This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f57f0e84-9cc0-342b-87d1-9679cb68c7da.roa
File: f57f0e84-9cc0-342b-87d1-9679cb68c7da.roa (raw, json)
Hash identifier: St32Lg1tnPvaQiHfoKucpU2XEHY8bjwMna7wicY2rPk=
Subject key identifier: 7D:8C:19:6A:CF:D7:9E:39:E3:87:7C:DF:E2:BB:25:C0:32:BA:72:D7
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584C22C0F10815A6A20EDE40AF80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f57f0e84-9cc0-342b-87d1-9679cb68c7da.roa
Signing time: Wed 10 Dec 2025 02:00:31 +0000
ROA not before: Wed 10 Dec 2025 02:00:31 +0000
ROA not after: Tue 10 Mar 2026 01:00:31 +0000
asID: 10515
IP address blocks: 198.41.0.4/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:22:c0:f1:08:15:a6:a2:0e:de:40:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 10 02:00:31 2025 GMT
Not After : Mar 10 01:00:31 2026 GMT
Subject: CN=fa05e208-c752-4f00-8668-d17353e0ea34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0b:9e:a1:d6:68:f4:f7:b2:c4:13:92:36:ab:
4e:d1:59:cf:9e:3f:1e:5e:d2:6d:d4:bc:34:9b:39:
4c:ec:47:bf:8e:3a:1a:0f:99:13:b4:43:d0:a7:e0:
f4:be:aa:33:f8:9c:ea:23:4d:76:42:0f:23:09:3f:
c6:76:ae:db:6b:5b:19:f7:a7:2a:6d:f5:51:3b:a6:
ae:40:d0:e7:41:47:4a:1e:9b:db:cc:b6:da:b8:20:
5f:d4:34:4f:0d:c1:81:31:7c:2f:d1:03:87:df:cb:
27:ed:0b:81:be:88:cb:50:b8:5f:f0:f6:f4:39:9c:
36:94:77:29:95:9f:3e:71:96:4a:f7:32:ce:e6:86:
ac:02:35:a5:0f:b6:56:c0:b2:4f:26:86:ff:cc:48:
2b:cb:12:b5:b8:b2:61:13:84:4e:a4:96:f9:2d:2b:
cd:d7:b2:b9:a3:6b:5b:1d:26:d6:e2:01:55:40:ec:
c1:8a:3a:46:73:98:2f:95:e2:2f:78:8c:24:99:0c:
14:fb:82:12:5d:b0:9a:21:a7:9e:1f:b4:13:5c:d4:
ee:82:5b:d5:1d:ba:2c:d4:5b:03:0e:92:86:79:e4:
3a:21:61:d2:1c:c1:49:4f:4f:01:42:cb:7b:39:e5:
95:8a:22:d4:03:85:38:38:83:24:20:1d:63:24:51:
15:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8C:19:6A:CF:D7:9E:39:E3:87:7C:DF:E2:BB:25:C0:32:BA:72:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f57f0e84-9cc0-342b-87d1-9679cb68c7da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.4/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:76:19:8d:81:0c:05:cd:fa:fc:79:18:17:b9:3e:5d:4b:eb:
c1:a7:b6:25:26:fc:9b:67:e5:11:c2:3f:34:27:42:0d:80:3c:
60:04:9d:2c:11:5c:5e:0b:94:91:0d:22:30:d5:3f:f9:6a:a3:
c3:25:a0:48:f4:03:b7:fe:b5:1d:a6:e4:1f:da:3c:c1:e3:3f:
d9:44:07:dd:4a:30:9d:e4:c0:93:2e:26:2b:1e:d3:f4:81:90:
34:9d:30:d2:7c:5f:a1:2e:d8:2c:40:96:7d:bc:7c:65:55:09:
d9:ee:54:2d:dc:63:40:d4:fc:6a:84:68:0f:f4:83:b5:f9:84:
ff:9d:67:7f:86:16:70:ec:75:d3:40:37:f5:68:d4:b4:8e:da:
52:71:41:84:03:1c:92:70:b4:a4:73:75:90:19:53:65:df:b8:
5a:bf:24:eb:df:62:84:72:27:53:66:d3:4e:3e:94:51:dd:bb:
2f:4f:be:0d:db:6b:a8:13:7c:3e:f7:cb:60:37:83:22:63:2f:
24:9e:64:97:e6:2b:c2:fe:46:b4:cf:93:1b:dc:b0:42:41:01:
ef:fd:bc:27:cb:6f:62:e5:1d:86:60:25:b1:f4:28:1a:1c:1e:
46:ef:d4:1a:65:76:d8:62:38:36:16:2a:db:19:d7:7a:97:a9:
d7:aa:c1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 13:34:30 2025 by rpki-client