This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa
File: ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa (raw, json)
Hash identifier: tZ9vlT457blT0ZMgFHams1l9B8OzOAhMLAAESCIt0sU=
Subject key identifier: BE:E4:75:28:67:2A:F1:72:7D:8F:77:D3:9F:A1:54:B3:FE:D5:D3:02
Certificate issuer: /CN=804e20e1-66d3-4b19-8356-82071ce2a249
Certificate serial: 010D0C9F4328584BB2F7A8B1651505C0D9261500
Authority key identifier: F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa
Signing time: Fri 31 Oct 2025 01:00:30 +0000
ROA not before: Fri 31 Oct 2025 01:00:30 +0000
ROA not after: Thu 29 Jan 2026 02:00:30 +0000
asID: 33368
IP address blocks: 208.86.24.0/22 maxlen: 22
2620:0:1a20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Dec 2025 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b2:f7:a8:b1:65:15:05:c0:d9:26:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=804e20e1-66d3-4b19-8356-82071ce2a249
Validity
Not Before: Oct 31 01:00:30 2025 GMT
Not After : Jan 29 02:00:30 2026 GMT
Subject: CN=b10aedc4-bd6a-4a52-8129-92a2de4bbfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7f:c7:65:23:82:7b:3c:7c:66:aa:99:b9:f7:
fb:27:5d:0c:bd:b9:9e:c6:38:7d:a2:4c:c6:88:16:
3d:fe:91:09:8c:e5:eb:8b:cb:aa:b1:81:35:a7:4b:
09:d3:2a:ad:5d:6a:87:aa:d1:3e:08:a1:42:ab:07:
b7:b8:ed:8b:46:e3:9e:41:b8:09:7d:6f:bd:2f:e6:
60:30:c2:c3:e2:be:a7:37:a0:a7:d5:a3:ea:21:24:
73:38:07:f0:48:b9:9b:57:61:51:77:9c:64:47:1f:
cc:1f:8f:38:da:a2:d3:22:e1:11:17:76:38:e1:75:
fa:83:e4:5b:e3:86:38:06:4b:87:af:ae:f4:a3:1d:
81:87:70:ba:ba:e3:9c:f5:58:3b:ce:29:da:00:77:
18:b1:d9:49:ee:6b:56:cf:bd:9d:d6:6d:95:6c:27:
e3:38:52:74:1b:cd:bf:9d:b2:50:ce:95:00:a0:6e:
4e:d6:30:ba:70:95:a3:41:a5:e4:b2:a3:3f:78:6f:
b9:3d:fe:42:b6:ef:7c:77:f4:a3:b1:a3:be:25:ec:
f3:7e:d5:b8:50:90:af:48:31:64:f2:9d:1d:15:1e:
87:30:3a:7f:4c:27:b9:ff:1a:aa:b4:52:f0:bb:89:
59:93:c3:d9:b4:0f:0a:cb:ad:81:ac:89:a9:94:29:
ec:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E4:75:28:67:2A:F1:72:7D:8F:77:D3:9F:A1:54:B3:FE:D5:D3:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl
X509v3 Authority Key Identifier:
keyid:F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer
sbgp-ipAddrBlock: critical
IPv4:
208.86.24.0/22
IPv6:
2620:0:1a20::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:ba:29:6f:0c:1e:3f:ea:f2:6d:78:4b:46:bb:50:91:91:02:
49:0b:a6:ac:7d:e6:64:7b:cc:52:f8:88:f8:d5:55:0a:ef:c3:
5b:06:05:57:ca:19:b7:4b:0c:05:6a:22:30:54:7a:10:8d:f2:
f1:95:0f:0f:73:6a:18:7a:f0:1a:a1:3c:39:ca:10:b0:8a:93:
59:6f:e4:be:a3:10:e8:6d:c0:a8:1c:42:b1:58:66:4c:7d:e3:
ad:42:4d:0f:8f:af:ca:8e:50:37:9b:6b:1d:07:93:57:09:66:
53:bd:dc:cc:35:15:2b:46:a5:db:ab:47:a3:ca:be:31:52:ee:
55:c6:d5:ea:8f:ab:6a:51:53:53:bc:3a:4b:ef:ab:19:cd:58:
e3:b1:6d:da:b5:49:c7:00:14:05:36:df:ab:a5:54:a8:b8:64:
ab:f0:d9:f2:45:ec:ef:b5:55:cc:f8:a1:a5:de:b5:ec:ac:e0:
c9:fd:85:da:39:be:0e:96:59:1a:a5:e2:a1:cd:2d:f3:52:a6:
88:6a:09:f1:bf:72:9f:e7:14:cc:62:b3:9b:c1:8e:ca:1c:a1:
b4:45:54:80:17:dd:20:b0:c3:d4:db:e3:26:63:1f:ad:68:a7:
80:96:09:0c:a5:da:b5:31:78:8a:ba:ad:78:bd:4c:33:ae:dc:
58:f1:87:9a
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuy96ixZRUFwNkmFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODA0ZTIwZTEtNjZkMy00YjE5LTgzNTYtODIwNzFjZTJh
MjQ5MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
YjEwYWVkYzQtYmQ2YS00YTUyLTgxMjktOTJhMmRlNGJiZmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3/HZSOCezx8ZqqZuff7J10Mvbmexjh9okzG
iBY9/pEJjOXri8uqsYE1p0sJ0yqtXWqHqtE+CKFCqwe3uO2LRuOeQbgJfW+9L+Zg
MMLD4r6nN6Cn1aPqISRzOAfwSLmbV2FRd5xkRx/MH4842qLTIuERF3Y44XX6g+Rb
44Y4BkuHr670ox2Bh3C6uuOc9Vg7zinaAHcYsdlJ7mtWz72d1m2VbCfjOFJ0G82/
nbJQzpUAoG5O1jC6cJWjQaXksqM/eG+5Pf5Ctu98d/SjsaO+JezzftW4UJCvSDFk
8p0dFR6HMDp/TCe5/xqqtFLwu4lZk8PZtA8Ky62BrImplCnsHQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFL7kdShnKvFyfY9305+hVLP+1dMCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDRl
MjBlMS02NmQzLTRiMTktODM1Ni04MjA3MWNlMmEyNDkvZWEwYjVkMWYtYTUwNS0z
ODIxLWE2N2MtYjI5NmQwNzFiYmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODA0ZTIwZTEtNjZkMy00YjE5LTgz
NTYtODIwNzFjZTJhMjQ5LzgwNGUyMGUxLTY2ZDMtNGIxOS04MzU2LTgyMDcxY2Uy
YTI0OS5jcmwwHwYDVR0jBBgwFoAU9yC8R4jA8DfAcvbh44l89YA+Mx0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84MDRlMjBlMS02NmQzLTRiMTktODM1Ni04MjA3
MWNlMmEyNDkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQC0FYYMA8E
AgACMAkDBwAmIAAAGiAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAropbwweP+rybXhLRrtQkZECSQumrH3m
ZHvMUviI+NVVCu/DWwYFV8oZt0sMBWoiMFR6EI3y8ZUPD3NqGHrwGqE8OcoQsIqT
WW/kvqMQ6G3AqBxCsVhmTH3jrUJND4+vyo5QN5trHQeTVwlmU73czDUVK0al26tH
o8q+MVLuVcbV6o+ralFTU7w6S++rGc1Y47Ft2rVJxwAUBTbfq6VUqLhkq/DZ8kXs
77VVzPihpd617Kzgyf2F2jm+DpZZGqXioc0t81KmiGoJ8b9yn+cUzGKzm8GOyhyh
tEVUgBfdILDD1NvjJmMfrWingJYJDKXatTF4irqteL1MM67cWPGHmg==
-----END CERTIFICATE-----
Generated at Sun Dec 14 13:51:21 2025 by rpki-client