This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/28b7558c-0a86-30e8-a429-1570b46f2dc7.roa
File: 28b7558c-0a86-30e8-a429-1570b46f2dc7.roa (raw, json)
Hash identifier: N7cfGbxlUupKB1gqfAt9Ixq60/M5YEQAIMy8u57ANHk=
Subject key identifier: F4:93:0A:52:33:06:EF:2C:24:39:E2:40:79:BA:9B:99:E1:B9:EF:67
Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial: 010D0C9F4328584C42DC05E5E75136FEF07BD900
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/28b7558c-0a86-30e8-a429-1570b46f2dc7.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 20473
IP address blocks: 23.154.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 18 Jan 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:dc:05:e5:e7:51:36:fe:f0:7b:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=8399c31c-bdb4-4604-9f0c-96ea32916bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:7c:9a:cb:a9:99:b0:20:b4:17:28:a4:c7:
c2:54:4e:b2:60:5f:d8:0b:16:73:36:b8:ae:40:29:
42:a0:be:30:b2:45:02:72:1a:a9:ad:45:03:06:94:
d8:79:2b:db:82:9e:4a:f0:79:5f:c2:99:7a:d3:ee:
3e:8a:92:b2:8a:a2:d2:31:39:d1:3f:3e:c8:be:e1:
37:ed:95:5f:45:28:7e:38:2f:a3:6e:0d:6d:16:f1:
7f:10:cd:60:f7:4b:59:c0:db:8e:9e:1f:ad:be:f2:
f8:14:53:88:1e:55:34:51:73:66:61:4e:5c:45:8c:
d4:07:7f:51:e0:0b:5e:ed:27:90:85:35:85:3d:2d:
6b:59:f4:5f:99:a2:a2:10:49:4d:cf:1c:91:d6:2e:
bb:71:61:d5:9b:69:85:be:5a:be:81:88:3f:45:19:
e2:1a:0b:17:05:e8:2a:44:ee:09:88:fa:ba:85:39:
27:c1:e6:c0:d1:af:ee:28:39:99:10:57:d3:e6:7c:
33:f0:68:fc:68:1b:98:af:1c:c9:f0:da:c4:c1:10:
c9:da:cc:d0:06:08:88:91:24:aa:48:7e:db:63:72:
60:ee:66:2e:13:92:81:3a:07:a3:f8:0d:87:56:1f:
01:8f:5c:e9:93:2a:1f:1f:39:78:7e:0d:37:73:eb:
13:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:93:0A:52:33:06:EF:2C:24:39:E2:40:79:BA:9B:99:E1:B9:EF:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/28b7558c-0a86-30e8-a429-1570b46f2dc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
X509v3 Authority Key Identifier:
keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
sbgp-ipAddrBlock: critical
IPv4:
23.154.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:43:8f:c0:47:41:fa:a8:96:ca:4b:4a:ce:6a:9d:dc:f9:9d:
9e:e4:c8:57:72:6e:23:c0:d2:6e:0f:37:d2:9f:0e:26:19:95:
b0:fd:1b:0f:e8:b6:1c:29:30:6e:df:68:04:a2:37:31:85:11:
53:13:42:1f:04:8c:18:fb:ca:48:4a:42:59:36:45:7f:45:35:
81:df:08:b2:6e:29:d6:af:51:5a:9e:73:be:83:fc:12:f5:14:
50:2a:0b:82:4a:60:ba:89:58:9d:4d:4a:14:45:50:d5:d6:a0:
3d:59:ae:81:5c:da:10:e6:db:87:54:ba:1f:b8:d3:e8:18:89:
33:af:b8:f1:5b:75:64:eb:5a:3e:09:a4:6b:91:a3:ae:21:49:
fa:3b:ab:33:24:58:a6:db:96:7b:d3:cc:7e:4b:3e:06:91:dc:
b6:0e:6e:50:15:9a:64:1e:1e:82:68:b9:23:20:38:e2:cd:3c:
1c:bb:af:88:bc:1b:ab:db:86:20:0a:21:74:69:e8:de:11:e6:
5d:ee:c6:07:ec:72:7d:a4:e5:c9:b3:47:a4:67:5f:40:4b:dc:
8c:76:26:ea:7c:88:02:13:0e:9e:9a:30:40:60:bf:83:c4:8e:
47:f7:39:30:fa:7b:ff:a8:c8:59:1b:9c:d1:27:ce:26:6c:02:
cf:f1:49:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 10:21:24 2026 by rpki-client