This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a84f9ae5-425a-3f26-a500-796ea6a3f4e5.roa
File: a84f9ae5-425a-3f26-a500-796ea6a3f4e5.roa (raw, json)
Hash identifier: dP+jL+A0ZADdvFSZUtxSZpSis5f1Fu8bAulg4zKQdYA=
Subject key identifier: D2:B9:19:97:20:2A:4C:66:9A:0E:BF:39:71:E3:3C:2F:89:F0:E9:F8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584BCD9B389603C5C33C6C100AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a84f9ae5-425a-3f26-a500-796ea6a3f4e5.roa
Signing time: Sun 09 Nov 2025 14:00:38 +0000
ROA not before: Sun 09 Nov 2025 14:00:38 +0000
ROA not after: Sat 07 Feb 2026 14:00:38 +0000
asID: 33660
IP address blocks: 67.186.196.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:cd:9b:38:96:03:c5:c3:3c:6c:10:0a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Nov 9 14:00:38 2025 GMT
Not After : Feb 7 14:00:38 2026 GMT
Subject: CN=4d0f67db-8d9e-4d7f-a30b-88b844765faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0f:b2:c2:3f:3a:62:13:bd:98:91:62:e4:85:
eb:48:aa:02:b4:4e:32:38:75:2f:b1:9d:2e:d1:6a:
7d:03:ef:c1:2e:94:68:62:37:bb:ab:d8:da:64:f0:
7b:a2:c3:d7:0d:18:d8:df:a4:4f:a8:8e:fa:37:f4:
18:40:59:73:6f:0f:4e:4c:d9:0f:b7:a2:3e:a3:b6:
82:a4:40:ac:69:24:90:05:3d:e6:1b:06:79:f9:fa:
95:a1:90:73:ea:b6:ef:c7:33:e0:03:f0:8c:8a:0f:
09:29:79:b2:8d:e3:e0:9f:45:cf:57:24:55:c0:69:
e3:f2:d6:5c:e7:ac:d7:80:ea:fd:74:0c:4e:19:bd:
3f:78:61:65:3d:75:b3:ff:41:9f:ef:54:89:1e:ed:
6e:db:a9:81:f8:7d:b2:a8:bd:c4:a2:fc:06:ec:db:
7e:d5:ad:14:e1:07:49:68:88:e7:f0:ce:84:6a:54:
2e:4f:4e:6d:f5:09:25:13:3e:3e:22:73:c7:ac:10:
eb:e7:ef:21:02:ad:00:27:c0:67:e7:30:08:10:08:
c7:50:79:f4:e6:13:5e:ce:3d:7d:50:52:5c:02:19:
12:be:dd:5f:17:ef:99:c3:a7:3e:bf:08:33:2a:86:
f3:44:38:3d:54:de:82:16:1e:77:46:48:23:50:b9:
50:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B9:19:97:20:2A:4C:66:9A:0E:BF:39:71:E3:3C:2F:89:F0:E9:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a84f9ae5-425a-3f26-a500-796ea6a3f4e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.186.196.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:dd:ea:0a:02:cd:e5:21:aa:ab:d5:f4:26:a1:e5:b9:53:5d:
80:64:b9:b2:16:04:b5:17:64:a2:04:ce:a1:80:7c:5b:76:ff:
e3:18:5b:6a:3f:d7:ef:6f:99:b8:0b:3b:05:57:1f:9d:4b:90:
19:6f:61:a3:fe:37:58:6e:e0:ec:d0:8b:71:2e:33:46:c9:29:
bb:fd:ef:8d:44:9c:7d:70:8a:2d:b4:8c:b4:b1:02:51:96:04:
5f:e1:90:f7:aa:c4:b5:2b:bf:5f:36:20:47:81:4b:a4:eb:fc:
a8:11:b1:c6:17:68:a9:76:87:72:32:dc:a2:af:85:44:f6:1a:
06:2d:6f:73:22:7a:f2:53:7d:14:6c:3e:cd:b1:c6:3d:d9:bf:
d2:ac:e8:1c:93:e0:cd:58:50:ef:88:64:ff:12:54:c8:3e:73:
d6:8a:33:67:50:af:84:63:09:53:48:8c:5e:2a:a9:e4:61:dc:
66:1a:e3:2d:54:49:d2:02:3b:6f:0d:58:ce:1d:73:b4:0e:75:
af:03:de:84:6d:89:92:80:bb:6a:61:d8:16:30:c5:35:31:d1:
97:c5:1d:30:d1:15:34:a1:ae:92:e5:5f:ff:b2:89:cf:a0:23:
42:20:c6:cd:81:0c:a4:36:e5:59:3a:de:2e:56:a0:bd:6e:6b:
52:2b:2e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:20:18 2025 by rpki-client