This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3598a9a7-9b6c-3188-a0e1-6004914bb3c0.roa
File: 3598a9a7-9b6c-3188-a0e1-6004914bb3c0.roa (raw, json)
Hash identifier: d6vj5kqkSHGBk9mtfjFDlOSV6GSGlq8hvVuBhlGS/o4=
Subject key identifier: 28:67:8A:6F:62:E1:4E:06:40:28:4B:5A:91:F5:14:BA:D9:1C:60:F5
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584BF8E0950B06C8D632E111A800
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3598a9a7-9b6c-3188-a0e1-6004914bb3c0.roa
Signing time: Tue 25 Nov 2025 02:00:31 +0000
ROA not before: Tue 25 Nov 2025 02:00:31 +0000
ROA not after: Mon 23 Feb 2026 02:00:31 +0000
asID: 22898
IP address blocks: 65.77.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:f8:e0:95:0b:06:c8:d6:32:e1:11:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Nov 25 02:00:31 2025 GMT
Not After : Feb 23 02:00:31 2026 GMT
Subject: CN=842b6402-71fe-472a-9c5d-c41fe76afbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1a:e3:bf:e2:12:5c:43:48:f3:2c:8b:49:4f:
4c:2c:a9:46:3f:cc:6b:10:42:4b:66:bb:17:27:11:
7c:18:a1:d0:a8:2d:9e:86:84:2e:95:1d:db:ff:a5:
c1:08:e2:a3:f6:97:4d:be:49:ba:b5:32:69:82:4b:
2b:a7:b4:a6:a6:6c:f9:6f:50:f8:7e:5a:aa:2d:d8:
cd:f5:22:b4:8d:40:21:23:46:26:69:8d:ba:52:b5:
a0:a6:b8:08:cc:ff:53:e1:80:93:42:51:65:02:c4:
9f:b9:ef:19:e9:8d:1b:df:c9:8b:63:60:7c:7a:29:
cd:21:29:60:08:98:f7:4e:ce:aa:7e:3b:52:74:bb:
3e:5c:1e:8f:39:29:56:01:6e:fe:e4:12:96:f6:fe:
f2:34:07:22:f6:e3:5e:fd:f5:06:da:f5:e8:06:73:
aa:4c:f0:e8:0c:44:c6:bc:12:2c:08:64:bf:9d:ea:
ec:40:e2:d1:91:40:72:b4:ef:36:ab:88:f4:3c:da:
f1:30:24:df:26:cd:19:0a:89:3c:3a:da:21:c4:2f:
d8:ca:e6:bd:93:52:f0:7a:d0:32:c6:57:40:ac:e6:
db:06:25:8c:01:96:13:e9:e7:6d:c3:54:18:45:21:
4d:31:24:90:bf:9e:1c:3f:5b:69:eb:09:58:c6:28:
f7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:67:8A:6F:62:E1:4E:06:40:28:4B:5A:91:F5:14:BA:D9:1C:60:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3598a9a7-9b6c-3188-a0e1-6004914bb3c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
65.77.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:de:8f:ec:21:a7:8f:30:1b:89:3f:2a:2d:d5:a1:61:71:b9:
c2:8d:aa:0b:8f:82:06:d3:02:c9:c0:85:b5:17:e2:af:ca:a2:
f6:b2:05:d2:54:ae:ed:6e:7e:0a:a6:b5:b5:db:4f:51:a9:56:
65:c6:00:cd:3e:b9:07:2c:0a:8e:74:9b:3e:82:cf:3e:80:09:
b6:69:85:02:28:bb:fe:ae:a6:19:cb:38:b2:84:25:09:90:38:
08:07:36:b4:2f:5b:a1:7e:59:04:91:a8:58:3b:1a:86:06:d3:
70:0a:42:fa:35:08:11:e2:74:58:9d:a6:7e:7b:ab:57:90:d6:
88:33:f6:fa:fd:94:6f:a5:74:72:43:37:07:45:75:4e:6a:40:
72:65:41:d7:5d:b4:7f:36:d2:43:f6:73:00:56:bb:3e:e3:06:
d2:1d:f3:12:c9:6e:ce:c6:e0:ea:8c:89:62:24:40:3e:f3:20:
fe:b5:ca:7d:3e:8d:58:dc:f6:c2:23:50:4a:c1:15:0a:13:20:
f4:c8:45:73:80:95:79:5c:8b:e5:70:d2:8f:c1:96:5a:c9:10:
89:45:83:ed:60:4f:37:4a:04:3d:4f:8e:df:50:12:d3:87:c1:
86:96:5f:f6:55:bc:84:83:bd:b3:22:7f:69:41:87:b8:32:ad:
7b:f7:c2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 26 01:22:36 2025 by rpki-client