This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a1d17be-d951-336b-89c6-34210e530519.roa
File: 0a1d17be-d951-336b-89c6-34210e530519.roa (raw, json)
Hash identifier: onjLakD5IuJh0yKy4sGZFlzmZfzsalFNvhKyVgr5PSc=
Subject key identifier: F3:09:B9:46:3E:E2:0A:03:F9:D1:01:5C:1C:62:72:D9:97:72:2A:7D
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584C22C0ED8182EE5843FE504500
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a1d17be-d951-336b-89c6-34210e530519.roa
Signing time: Wed 10 Dec 2025 02:00:31 +0000
ROA not before: Wed 10 Dec 2025 02:00:31 +0000
ROA not after: Tue 10 Mar 2026 01:00:31 +0000
asID: 396592
IP address blocks: 198.41.0.4/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:22:c0:ed:81:82:ee:58:43:fe:50:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 10 02:00:31 2025 GMT
Not After : Mar 10 01:00:31 2026 GMT
Subject: CN=fbb6750c-de0a-466d-8d21-c785fb7e597c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:53:a8:b9:bb:83:b4:ac:99:09:2b:63:41:
80:38:d7:e4:15:86:f4:15:42:83:75:83:c5:0b:f0:
38:42:37:05:d5:74:74:e4:09:0c:2f:24:b7:98:cf:
83:4a:2c:e9:b7:a1:f6:90:58:e2:6e:8a:b5:ce:b7:
9b:a0:41:e9:93:13:cb:86:36:12:b6:48:61:3e:48:
2b:c4:cc:55:ae:1e:30:ca:c5:53:68:4b:63:e7:7c:
4a:7d:53:3b:d7:3e:84:65:37:df:09:6b:7b:3c:58:
19:23:3f:69:c6:78:ed:8d:b7:ce:2b:bd:fc:c5:c4:
7a:27:17:ff:96:51:36:09:43:bb:30:06:69:b8:4c:
40:54:91:47:ac:9c:b8:af:f2:38:46:30:87:f6:f8:
bc:90:f0:d4:0b:e1:e1:16:af:91:37:3e:6f:ef:54:
5c:fc:d9:37:28:2b:9f:03:6d:cb:f6:6e:26:97:ff:
a4:e0:b3:3c:7c:cc:5f:49:5a:65:7f:2a:8b:12:30:
19:50:cf:b8:26:eb:9e:e6:a3:25:d7:d0:a3:c0:ca:
69:50:fe:32:4d:f9:c7:1a:54:b7:8f:78:7a:bb:98:
6b:94:3c:cf:cc:fa:d7:15:6f:87:87:05:8f:7d:93:
44:2b:8e:1f:2a:6f:ad:cf:20:4e:c8:dc:67:2b:1b:
99:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:09:B9:46:3E:E2:0A:03:F9:D1:01:5C:1C:62:72:D9:97:72:2A:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a1d17be-d951-336b-89c6-34210e530519.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.4/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:00:66:80:4c:13:2b:61:d2:4a:ef:a5:5e:23:03:9a:6f:dd:
84:66:12:8a:7a:4e:bb:be:16:d7:a1:23:da:3f:a0:45:ed:46:
10:d3:e2:09:c4:ab:d1:f7:bd:bc:a9:45:9f:85:ed:19:f9:20:
16:22:f0:dc:97:dc:85:6f:3b:aa:cf:88:4a:fd:6d:31:6c:52:
84:40:e2:1f:88:7a:35:6e:40:56:bd:01:b5:cc:b8:72:19:b8:
6f:ea:26:a0:3f:25:8c:99:ae:8f:36:d3:a2:40:b5:82:b9:5d:
9b:7c:cc:a1:68:5d:29:f2:5c:d3:20:ae:d3:2f:7c:8a:ed:92:
30:97:3b:b1:ce:ef:c4:09:b7:c6:1e:9d:4a:9c:c5:92:ed:c8:
28:62:b2:ee:29:9f:ca:08:c5:ac:b2:be:7b:9a:26:43:b4:33:
35:25:b0:4d:2b:72:da:67:90:2c:88:99:92:e0:d4:9f:1e:e5:
6d:05:5c:a6:ce:f4:a6:16:c9:06:18:21:a7:33:93:6a:c4:a1:
22:5b:07:df:94:09:5e:8f:aa:e4:d9:ec:22:2c:c6:3f:1d:be:
47:3c:df:35:6e:41:87:9a:cb:02:eb:c7:d3:8c:17:7b:d6:92:
6d:6c:12:7d:77:fc:0a:28:02:df:8b:de:a3:b6:a6:ff:bd:78:
58:a1:39:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 11:48:34 2025 by rpki-client