This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c75d991a-edc2-3d74-8efa-4da1a5550567.roa
File: c75d991a-edc2-3d74-8efa-4da1a5550567.roa (raw, json)
Hash identifier: /j32LOvgNIYx9kLLJHfjkWvecxj10PITlE3TL1qIioQ=
Subject key identifier: 3E:E6:A4:78:A6:0C:A2:9B:2F:F6:B6:67:83:DD:44:4D:9F:2C:58:AE
Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial: 010D0C9F4328584C136614B429241F590085C600
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c75d991a-edc2-3d74-8efa-4da1a5550567.roa
Signing time: Thu 04 Dec 2025 14:00:39 +0000
ROA not before: Thu 04 Dec 2025 14:00:39 +0000
ROA not after: Wed 04 Mar 2026 14:00:39 +0000
asID: 5650
IP address blocks: 152.232.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:13:66:14:b4:29:24:1f:59:00:85:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Validity
Not Before: Dec 4 14:00:39 2025 GMT
Not After : Mar 4 14:00:39 2026 GMT
Subject: CN=b0c93f08-58d1-49a9-a6da-c66dc60f0e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:96:34:aa:f2:21:37:33:69:da:54:a3:77:05:
c5:3e:59:71:a4:2c:12:69:ea:9a:8d:f2:f5:ab:d0:
85:30:d5:ee:c7:82:b9:70:6b:dd:f1:5a:a9:7a:8b:
d9:62:4c:c9:49:59:f2:1d:03:f1:b7:16:82:2d:d1:
a4:6a:a7:5a:46:38:fc:db:80:3b:f3:e6:a0:6e:63:
1e:5b:6d:f8:c6:42:68:bd:3d:95:62:d2:97:e4:51:
d8:c2:b2:0e:4f:b4:e1:4f:f0:1b:6b:58:52:bb:6c:
e6:1a:f0:00:44:c7:d2:6d:20:31:98:ae:c0:7c:7c:
43:bc:d7:0b:06:7c:96:9e:fc:ba:50:ab:9a:1a:16:
84:37:d6:c6:a5:78:b0:02:6b:e5:e6:e2:2d:f6:fd:
9a:fd:da:b8:3a:e9:7a:39:b1:8e:3f:4d:f1:1a:7a:
cc:64:39:62:a1:6c:84:16:80:c0:dc:42:a6:6e:3a:
a1:9f:3f:d3:83:98:08:93:78:01:5d:44:6c:72:ff:
5a:e2:59:b3:90:2a:ea:41:40:9e:70:77:b4:15:ed:
df:b1:d6:89:9b:22:e6:ea:3f:92:c2:cd:be:9b:32:
15:37:94:11:1a:b5:ee:76:9a:6f:47:54:8a:d4:43:
f1:48:b8:96:01:40:61:4b:85:c3:24:11:63:2c:f3:
0c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E6:A4:78:A6:0C:A2:9B:2F:F6:B6:67:83:DD:44:4D:9F:2C:58:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c75d991a-edc2-3d74-8efa-4da1a5550567.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
X509v3 Authority Key Identifier:
keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
sbgp-ipAddrBlock: critical
IPv4:
152.232.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:0f:8c:b7:eb:ae:ca:39:70:4a:ef:b8:d1:9a:3c:fe:5b:12:
8e:7e:e1:80:60:84:f6:45:5a:b4:b8:cb:8c:b4:43:d5:e7:29:
2d:08:2e:a6:e4:a9:f0:e2:85:ab:15:2f:fe:c2:50:95:f9:6a:
88:f4:fc:9e:0b:79:ed:c9:25:a3:36:9a:ce:49:33:f4:9d:1e:
f9:95:95:f9:ba:1b:64:c9:f7:8b:d6:a5:d1:0c:ad:1f:b7:ab:
34:32:2d:61:1d:18:af:79:ec:3f:16:f0:54:f3:c9:c0:3e:e6:
1d:66:cc:65:c7:74:2e:08:14:2d:d0:23:47:1f:97:2e:c9:d9:
02:a0:67:e0:f5:49:f2:0e:1d:cf:fd:8f:a6:3d:b5:e1:21:36:
62:26:33:37:17:d9:1c:77:86:44:33:15:c5:6c:2a:69:a0:50:
23:f7:b5:4a:a4:87:0b:d9:f2:4e:8c:95:5f:cf:60:b3:97:33:
01:06:05:e7:d5:a0:d8:0e:2b:c8:fd:a3:3f:b3:96:72:23:13:
66:00:fb:81:62:a5:e6:e1:38:e5:ea:62:fb:3e:77:ee:ee:9b:
08:7a:da:7b:4f:07:99:c2:ee:dc:9a:5d:f9:3d:0b:e5:a8:69:
ec:91:2b:86:46:44:bb:04:dc:61:21:44:14:b7:0a:82:35:56:
6f:21:dd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:58:10 2025 by rpki-client