This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea93b4be-e82c-3dc0-8651-f6e5a5642082.roa
File: ea93b4be-e82c-3dc0-8651-f6e5a5642082.roa (raw, json)
Hash identifier: s5T6rsvp7khcd67i/qEdcrOhkrRKsjIjSTDVEjbiIw8=
Subject key identifier: 83:1B:1B:E8:DB:FC:39:AE:13:FB:43:97:D0:A9:9F:3B:7D:A2:92:9D
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584BD065C1B833F74DABF119D140
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea93b4be-e82c-3dc0-8651-f6e5a5642082.roa
Signing time: Mon 10 Nov 2025 14:00:38 +0000
ROA not before: Mon 10 Nov 2025 14:00:38 +0000
ROA not after: Sun 08 Feb 2026 14:00:38 +0000
asID: 31898
IP address blocks: 68.233.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d0:65:c1:b8:33:f7:4d:ab:f1:19:d1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Nov 10 14:00:38 2025 GMT
Not After : Feb 8 14:00:38 2026 GMT
Subject: CN=e22cb41b-532c-476a-9598-f76551348605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:fa:ff:0f:88:8d:a4:2b:ff:e6:dc:1d:c6:
9a:45:ee:59:50:dc:73:aa:fa:fa:45:f4:9e:1e:03:
73:11:ce:bc:0e:57:8c:51:31:71:e2:db:29:f6:89:
ce:01:09:91:c9:49:0b:83:29:5e:a0:54:86:fc:9f:
6b:fe:54:c1:c3:49:26:ed:9e:03:d2:b2:91:9c:05:
fe:4e:82:88:9b:04:42:e6:52:22:0b:d6:51:97:ea:
f7:63:e7:c5:16:4d:61:99:3e:76:fe:bb:f1:4a:fe:
51:c3:b1:e7:2b:c2:2f:77:21:44:aa:77:6b:77:fc:
ed:92:f7:fc:fd:a6:97:ae:83:fa:80:fc:3a:87:04:
89:57:b5:65:a3:b5:38:21:b4:5f:e8:ed:9f:3d:3a:
f9:61:23:f5:1d:d8:a7:fb:2d:47:6a:8f:cb:4f:fd:
0a:e0:22:b4:2a:12:74:e3:9a:4f:a2:5d:e0:59:bf:
ba:9a:22:d1:01:d8:61:6d:d1:d8:83:b8:92:a6:f6:
57:6b:cc:0d:71:be:fd:d4:58:07:ec:77:d9:40:9c:
c8:b2:a4:33:d2:ad:6c:d9:88:70:2a:1f:8c:07:c6:
69:f6:d4:36:d3:3b:bb:e1:64:0a:cf:78:fb:a0:8f:
a4:42:3e:db:f4:cb:bd:79:cf:62:da:92:04:fa:6f:
7a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1B:1B:E8:DB:FC:39:AE:13:FB:43:97:D0:A9:9F:3B:7D:A2:92:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea93b4be-e82c-3dc0-8651-f6e5a5642082.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
68.233.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:e2:1b:2d:fd:cf:fd:49:a1:3c:5e:85:de:40:a4:48:20:02:
90:a7:21:58:68:e5:b0:51:55:4d:41:df:a6:76:d4:c4:e1:d0:
5b:3e:86:47:b3:a1:5c:6f:ee:95:e4:68:de:3b:db:e7:10:bd:
80:09:e4:0c:91:30:08:64:a1:25:f2:2c:90:1c:2b:5c:81:4f:
46:98:3c:64:1a:34:a1:b1:8b:36:9e:46:69:79:3f:79:c7:15:
dc:bd:ea:ea:3a:e1:81:e6:44:2a:37:34:12:67:2f:44:de:da:
9f:bb:75:a9:1e:2e:a2:d8:1a:84:3f:6b:4a:92:67:19:94:3b:
77:20:a9:be:51:b0:b7:ad:38:91:f3:98:59:dd:24:de:1d:bc:
86:0c:51:32:91:cd:59:32:19:6f:54:45:d4:a1:67:c7:ec:b8:
45:4b:6b:e5:ff:2d:8c:ef:77:0e:02:61:ab:e1:11:35:2d:bc:
29:b6:b0:b1:70:45:95:a2:1f:a8:b7:97:36:ea:ca:0c:a7:39:
d7:46:d8:0a:e2:65:43:6f:be:45:8f:fd:e8:04:44:43:4c:10:
b7:f3:58:88:0d:30:09:70:34:88:75:5e:22:a0:a9:7e:49:7e:
f2:39:33:a6:e1:f7:c4:da:27:be:b7:e5:e7:b4:29:4e:61:6e:
af:b3:b8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:12:55 2025 by rpki-client