This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af85614e-7c92-3643-b55c-470e5ec31d97.roa
File: af85614e-7c92-3643-b55c-470e5ec31d97.roa (raw, json)
Hash identifier: dw0iy4lBqmFDcxG9XLiJfHWVPhbeQa32Zyda+dVzo4o=
Subject key identifier: 40:C0:F4:B0:DD:75:AB:E6:AC:DB:1B:00:C9:45:DE:3C:9E:EA:66:DD
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584C22C0CD859ED39AE7D804DF80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af85614e-7c92-3643-b55c-470e5ec31d97.roa
Signing time: Wed 10 Dec 2025 02:00:31 +0000
ROA not before: Wed 10 Dec 2025 02:00:31 +0000
ROA not after: Tue 10 Mar 2026 01:00:31 +0000
asID: 36630
IP address blocks: 198.41.0.4/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:22:c0:cd:85:9e:d3:9a:e7:d8:04:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 10 02:00:31 2025 GMT
Not After : Mar 10 01:00:31 2026 GMT
Subject: CN=1ef27caf-380b-4bae-bb5c-e19e2683a807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f1:fb:cb:30:83:3c:b6:a0:ef:8b:45:20:3b:
83:24:b6:00:ad:1d:04:40:c6:01:2a:0d:92:2d:a0:
5d:17:a4:47:f3:ce:6e:fa:c1:48:7d:64:f5:3d:a3:
89:53:df:7c:7e:ea:83:22:64:26:fe:78:f9:59:ac:
79:d0:5c:32:83:fb:28:88:51:84:81:93:84:2d:3a:
31:3e:16:ec:1a:49:66:c1:cd:54:61:f7:1e:98:f9:
e1:97:24:a3:54:be:01:d4:ef:20:65:16:d5:56:8d:
68:2e:fd:d5:c9:a8:d9:14:b7:5e:75:27:e1:25:fc:
d7:a2:55:1a:63:d9:7e:33:8d:99:0e:ab:77:72:99:
2d:75:30:c7:34:23:4c:8c:b1:ab:6a:6a:f9:fb:8b:
77:2c:e6:31:0b:ff:93:44:63:9f:5c:6b:39:ad:e1:
24:33:6c:2c:8d:80:b5:75:0d:85:06:e0:f3:b0:bf:
5d:c4:33:1c:ed:34:74:57:4d:d2:9e:2b:f8:05:29:
1f:ee:e0:0a:12:3f:27:04:a7:da:52:49:28:ee:6e:
86:16:b1:79:8c:91:16:95:87:ff:d2:59:65:05:ec:
a3:76:29:c9:e5:d8:45:12:e9:b0:f4:0f:25:e0:cd:
7b:67:75:9f:81:11:9e:5f:61:e1:c6:6c:df:8e:fc:
c3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C0:F4:B0:DD:75:AB:E6:AC:DB:1B:00:C9:45:DE:3C:9E:EA:66:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af85614e-7c92-3643-b55c-470e5ec31d97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.4/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:d6:79:96:31:13:50:22:5b:56:49:4d:27:f3:ca:41:0f:41:
8c:34:e7:87:56:e3:1c:4f:18:6b:08:ca:ec:66:b2:6f:98:82:
1a:04:88:f5:44:ca:46:dd:54:d5:08:0e:79:ab:88:c8:97:d5:
11:ce:00:8b:da:66:6e:81:ca:21:2a:ce:d7:8b:a5:99:e3:5f:
1d:56:26:6a:ce:41:75:c3:b6:14:3c:52:9c:f2:a7:47:51:76:
16:e3:de:e6:10:f1:86:59:a3:91:e9:b3:05:ba:2a:60:bf:d3:
32:37:2d:d6:e0:fb:a4:29:21:80:24:40:7b:2c:d4:fb:a5:e0:
b7:26:e6:e1:cf:22:9d:bd:4a:c6:1b:57:22:83:45:d0:0d:87:
9a:26:7f:95:e4:b4:4f:95:95:2d:a8:de:e2:fc:2c:b0:66:41:
ed:c8:49:a7:42:b4:ef:c2:8c:a5:62:72:e2:d1:c7:28:19:de:
e7:37:a9:a5:e0:33:d5:95:0a:07:c8:b7:af:be:16:c1:09:17:
b4:55:89:6f:7f:0e:c6:08:86:31:0a:bd:d4:2b:cb:67:a5:6c:
9c:46:b5:ba:cf:bc:cf:6c:be:2d:5d:44:91:c8:d8:69:b5:24:
be:d4:d0:6b:27:2b:da:fb:f7:5a:01:61:a1:dd:ad:34:7a:ca:
94:64:68:d5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEwiwM2FntOa59gE34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MTIxMDAyMDAzMVoXDTI2MDMxMDAxMDAzMVowLzEtMCsGA1UEAxMk
MWVmMjdjYWYtMzgwYi00YmFlLWJiNWMtZTE5ZTI2ODNhODA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPH7yzCDPLag74tFIDuDJLYArR0EQMYBKg2S
LaBdF6RH885u+sFIfWT1PaOJU998fuqDImQm/nj5Wax50Fwyg/soiFGEgZOELTox
PhbsGklmwc1UYfcemPnhlySjVL4B1O8gZRbVVo1oLv3VyajZFLdedSfhJfzXolUa
Y9l+M42ZDqt3cpktdTDHNCNMjLGramr5+4t3LOYxC/+TRGOfXGs5reEkM2wsjYC1
dQ2FBuDzsL9dxDMc7TR0V03Sniv4BSkf7uAKEj8nBKfaUkko7m6GFrF5jJEWlYf/
0lllBeyjdinJ5dhFEumw9A8l4M17Z3WfgRGeX2HhxmzfjvzDLQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEDA9LDddavmrNsbAMlF3jye6mbdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWY4NTYxNGUtN2M5Mi0z
NjQzLWI1NWMtNDcwZTVlYzMxZDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB+1nmWMRNQIltWSU0n88pBD0GMNOeHVuMcTxhrCMrsZrJvmIIaBIj1
RMpG3VTVCA55q4jIl9URzgCL2mZugcohKs7Xi6WZ418dViZqzkF1w7YUPFKc8qdH
UXYW497mEPGGWaOR6bMFuipgv9MyNy3W4PukKSGAJEB7LNT7peC3JubhzyKdvUrG
G1cig0XQDYeaJn+V5LRPlZUtqN7i/CywZkHtyEmnQrTvwoylYnLi0ccoGd7nN6ml
4DPVlQoHyLevvhbBCRe0VYlvfw7GCIYxCr3UK8tnpWycRrW6z7zPbL4tXUSRyNhp
tSS+1NBrJyva+/daAWGh3a00esqUZGjV
-----END CERTIFICATE-----
Generated at Sun Dec 14 11:48:41 2025 by rpki-client