This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1161a23a-9844-362d-b4eb-6b7f43f3c8c2.roa
File: 1161a23a-9844-362d-b4eb-6b7f43f3c8c2.roa (raw, json)
Hash identifier: aOJrVG40WELn0VS4v/CIQK1IG7k/LhVq92y6fQGHOxY=
Subject key identifier: D6:D7:22:93:2D:C4:0A:90:9B:B8:AD:1C:C3:4F:16:C4:7E:15:3F:A1
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584C22C0F88C06AD8943203A4380
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1161a23a-9844-362d-b4eb-6b7f43f3c8c2.roa
Signing time: Wed 10 Dec 2025 02:00:31 +0000
ROA not before: Wed 10 Dec 2025 02:00:31 +0000
ROA not after: Tue 10 Mar 2026 01:00:31 +0000
asID: 396826
IP address blocks: 198.41.0.4/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:22:c0:f8:8c:06:ad:89:43:20:3a:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 10 02:00:31 2025 GMT
Not After : Mar 10 01:00:31 2026 GMT
Subject: CN=8f5ab87d-6dc8-47b5-b373-4569a117700a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:98:cf:3a:f3:3d:5d:5d:08:e0:54:47:1c:82:
bf:17:c3:87:63:48:1c:e5:ee:72:f2:97:3a:77:e4:
5c:79:c1:50:23:0a:14:87:7b:68:8d:51:10:94:eb:
b9:d5:ed:c5:04:22:0e:f1:4f:a9:1d:70:f9:35:a6:
fe:c5:23:83:21:cb:4c:9b:8a:80:30:68:21:89:57:
89:60:a5:d2:c2:3a:0e:49:8c:24:f3:ef:9d:9a:0c:
b5:93:2e:6a:9d:0a:a4:f2:d7:bc:75:ba:3b:18:d1:
5c:6f:31:28:d5:29:b7:1b:31:27:31:a4:23:74:b8:
98:8a:81:b8:a8:a0:b2:32:b5:f8:53:c9:ed:d8:d2:
47:5d:fe:07:4c:33:a1:12:59:fe:cb:67:19:e2:ca:
e0:4d:e8:95:24:2d:f0:35:69:c8:77:2b:58:75:43:
14:00:09:79:cc:d5:89:4b:10:33:ff:3f:42:4d:9e:
b3:b9:a4:f5:a9:5f:5d:0e:19:5c:7c:e0:0a:09:ff:
1c:07:fc:59:cf:15:ea:b5:b5:6b:3e:5e:ae:f1:4d:
7d:bd:1e:b5:43:35:19:ac:db:2e:03:95:51:c5:f3:
03:93:e2:80:10:58:e4:07:83:b8:7b:69:a6:55:e8:
50:77:b8:3d:17:8d:b1:ed:43:38:37:45:f8:ca:02:
3a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D7:22:93:2D:C4:0A:90:9B:B8:AD:1C:C3:4F:16:C4:7E:15:3F:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1161a23a-9844-362d-b4eb-6b7f43f3c8c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.4/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:84:c8:1f:d4:4f:fc:23:e3:26:57:82:37:38:0f:74:e6:fc:
8b:97:f2:e9:dd:10:a7:12:cb:97:10:eb:9c:9f:9f:97:fb:34:
56:29:d7:8f:93:59:f9:04:3a:3e:de:ee:e0:af:4f:b2:cd:90:
ac:f4:2d:c6:2d:96:cd:db:67:69:34:5f:e9:94:3d:9a:cd:84:
8c:a8:ef:0f:5e:01:06:20:cf:66:13:96:e2:a1:d6:f7:ba:45:
13:67:13:08:78:64:fc:20:dd:ce:6a:d6:97:61:44:73:e0:7c:
c3:61:56:a9:97:81:2a:93:e0:59:02:21:9b:03:68:bf:7b:b5:
08:cf:83:86:e3:80:b0:e4:60:de:f3:83:2b:f5:12:b7:2e:00:
87:28:35:92:43:3a:f2:53:9d:89:eb:1e:32:cf:aa:b8:fa:9d:
fd:34:01:64:bf:c7:45:6a:de:d9:c8:a6:82:78:ef:cd:0a:a1:
81:32:ce:dd:00:b2:3f:2f:19:1a:b6:15:f8:0b:54:29:12:13:
21:b9:6d:d4:c5:1e:1d:48:b8:1d:73:41:05:8e:5f:fd:93:0b:
a5:43:db:bf:da:d1:fc:82:6d:d7:ab:41:89:6a:92:e6:c6:cd:
56:ec:dc:c5:59:9d:4a:d9:bd:c3:e5:4a:aa:70:e0:3a:d6:a6:
e6:25:a5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 11:46:42 2025 by rpki-client