This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/09dac3f8-30c2-3282-a0c0-2442d3caab25.roa
File: 09dac3f8-30c2-3282-a0c0-2442d3caab25.roa (raw, json)
Hash identifier: nUR4YPfzRjzXpIUNCMHvmcPDIjfOHCLX0Ru5AeEuuB0=
Subject key identifier: 37:A9:49:23:4C:A4:E0:D7:A1:58:2E:C4:AA:D9:8E:C5:76:08:93:8E
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584C22C0CE1913603A9E4DA29400
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/09dac3f8-30c2-3282-a0c0-2442d3caab25.roa
Signing time: Wed 10 Dec 2025 02:00:31 +0000
ROA not before: Wed 10 Dec 2025 02:00:31 +0000
ROA not after: Tue 10 Mar 2026 01:00:31 +0000
asID: 396573
IP address blocks: 198.41.0.4/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:22:c0:ce:19:13:60:3a:9e:4d:a2:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 10 02:00:31 2025 GMT
Not After : Mar 10 01:00:31 2026 GMT
Subject: CN=506e5abb-8683-45c3-9565-fd2aa14d6369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:09:79:73:92:58:39:6e:3e:d3:e5:c8:12:b9:
a8:b7:4a:05:fd:4c:9e:c7:d5:54:18:96:9a:0c:1f:
91:59:81:9d:1d:c8:ab:07:9c:8b:06:c9:29:b0:4e:
43:89:5a:66:54:0f:e1:51:31:85:ce:a6:b3:42:80:
d9:9b:e1:e6:5e:50:3c:bc:9b:f9:6d:4b:91:0a:62:
07:55:19:92:65:fb:b4:95:6b:44:28:b3:08:73:53:
65:39:df:4e:10:21:87:13:df:0e:94:f7:81:ce:76:
6e:7e:9b:83:96:54:f6:af:08:34:dd:c5:64:d7:30:
9b:7c:31:67:58:11:9b:0f:34:72:f0:ed:f5:f6:1d:
b6:6e:e0:81:b6:1e:6a:57:7d:48:c6:d8:c5:ac:2d:
79:85:ef:79:12:2d:54:e0:8c:ba:c3:8e:b9:97:58:
4b:1b:ae:5e:59:f9:38:64:ef:da:85:98:c3:db:da:
14:9c:3d:2f:99:1d:1c:55:53:a6:33:48:f7:66:55:
d2:86:0a:bb:80:95:80:d8:21:1a:83:f3:35:7f:5e:
b9:3a:d7:7d:e0:a0:7c:08:e7:81:82:c5:fa:70:e6:
bc:e1:3b:d6:ea:f0:68:e2:be:39:b9:d2:fb:9f:a3:
d7:c1:c7:11:88:c4:e3:c5:72:14:32:35:6e:9a:3d:
7f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A9:49:23:4C:A4:E0:D7:A1:58:2E:C4:AA:D9:8E:C5:76:08:93:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/09dac3f8-30c2-3282-a0c0-2442d3caab25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.4/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:a8:50:8e:2e:07:52:87:2c:e5:8d:03:f8:bf:1b:4f:6f:65:
e6:f7:32:79:5d:d8:b1:79:75:0b:22:97:65:eb:af:1f:ee:9c:
b6:8d:c8:ea:43:b5:28:01:03:92:d2:79:12:1d:4d:a2:e7:c1:
7e:66:ea:4a:52:9b:da:f4:9d:64:63:57:b5:f0:3d:44:88:7f:
71:87:6d:b1:5e:f9:02:2f:30:6b:fe:39:3a:61:7a:50:db:96:
be:91:04:f2:17:85:91:62:a7:0c:84:79:45:97:f6:b2:2a:31:
ec:c9:e6:1c:9d:45:87:01:b9:b7:e5:e7:3d:25:f6:ef:da:b3:
62:c2:f9:cc:35:17:43:84:21:69:49:2c:dd:b8:d3:70:7f:a5:
04:e9:10:9e:f9:6c:22:69:7b:f7:97:d1:8f:8d:25:13:82:27:
c9:49:3f:97:1a:48:72:b9:1a:a7:91:90:1f:59:99:cc:28:7d:
77:cd:56:bd:4c:16:61:81:36:82:02:a2:81:03:33:a5:27:ca:
10:6b:dd:c7:e2:b9:fe:3d:e0:56:16:bd:b1:f9:ac:d2:e1:42:
8c:a3:39:2d:a6:08:93:2f:80:60:43:60:a9:bd:99:d7:04:65:
4a:ef:3a:fa:94:c2:81:de:28:9e:f9:63:2e:eb:d0:6a:a1:f1:
42:7f:f3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 11:47:03 2025 by rpki-client