This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a796d9e8-3e34-31e5-a8d0-a5c8bf9abf6d.roa
File: a796d9e8-3e34-31e5-a8d0-a5c8bf9abf6d.roa (raw, json)
Hash identifier: tw+bD+M1/THR96AyC3DtA12f1dgh4hvT37HjoADUFPM=
Subject key identifier: 42:18:70:1A:69:D0:80:89:E4:1F:15:55:E2:21:CD:F9:01:D3:53:D6
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F4328584C37B116092757A186ACE2C000
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a796d9e8-3e34-31e5-a8d0-a5c8bf9abf6d.roa
Signing time: Wed 17 Dec 2025 14:00:39 +0000
ROA not before: Wed 17 Dec 2025 14:00:39 +0000
ROA not after: Tue 17 Mar 2026 13:00:39 +0000
asID: 212238
IP address blocks: 166.88.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Jan 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:37:b1:16:09:27:57:a1:86:ac:e2:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Dec 17 14:00:39 2025 GMT
Not After : Mar 17 13:00:39 2026 GMT
Subject: CN=ba5f8499-41d4-4515-8609-1a88ca10765e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d9:f8:37:a8:1f:ee:fc:f6:75:f9:1d:24:dc:
7b:41:9d:ee:d3:64:6d:16:e5:9f:00:b9:63:d9:61:
43:15:78:05:54:28:30:3a:33:90:60:b3:2b:23:f5:
8d:bd:74:1b:9d:46:1a:61:63:12:a4:b5:ba:9e:8a:
df:83:20:bf:8d:ed:03:58:ff:6d:58:6d:9c:50:85:
44:45:02:f8:14:bd:67:0c:88:eb:39:87:6d:29:79:
a6:8c:14:82:5e:0c:ce:b0:23:72:66:b5:f7:df:f5:
d4:3d:c3:6a:a6:e6:e4:86:48:35:df:fe:3f:b9:ac:
c6:9c:46:e5:77:ce:24:8a:af:20:70:a5:11:7c:55:
76:dc:96:2b:f0:6f:52:f4:51:c1:53:83:f7:18:15:
27:fd:62:3e:4c:34:ad:18:a1:35:82:35:a0:b0:de:
da:59:e8:d9:34:c4:a8:a1:21:40:77:95:3d:bc:85:
56:84:d5:fb:39:11:be:97:90:12:c5:91:57:b8:41:
bc:76:10:b9:4e:16:e6:9b:4a:f1:03:8d:25:57:48:
44:9d:10:0b:49:f5:83:e0:8a:3d:54:a3:1a:7d:a1:
f3:58:19:82:18:c9:ea:85:a4:f2:b9:a6:a2:29:13:
30:eb:2e:33:bf:2d:de:58:e8:c6:f0:55:5b:e8:63:
7d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:18:70:1A:69:D0:80:89:E4:1F:15:55:E2:21:CD:F9:01:D3:53:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a796d9e8-3e34-31e5-a8d0-a5c8bf9abf6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
166.88.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:76:b2:51:6a:ca:51:46:7e:49:30:5e:2c:99:13:5c:f8:6d:
6d:13:ed:fd:7f:ff:c1:0f:4c:6f:b3:2b:66:5f:16:5d:bf:ea:
d3:8c:0f:73:17:2f:f4:b4:81:79:38:36:db:ee:51:68:9e:bd:
e0:03:c2:27:86:76:fc:b6:b9:11:f9:7f:80:5c:8d:4e:84:fa:
cf:21:4e:bf:59:3a:8e:f1:dd:5f:6b:13:e5:a2:8a:22:d7:c4:
bb:e1:33:94:9e:5e:09:08:ec:b6:c9:28:29:7c:21:db:3f:16:
a4:f5:8e:14:29:af:17:dd:89:81:89:9f:33:7a:f8:2b:93:92:
b9:43:37:31:21:81:47:d2:e9:97:9b:76:75:fd:d8:af:27:e6:
46:c7:8d:72:57:ae:ca:fe:4d:a5:a0:aa:4b:46:2d:b0:ff:bf:
9b:c8:45:ed:54:c3:8a:e7:13:2d:db:3c:83:ed:14:d5:3e:22:
f0:54:3e:b8:c1:e5:af:1a:71:46:82:cf:d8:17:05:06:39:0f:
44:30:87:af:1b:f3:43:d9:46:40:c2:cb:a3:12:08:54:19:91:
53:d4:d5:b1:8b:d5:1f:15:cb:b7:d2:ad:11:37:d9:93:2a:db:
ec:ff:7a:33:11:98:0f:e6:be:46:5c:2f:4c:d6:ee:f8:1b:ed:
92:3b:1f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 15:16:09 2026 by rpki-client