:97:8d:94:bb:1c:26:14:
56:2d:5c:19:af:b7:b3:4f:a1:d1:2f:89:37:9e:2e:
9e:a7:3e:fd:07:30:a7:64:2b:2d:06:7e:0e:7b:f9:
2e:b0:4a:79:c1:fe:ea:77:3d:d9:8b:c6:ed:36:ea:
44:03:64:58:d6:20:e6:93:a9:91:17:d1:8f:c0:fe:
37:33:dc:fd:3e:55:0b:c3:1d:0a:b2:4d:94:fc:4f:
8a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F3:33:DA:5C:D7:28:BA:89:13:81:51:B3:CA:92:A3:B6:D8:2B:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/a2157bfa-82b1-312b-b1ce-5486bb3ae492.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl
X509v3 Authority Key Identifier:
keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
sbgp-ipAddrBlock: critical
IPv4:
198.187.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:28:d4:e7:0d:61:08:95:c6:5f:3d:56:58:38:37:fa:72:4e:
97:f8:89:ec:5e:a2:0d:72:bb:dc:fd:c5:c9:ee:f3:20:f4:bf:
62:45:9b:3e:34:07:e5:c3:7c:2b:6c:56:34:e3:75:a6:5a:90:
47:73:45:ed:58:c4:13:d7:f5:50:24:64:4b:03:a0:a5:af:32:
30:4a:18:8f:b9:4f:12:50:ee:05:b4:59:58:26:a6:36:33:2a:
3e:20:af:e8:89:c6:93:2e:9f:83:11:ad:ef:87:e3:51:4b:a7:
d1:69:41:3b:98:4c:db:c9:4e:a4:4c:a6:64:9b:49:d7:4f:e4:
93:86:73:d6:38:20:27:e7:ee:53:78:a5:e3:e7:60:49:cb:e6:
c8:81:92:26:bd:a4:75:eb:4c:80:23:67:4a:dd:f8:e0:cb:6f:
4d:27:dc:25:89:08:f8:d5:05:17:71:7f:1d:9f:e4:22:77:bb:
c9:cf:0b:37:0e:0a:23:b5:21:f7:98:de:0b:0d:e9:f5:57:2d:
08:a0:7c:a9:72:cb:2a:b1:a2:22:17:2f:36:82:f5:08:2e:6d:
69:45:04:f7:83:33:bb:6a:14:b1:80:75:29:b1:8b:f5:41:a7:
c4:c9:5f:4a:10:78:99:e9:33:9f:a8:01:15:ee:c6:1a:c0:1c:
0d:09:d3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:59:06 2025 by rpki-client