This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/9c49d00c-cbbe-3c4e-834f-b93958dcee69.roa
File: 9c49d00c-cbbe-3c4e-834f-b93958dcee69.roa (raw, json)
Hash identifier: xco3ouqj/sylfoLwzuVkhyc81pSt60V3qaB8EN13JMs=
Subject key identifier: 85:8E:3B:64:35:86:6C:6E:63:40:00:F1:7D:93:28:7C:12:BD:60:9C
Certificate issuer: /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
Certificate serial: 010D0C9F4328584C4F6BCE96FD36D75B1C0C8080
Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/9c49d00c-cbbe-3c4e-834f-b93958dcee69.roa
Signing time: Fri 26 Dec 2025 02:00:32 +0000
ROA not before: Fri 26 Dec 2025 02:00:32 +0000
ROA not after: Thu 26 Mar 2026 01:00:32 +0000
asID: 32595
IP address blocks: 66.235.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 21 Jan 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4f:6b:ce:96:fd:36:d7:5b:1c:0c:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
Validity
Not Before: Dec 26 02:00:32 2025 GMT
Not After : Mar 26 01:00:32 2026 GMT
Subject: CN=eea461b7-936e-4678-850a-ff1c8912ae23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:0e:e8:f1:2d:74:65:88:c4:8f:90:7f:65:
63:3d:5e:2e:64:bd:c3:f3:43:bd:75:6f:7e:d6:41:
41:05:7e:87:52:d2:84:c3:5f:cf:02:36:2c:e5:6d:
ae:ab:9c:c6:5a:94:ee:5f:ef:dc:8f:7e:56:52:2c:
fc:43:90:b1:f4:9b:f3:35:49:8a:de:91:4b:2e:87:
a5:4b:9c:40:97:0b:6f:8a:62:0c:62:41:da:b2:c8:
9b:fc:37:55:57:28:95:e5:79:41:9b:96:26:fd:7d:
0f:c4:56:a6:51:38:d0:d3:85:c9:65:fe:20:37:50:
8b:fa:4b:b1:47:99:55:01:3a:81:e9:9d:68:e2:c2:
ee:97:1b:96:d2:f2:0b:0e:30:65:d7:ae:c0:14:30:
b8:37:38:b5:13:69:37:98:38:4f:7b:4c:28:1d:28:
45:90:d4:0d:90:69:17:a5:b7:fb:8a:0c:4a:e8:d9:
3f:a2:7c:81:a0:7b:8e:13:93:3a:cd:49:fb:46:c4:
b4:a8:bf:af:4a:8b:aa:3d:91:de:a2:13:df:c0:a8:
3a:2c:61:c3:d9:4c:46:c1:bf:64:67:40:41:6f:ae:
2f:77:8d:6b:3a:4e:42:76:c1:5d:73:f3:19:a5:ed:
7c:c1:23:ac:73:49:a1:ad:41:d6:c6:8b:a2:fb:6f:
96:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8E:3B:64:35:86:6C:6E:63:40:00:F1:7D:93:28:7C:12:BD:60:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/9c49d00c-cbbe-3c4e-834f-b93958dcee69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl
X509v3 Authority Key Identifier:
keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
sbgp-ipAddrBlock: critical
IPv4:
66.235.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:4a:87:5f:9b:8d:36:39:20:1a:84:0d:4d:fb:5f:ca:ab:70:
2d:c2:bc:90:c7:a3:b5:cb:21:b1:f2:9a:87:81:16:9c:b9:18:
23:29:34:0c:23:aa:4e:5a:d2:0c:35:4d:6a:79:46:a6:92:71:
96:fb:c7:85:ed:47:c4:4e:a0:b0:47:49:b6:74:39:64:a0:63:
f3:fe:62:26:15:0f:aa:fc:30:f5:08:32:d0:d8:ed:5a:c0:f3:
27:42:05:09:19:2f:57:f9:d3:cc:13:fc:79:f0:ad:f3:ea:72:
a3:bd:e2:75:84:32:c8:f6:fa:bd:6c:1c:3e:12:f9:50:ce:bc:
49:0e:eb:ad:e4:ef:bd:43:42:db:cf:f4:7a:1f:9e:06:66:b1:
01:85:ec:57:21:a7:06:c8:a3:30:de:ca:c5:26:2d:f6:32:5e:
50:3a:c4:8e:18:ec:a8:7a:0e:e9:05:4e:60:db:2b:17:70:12:
28:33:3a:94:c1:62:b7:86:7e:f0:e2:c7:6b:00:55:17:84:59:
6a:f6:b7:88:25:2c:e1:25:ec:08:7a:c2:6d:63:ed:6a:e2:d2:
7f:72:85:7d:00:81:5a:59:79:75:31:42:6a:37:d6:9c:91:40:
ac:a2:e5:dd:4a:17:1b:08:0f:c1:bf:1c:bf:8e:4b:4b:38:78:
3f:c1:c2:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExPa86W/TbXWxwMgIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2UwYWNjODUtNGRjMS00ZGRjLThlYmItNTk4ZjNjYmMw
ZWZiMB4XDTI1MTIyNjAyMDAzMloXDTI2MDMyNjAxMDAzMlowLzEtMCsGA1UEAxMk
ZWVhNDYxYjctOTM2ZS00Njc4LTg1MGEtZmYxYzg5MTJhZTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFIO6PEtdGWIxI+Qf2VjPV4uZL3D80O9dW9+
1kFBBX6HUtKEw1/PAjYs5W2uq5zGWpTuX+/cj35WUiz8Q5Cx9JvzNUmK3pFLLoel
S5xAlwtvimIMYkHassib/DdVVyiV5XlBm5Ym/X0PxFamUTjQ04XJZf4gN1CL+kux
R5lVATqB6Z1o4sLulxuW0vILDjBl167AFDC4Nzi1E2k3mDhPe0woHShFkNQNkGkX
pbf7igxK6Nk/onyBoHuOE5M6zUn7RsS0qL+vSouqPZHeohPfwKg6LGHD2UxGwb9k
Z0BBb64vd41rOk5CdsFdc/MZpe18wSOsc0mhrUHWxoui+2+WmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIWOO2Q1hmxuY0AA8X2TKHwSvWCcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTBh
Y2M4NS00ZGMxLTRkZGMtOGViYi01OThmM2NiYzBlZmIvOWM0OWQwMGMtY2JiZS0z
YzRlLTgzNGYtYjkzOTU4ZGNlZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2UwYWNjODUtNGRjMS00ZGRjLThl
YmItNTk4ZjNjYmMwZWZiL2NlMGFjYzg1LTRkYzEtNGRkYy04ZWJiLTU5OGYzY2Jj
MGVmYi5jcmwwHwYDVR0jBBgwFoAUPnTKwypVMPwS8HSGrAwm83VIWo0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9jZTBhY2M4NS00ZGMxLTRkZGMtOGViYi01OThm
M2NiYzBlZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQutsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKBKh1+bjTY5IBqEDU37X8qrcC3CvJDHo7XLIbHymoeBFpy5GCMpNAwj
qk5a0gw1TWp5RqaScZb7x4XtR8ROoLBHSbZ0OWSgY/P+YiYVD6r8MPUIMtDY7VrA
8ydCBQkZL1f508wT/HnwrfPqcqO94nWEMsj2+r1sHD4S+VDOvEkO663k771DQtvP
9HofngZmsQGF7FchpwbIozDeysUmLfYyXlA6xI4Y7Kh6DukFTmDbKxdwEigzOpTB
YreGfvDix2sAVReEWWr2t4glLOEl7Ah6wm1j7Wri0n9yhX0AgVpZeXUxQmo31pyR
QKyi5d1KFxsID8G/HL+OS0s4eD/Bwn0=
-----END CERTIFICATE-----
Generated at Tue Jan 20 16:12:06 2026 by rpki-client