This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f0aac1e-83cb-3953-814a-150b44c1756d.roa
File: 0f0aac1e-83cb-3953-814a-150b44c1756d.roa (raw, json)
Hash identifier: KaHr7mm0TGKeTtONcDQcfc0+oMZHULTZH8ZXQjxqCpo=
Subject key identifier: DC:E7:06:FE:4B:06:95:0B:EC:51:30:13:22:D1:92:2A:29:C3:65:81
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584C22C0F20F93116C889A3F1400
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f0aac1e-83cb-3953-814a-150b44c1756d.roa
Signing time: Wed 10 Dec 2025 02:00:31 +0000
ROA not before: Wed 10 Dec 2025 02:00:31 +0000
ROA not after: Tue 10 Mar 2026 01:00:31 +0000
asID: 397198
IP address blocks: 198.41.0.4/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:22:c0:f2:0f:93:11:6c:88:9a:3f:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 10 02:00:31 2025 GMT
Not After : Mar 10 01:00:31 2026 GMT
Subject: CN=3d870ca6-f32a-418c-8675-1df4b2f5cda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4b:da:d5:09:3d:32:5c:6c:6a:6c:21:b2:4f:
2f:a3:35:f8:6b:a3:c0:c1:90:56:ce:84:42:8b:1c:
1f:04:df:0e:63:8e:de:a9:be:a4:4b:12:7b:49:4e:
d9:0e:2f:36:58:90:fa:9a:48:bc:a1:4b:3b:4d:eb:
76:61:01:cd:fc:bd:ea:e1:ec:31:fe:67:ca:46:9a:
86:c6:54:11:fc:ff:91:ea:1d:f8:a0:4c:e5:60:38:
44:f0:90:0e:99:cb:2c:d8:73:cc:6c:d1:ab:6f:c7:
85:4b:49:52:50:85:b9:bb:eb:89:bd:6d:d2:fa:05:
fc:db:6f:1e:2f:f8:1d:fc:0a:34:0a:0a:1b:fa:d2:
85:ba:ba:d4:45:ed:86:34:76:3b:91:b5:e2:08:3a:
14:6c:f7:2f:05:ec:79:b0:2a:77:f2:87:15:a3:52:
b8:7d:8b:64:d1:24:f3:1b:11:bd:28:71:72:79:05:
d2:83:71:58:33:84:1e:e3:11:0f:a2:20:19:e7:8e:
57:57:61:05:40:10:66:25:6d:41:80:13:fe:84:41:
f9:40:b7:99:41:0d:3a:66:f8:e5:70:36:e5:a4:69:
c7:52:8c:cf:9d:27:ac:3a:35:5f:76:b1:c3:59:55:
69:2a:5c:cd:0e:80:7b:b9:fa:d9:35:9b:19:2f:17:
99:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E7:06:FE:4B:06:95:0B:EC:51:30:13:22:D1:92:2A:29:C3:65:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f0aac1e-83cb-3953-814a-150b44c1756d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.4/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:92:a8:49:4c:36:c8:46:e6:84:d9:90:8c:05:bc:46:35:1f:
a6:4d:ee:42:b9:33:e0:da:ac:5e:33:ac:64:61:a0:0d:f0:3b:
c0:b1:22:f4:64:c3:8f:a5:f0:9e:b7:53:b3:5c:c4:50:e2:5e:
fa:b8:3f:b7:a1:03:2a:d3:1e:b9:ea:ec:42:a9:5e:6a:1a:06:
59:d8:16:98:08:cb:50:30:cc:71:24:5c:e2:40:a9:86:03:ed:
90:3d:cb:9e:99:72:5e:03:76:b3:c1:82:0a:fd:65:17:99:f3:
06:81:0f:ee:67:88:52:32:e1:8e:f2:8c:e1:b4:d6:43:97:89:
b5:5c:9a:8d:95:a6:af:bb:2e:62:cd:62:be:4f:f3:09:a8:ab:
53:03:cc:cb:9f:df:72:50:6e:d5:16:90:5d:8c:c7:fa:66:4c:
0c:4d:8f:0a:80:d4:1b:16:69:ac:4b:bb:8c:57:f5:62:44:45:
4e:37:29:77:11:e2:a0:9d:ca:1f:22:9d:a5:b8:aa:1a:c4:c7:
67:ea:86:2c:4f:74:c4:f3:b5:3a:45:9c:e1:38:af:01:10:13:
1a:04:26:c3:86:4e:0b:d7:e4:32:40:20:e9:41:27:18:88:3c:
29:ef:2d:bc:3b:bd:82:4a:54:fd:dc:b9:7d:e2:d8:3c:b9:9d:
15:ed:25:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 11:49:36 2025 by rpki-client