This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/11410836-5d1b-3125-b16f-4d6a999077e4.roa
File: 11410836-5d1b-3125-b16f-4d6a999077e4.roa (raw, json)
Hash identifier: yaWsjGPWrzrsp1Zo9bc6ZI5Nq6dKfYGSIGsvBpyYVS8=
Subject key identifier: BD:EC:C3:CF:68:38:54:39:46:E3:73:4F:8A:FB:5F:87:D1:33:C4:F9
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584C222C221E6580C988EE550E80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/11410836-5d1b-3125-b16f-4d6a999077e4.roa
Signing time: Tue 09 Dec 2025 21:01:03 +0000
ROA not before: Tue 09 Dec 2025 21:01:03 +0000
ROA not after: Mon 09 Mar 2026 20:01:03 +0000
asID: 6079
IP address blocks: 198.170.0.0/17 maxlen: 24
198.171.0.0/16 maxlen: 24
198.172.0.0/18 maxlen: 24
198.173.64.0/18 maxlen: 24
199.103.192.0/18 maxlen: 24
199.236.0.0/16 maxlen: 24
199.237.0.0/18 maxlen: 24
199.237.128.0/17 maxlen: 24
199.239.192.0/18 maxlen: 24
206.50.64.0/18 maxlen: 24
206.184.64.0/18 maxlen: 24
206.184.128.0/17 maxlen: 24
206.239.64.0/18 maxlen: 24
206.239.128.0/17 maxlen: 24
207.20.0.0/18 maxlen: 24
207.20.128.0/17 maxlen: 24
207.137.128.0/17 maxlen: 24
209.39.128.0/17 maxlen: 24
209.57.128.0/17 maxlen: 24
209.70.0.0/17 maxlen: 24
209.70.128.0/18 maxlen: 24
216.42.0.0/17 maxlen: 24
216.44.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 19 Dec 2025 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:22:2c:22:1e:65:80:c9:88:ee:55:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 9 21:01:03 2025 GMT
Not After : Mar 9 20:01:03 2026 GMT
Subject: CN=7191ae50-93b1-469a-97e3-00a696da6004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:31:37:57:cd:51:77:6a:11:08:f7:eb:9a:ba:
d7:db:69:e0:eb:ad:6b:28:bb:b8:a2:47:7f:7d:44:
da:29:d8:11:62:54:8a:35:49:aa:02:17:b2:f2:2a:
f5:15:bf:73:b3:4a:98:ba:8b:5c:e0:7e:e3:bd:d8:
aa:00:8e:8b:4a:60:5b:b1:f1:69:cd:cc:ba:46:0d:
65:80:99:98:3e:91:1b:61:04:13:91:be:0a:85:a1:
59:b1:1a:2c:5c:98:45:88:e0:71:32:24:a7:11:6c:
f8:f1:17:05:2b:85:c0:38:7e:68:99:29:67:76:a5:
05:24:a3:e6:40:3e:22:19:74:b7:de:42:ee:50:18:
08:41:8f:58:6b:db:77:9f:ed:be:bd:d3:a6:f6:9e:
5e:d1:d2:ea:a2:78:07:64:26:53:b4:f4:d1:eb:80:
db:70:62:2b:be:53:96:db:a7:17:c6:12:1b:0c:30:
3d:1c:81:23:ff:25:6a:b4:d1:11:ba:9a:4b:4b:dd:
6d:da:6f:b2:d6:db:4e:3a:0b:7b:d5:74:e2:a8:fa:
89:b1:80:c4:f9:ca:0e:6c:cb:2f:fa:14:ba:bc:e7:
e5:0b:8e:c0:43:d9:b5:ff:dc:78:23:ae:9e:92:ca:
e4:b6:3d:0f:20:60:ee:33:87:ce:ab:62:3b:f9:5d:
28:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EC:C3:CF:68:38:54:39:46:E3:73:4F:8A:FB:5F:87:D1:33:C4:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/11410836-5d1b-3125-b16f-4d6a999077e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.170.0.0/17
198.171.0.0-198.172.63.255
198.173.64.0/18
199.103.192.0/18
199.236.0.0-199.237.63.255
199.237.128.0/17
199.239.192.0/18
206.50.64.0/18
206.184.64.0-206.184.255.255
206.239.64.0-206.239.255.255
207.20.0.0/18
207.20.128.0/17
207.137.128.0/17
209.39.128.0/17
209.57.128.0/17
209.70.0.0-209.70.191.255
216.42.0.0/17
216.44.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:fa:fd:b9:3e:fa:6b:ac:29:08:41:9a:76:a3:3a:db:d3:26:
9c:ff:7e:6a:fd:20:0f:02:df:de:a0:6c:87:2e:38:e5:a6:50:
5f:a3:8e:48:88:48:d7:5d:9e:1b:31:69:d9:c9:7d:c2:cc:22:
1e:51:e7:16:e9:1a:ea:79:d7:4e:fd:be:23:b2:c4:ef:07:80:
b1:e0:ab:3b:13:1b:a5:62:94:e7:e4:de:29:e1:52:78:f9:b4:
fa:a8:80:af:26:c9:ee:aa:5c:cc:d4:f6:58:66:35:2d:c8:f8:
a6:08:a2:dc:7e:36:74:29:97:3c:36:fe:fc:ce:06:b2:95:46:
22:ce:da:ee:d1:61:dd:ff:ed:0a:4b:40:ac:ca:57:a4:fa:a2:
fb:21:67:ee:9f:1d:cc:94:53:0d:49:7c:c0:d6:ca:50:00:15:
8b:48:51:e4:ea:73:35:b5:2f:1d:f1:b8:35:51:fd:34:06:a6:
df:4c:9a:7f:ba:8e:fc:f3:a1:57:cc:78:1c:59:fb:43:59:03:
10:4d:06:83:dd:1a:f8:3d:be:6e:06:89:dc:64:7a:34:1b:3d:
cd:23:0c:c5:c6:e3:11:c7:57:cc:25:5b:8f:fa:27:57:3a:f1:
d9:a6:7e:3d:c2:69:4b:62:cd:50:ea:c6:33:17:3b:96:50:4d:
f1:69:8c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 12:22:22 2025 by rpki-client