This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68d04ab6-027a-3951-9f78-6c2e14655ee6.roa
File: 68d04ab6-027a-3951-9f78-6c2e14655ee6.roa (raw, json)
Hash identifier: cy93QU9jaVF+HAoLvn1qlmpxaxXQMde3Q7/CPsO46AM=
Subject key identifier: 7A:D2:59:73:11:29:F9:76:B9:83:5A:8E:EE:FE:0F:27:8A:33:BF:37
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584C22C0D218909CE64ADA9A7600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68d04ab6-027a-3951-9f78-6c2e14655ee6.roa
Signing time: Wed 10 Dec 2025 02:00:31 +0000
ROA not before: Wed 10 Dec 2025 02:00:31 +0000
ROA not after: Tue 10 Mar 2026 01:00:31 +0000
asID: 396554
IP address blocks: 198.41.0.10/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:22:c0:d2:18:90:9c:e6:4a:da:9a:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 10 02:00:31 2025 GMT
Not After : Mar 10 01:00:31 2026 GMT
Subject: CN=89f0c9db-cda1-4568-9981-b4c7ef284a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:4b:7e:47:46:f3:13:a9:65:9c:66:93:6a:
0d:92:61:cc:66:e0:bf:f2:05:37:a1:20:49:11:b4:
76:88:3d:43:cf:58:a1:1d:62:90:84:13:54:92:f2:
8d:9d:06:d1:52:43:a8:29:06:97:32:ee:13:95:d1:
2c:1e:65:eb:da:b7:8a:1a:a3:ce:f6:fe:91:ac:38:
12:de:88:94:79:ad:3c:51:5a:19:38:85:39:19:7e:
49:19:a7:80:a4:44:5b:3d:6f:1a:67:63:15:ee:75:
6e:52:20:2a:ae:98:cf:ea:e3:7a:f3:3c:3e:06:78:
c5:6d:24:54:37:46:bc:b7:f0:71:e0:00:6b:15:90:
16:44:f5:11:e1:d9:ad:21:c3:78:b7:c5:99:2c:c4:
4f:61:51:db:1c:76:92:93:6c:6f:01:b7:26:35:ab:
6b:6d:91:1c:04:3f:f7:59:c5:0d:b4:68:1e:02:28:
ee:73:de:3f:a5:72:ab:33:c9:9a:91:48:72:1a:b3:
cb:b9:c6:d7:58:4a:65:c3:4e:29:3b:10:ab:7b:ad:
c1:56:e7:84:06:c0:a8:90:35:05:87:70:54:3d:60:
19:23:d4:5b:72:18:7a:48:29:e1:39:66:c5:2e:4a:
6e:99:1a:38:d3:17:bc:8a:73:a8:a2:56:be:b5:1c:
36:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D2:59:73:11:29:F9:76:B9:83:5A:8E:EE:FE:0F:27:8A:33:BF:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68d04ab6-027a-3951-9f78-6c2e14655ee6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.10/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:12:63:2e:52:51:ff:9f:4c:8b:32:8e:12:e4:bf:37:64:4b:
e5:35:a9:f4:0e:c7:38:b4:9a:7d:fd:73:bf:54:6f:ae:7b:77:
cc:1b:59:a7:69:cd:fc:a0:52:f6:54:d3:28:62:e7:95:4f:ec:
91:44:f7:02:96:2c:6c:a4:be:2a:6b:97:c1:b8:f6:b3:de:aa:
06:64:74:49:b9:39:ed:b6:14:b3:0b:64:3f:72:68:b9:4b:93:
e6:60:59:f7:a2:55:09:87:80:47:57:03:cd:69:f7:1d:60:8c:
ac:ec:8b:19:3e:0c:df:d9:8c:51:0c:2c:8b:9d:6b:48:4d:bd:
be:7e:a9:64:4d:f6:cf:02:58:e5:26:97:22:1f:32:3b:03:63:
63:50:b7:5e:f5:0c:6f:88:ad:e7:f7:03:e9:6c:37:39:3a:dd:
69:e7:0e:e3:27:8c:78:8f:65:51:1e:8d:aa:37:9f:50:d9:52:
d8:20:12:35:42:92:18:6d:c7:45:d3:53:85:99:1d:15:f1:0d:
a2:21:49:0c:12:3e:48:39:77:9f:00:f9:f6:4a:b5:c0:c0:b7:
ad:57:30:81:a8:df:45:32:a9:5f:d9:bc:ae:ff:41:65:f7:2f:
03:c7:d8:49:bf:16:59:e7:8a:c1:7c:c1:26:91:6f:c1:f3:d7:
69:02:de:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 13:45:23 2025 by rpki-client