This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef3910e3-9fe5-34e7-9a8f-6ed148b22856.roa
File: ef3910e3-9fe5-34e7-9a8f-6ed148b22856.roa (raw, json)
Hash identifier: 7EletltkTuSj+Bq2GuvxmWnnjq4R27qQdnJKLCxPduU=
Subject key identifier: 6E:E5:74:5E:FA:BA:A3:BB:93:8E:72:FF:B7:1D:F1:BF:CA:35:50:E7
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584C22C0EC5EED7590E505735280
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef3910e3-9fe5-34e7-9a8f-6ed148b22856.roa
Signing time: Wed 10 Dec 2025 02:00:31 +0000
ROA not before: Wed 10 Dec 2025 02:00:31 +0000
ROA not after: Tue 10 Mar 2026 01:00:31 +0000
asID: 211369
IP address blocks: 198.41.0.4/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:22:c0:ec:5e:ed:75:90:e5:05:73:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 10 02:00:31 2025 GMT
Not After : Mar 10 01:00:31 2026 GMT
Subject: CN=d68f7bd1-9e51-4752-8496-117a16127405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:78:60:8f:90:14:8b:c0:50:c6:30:a5:ca:
c6:67:23:b0:ae:d6:ec:84:9f:97:3e:41:a0:d8:19:
5f:a3:8e:17:7f:8d:f4:7b:7d:58:41:a2:5c:9f:89:
3c:7b:44:2e:d9:f0:80:75:30:72:92:e9:a8:54:d1:
34:e5:d3:e0:db:2e:14:83:a1:35:e3:8b:89:5b:cf:
54:23:3d:9e:6a:18:ed:01:f6:46:82:da:9a:b3:49:
1e:a4:50:82:96:5d:a2:48:07:f2:46:69:c2:76:79:
39:9f:51:71:15:ad:da:e6:8f:48:e2:c2:cd:04:51:
f2:18:0f:84:51:b3:02:22:50:83:ce:ac:6d:e9:32:
f2:59:e2:f1:6e:fc:d1:ef:47:f3:28:4b:b6:9c:24:
c6:0e:80:86:1d:6d:d5:ba:b7:e5:f6:1c:b0:d5:a9:
d5:86:0e:b9:85:02:9d:78:2a:56:a4:84:7a:09:33:
bc:9a:18:0b:89:5e:34:eb:a8:a1:b4:aa:f7:bd:fa:
26:63:aa:17:a4:80:40:cb:34:a4:bb:48:fd:fe:9c:
8f:8f:2c:bf:a6:81:4b:50:fb:69:c0:8d:d3:95:65:
c5:12:44:9e:40:54:1c:a7:2e:eb:0c:25:d8:9d:97:
d6:dd:89:e6:e2:aa:da:53:48:7c:70:9b:d3:bc:80:
f5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E5:74:5E:FA:BA:A3:BB:93:8E:72:FF:B7:1D:F1:BF:CA:35:50:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef3910e3-9fe5-34e7-9a8f-6ed148b22856.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.4/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:97:9b:a6:92:68:ce:2c:df:d7:fd:a3:9f:32:7f:63:b0:32:
31:b4:11:83:fd:68:d7:ef:15:ae:38:14:a1:59:65:d4:21:75:
84:5c:e0:08:73:73:a3:0c:58:6d:ae:09:53:7d:65:78:43:ba:
91:b1:92:5d:76:4b:c1:b6:85:00:ff:b0:25:d9:66:88:01:92:
5b:4e:fe:6e:23:1e:65:78:44:54:7e:ac:28:e4:cb:4e:e6:17:
bf:e2:6e:f7:47:43:4a:75:4d:6e:60:1b:8f:58:8d:fc:2f:45:
11:39:73:13:71:26:00:e6:ae:d2:fd:3a:88:fb:bb:f0:f2:8c:
6a:9b:98:b8:d5:49:32:cd:58:55:93:5e:f3:e9:a8:29:af:e7:
9f:95:2b:b1:c1:02:c4:19:ad:c9:7e:b7:4e:7d:34:0d:5e:f6:
85:b9:ec:56:d7:68:59:f3:37:1b:ec:85:12:00:55:ef:a4:27:
76:fc:05:5e:94:ed:a1:bd:62:b3:05:9b:ee:a7:a1:e0:29:4a:
35:8d:42:5a:5c:89:60:e5:e9:3d:dc:6f:f3:55:78:d5:e0:8a:
c4:af:1c:15:2b:d1:b5:4c:06:29:3b:79:ac:ec:57:4d:a5:1e:
16:23:95:65:45:33:37:4e:c7:50:be:ac:6e:c3:3b:5a:48:a5:
74:b8:bd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 11:52:38 2025 by rpki-client