This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/b40c47e3-8988-3029-b819-5be6fc4d7af7.roa
File: b40c47e3-8988-3029-b819-5be6fc4d7af7.roa (raw, json)
Hash identifier: g9cn5i9tvnzm3fUOB4CwGz8WfOyVzegkQkytzKlfwj0=
Subject key identifier: B0:06:DC:BE:D4:F4:54:37:B4:98:F1:D2:62:42:79:B8:93:C8:A0:80
Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial: 010D0C9F4328584BC96AF3D2D5F6357E317296C0
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/b40c47e3-8988-3029-b819-5be6fc4d7af7.roa
Signing time: Sat 08 Nov 2025 02:00:30 +0000
ROA not before: Sat 08 Nov 2025 02:00:30 +0000
ROA not after: Fri 06 Feb 2026 02:00:30 +0000
asID: 399244
IP address blocks: 76.164.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 02 Dec 2025 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c9:6a:f3:d2:d5:f6:35:7e:31:72:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Validity
Not Before: Nov 8 02:00:30 2025 GMT
Not After : Feb 6 02:00:30 2026 GMT
Subject: CN=a0b02c4c-7876-4bc1-8d0e-7e5dcf33064d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7e:1b:e5:c6:4a:1a:de:a8:08:e7:79:0b:8d:
41:ee:17:e4:1e:dd:51:9d:ed:4e:5c:9a:dd:0d:fa:
4a:4a:dd:e0:03:b7:af:71:09:7a:11:a2:85:88:a4:
80:82:d0:c9:5a:95:83:d7:21:4a:9d:4a:ee:59:7c:
6b:da:4e:58:58:51:44:03:57:fe:45:86:7c:c1:d3:
0b:68:71:d7:a4:92:66:59:72:68:36:a9:5e:69:6b:
62:7f:41:eb:cf:fd:f0:ad:15:4d:71:fd:a5:8d:4e:
88:19:75:78:42:9c:50:90:74:98:cf:9f:fc:5b:55:
1d:d7:a4:66:1b:03:fa:a3:f7:23:16:d2:a6:4d:4a:
2c:8d:8d:9f:1d:0d:c5:5b:20:cf:ff:47:5a:7c:6e:
24:6a:be:a3:28:87:a9:da:f5:14:a6:40:cf:d0:f6:
c4:03:d6:4e:2c:a6:04:0c:a4:5f:32:a1:53:ac:bb:
31:56:ce:dd:67:5f:7e:26:be:32:2f:ca:ed:5a:5d:
72:68:e3:65:1b:4a:e4:d7:75:07:c6:86:84:6d:3d:
18:e2:02:55:67:94:9d:30:ba:39:8d:c6:72:1d:6b:
a4:0c:2e:51:33:5f:be:bd:85:a0:ae:d6:2f:39:99:
a1:a4:a1:10:d2:c1:ce:b8:20:27:68:41:a3:c4:81:
80:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:06:DC:BE:D4:F4:54:37:B4:98:F1:D2:62:42:79:B8:93:C8:A0:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/b40c47e3-8988-3029-b819-5be6fc4d7af7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl
X509v3 Authority Key Identifier:
keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
sbgp-ipAddrBlock: critical
IPv4:
76.164.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:d4:5a:f2:61:5b:46:4f:f1:a8:fd:c8:80:79:71:ec:64:ac:
ef:52:d6:cb:00:5e:f1:56:58:f0:2d:08:34:1b:ac:f0:f1:77:
45:fb:be:1f:82:12:32:4b:3b:2a:bc:f3:0a:4d:65:4e:be:e0:
1a:ea:0c:08:c5:73:1a:32:d0:72:0c:9d:87:bc:00:19:c8:82:
5c:5c:30:85:eb:72:77:10:45:d7:c5:c9:75:7b:64:1e:e5:38:
b4:88:2e:77:4b:57:ce:e7:b2:c7:e3:99:f6:41:02:32:d3:39:
b4:65:a2:4b:91:22:a1:68:a5:16:1d:43:22:ef:ec:26:7c:00:
5c:17:8f:5c:9e:27:40:cf:8f:15:de:9f:04:c6:83:fe:38:38:
c4:88:de:da:16:a6:b9:f2:29:62:ae:1f:8a:a2:de:59:8b:3b:
af:3c:8c:78:e5:1a:34:df:22:1e:38:97:24:57:e5:0c:c6:8e:
52:b1:f2:0f:b6:ca:e9:46:d3:c7:f1:fb:fd:a6:cf:31:bb:23:
99:93:e8:0d:2f:d8:f4:5d:db:66:6e:07:b2:1e:d3:b4:b4:7b:
0d:c6:56:c6:22:f1:73:e6:86:fc:b6:fe:16:ff:e9:39:b6:46:
0d:e4:20:55:9c:8d:12:08:18:ff:73:0f:c7:b5:a9:5d:91:19:
14:e8:58:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvJavPS1fY1fjFylsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh
MzhkMB4XDTI1MTEwODAyMDAzMFoXDTI2MDIwNjAyMDAzMFowLzEtMCsGA1UEAxMk
YTBiMDJjNGMtNzg3Ni00YmMxLThkMGUtN2U1ZGNmMzMwNjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX4b5cZKGt6oCOd5C41B7hfkHt1Rne1OXJrd
DfpKSt3gA7evcQl6EaKFiKSAgtDJWpWD1yFKnUruWXxr2k5YWFFEA1f+RYZ8wdML
aHHXpJJmWXJoNqleaWtif0Hrz/3wrRVNcf2ljU6IGXV4QpxQkHSYz5/8W1Ud16Rm
GwP6o/cjFtKmTUosjY2fHQ3FWyDP/0dafG4kar6jKIep2vUUpkDP0PbEA9ZOLKYE
DKRfMqFTrLsxVs7dZ19+Jr4yL8rtWl1yaONlG0rk13UHxoaEbT0Y4gJVZ5SdMLo5
jcZyHWukDC5RM1++vYWgrtYvOZmhpKEQ0sHOuCAnaEGjxIGA5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLAG3L7U9FQ3tJjx0mJCebiTyKCAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk
ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvYjQwYzQ3ZTMtODk4OC0z
MDI5LWI4MTktNWJlNmZjNGQ3YWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh
MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi
YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl
MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTKTEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGnUWvJhW0ZP8aj9yIB5cexkrO9S1ssAXvFWWPAtCDQbrPDxd0X7vh+C
EjJLOyq88wpNZU6+4BrqDAjFcxoy0HIMnYe8ABnIglxcMIXrcncQRdfFyXV7ZB7l
OLSILndLV87nssfjmfZBAjLTObRlokuRIqFopRYdQyLv7CZ8AFwXj1yeJ0DPjxXe
nwTGg/44OMSI3toWprnyKWKuH4qi3lmLO688jHjlGjTfIh44lyRX5QzGjlKx8g+2
yulG08fx+/2mzzG7I5mT6A0v2PRd22ZuB7Ie07S0ew3GVsYi8XPmhvy2/hb/6Tm2
Rg3kIFWcjRIIGP9zD8e1qV2RGRToWAE=
-----END CERTIFICATE-----
Generated at Sat Nov 29 22:24:45 2025 by rpki-client