This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/0c238eb0-5671-3c71-9597-92d5851254f0.roa
File: 0c238eb0-5671-3c71-9597-92d5851254f0.roa (raw, json)
Hash identifier: 8IlcTX1+EoksGUDUlS4wrAo1nmy6haHBQpu0bk+k+TY=
Subject key identifier: 8D:77:49:11:93:DF:37:66:19:FB:A7:BE:F5:76:7A:72:0F:E3:C2:D0
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F4328584C4CA11C9DD1618EE38FB9E440
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/0c238eb0-5671-3c71-9597-92d5851254f0.roa
Signing time: Thu 25 Dec 2025 02:00:31 +0000
ROA not before: Thu 25 Dec 2025 02:00:31 +0000
ROA not after: Wed 25 Mar 2026 01:00:31 +0000
asID: 11090
IP address blocks: 64.4.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4c:a1:1c:9d:d1:61:8e:e3:8f:b9:e4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Dec 25 02:00:31 2025 GMT
Not After : Mar 25 01:00:31 2026 GMT
Subject: CN=f6dee055-24d0-4104-8561-7544d6eae14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a6:12:4a:9d:3d:96:11:b4:92:d4:3b:89:c3:
ed:35:6c:95:d6:08:e3:92:3e:3d:ed:32:f7:a5:78:
e5:a6:75:27:5e:ab:cc:9c:a0:93:e9:39:58:7b:19:
76:ce:b2:3e:ce:9f:27:88:61:f8:d2:c3:7a:d2:1e:
76:bd:56:3d:c4:6c:32:d5:33:01:75:8c:2e:29:ec:
ae:32:31:61:af:cf:e1:f4:6a:7d:9f:93:6b:df:aa:
78:65:f5:c8:ac:85:85:61:37:b5:6a:81:15:a3:b6:
3d:83:f2:bc:7c:08:f8:16:1d:29:8c:01:da:00:39:
3f:ed:ed:69:f1:bf:22:76:b2:06:99:e0:5b:b9:cb:
f0:5c:4a:9b:3a:10:7c:81:bc:c0:4d:12:91:d8:4f:
67:8f:3b:94:4c:13:50:bf:ad:b4:6d:42:95:86:56:
c0:db:fc:d0:cc:05:b7:18:29:88:41:81:a6:e3:af:
46:54:a9:98:6d:1c:6f:07:35:4c:6f:a7:05:95:9c:
4d:e8:06:1a:e8:0b:5e:51:da:17:c2:37:c1:22:2c:
7e:8d:9c:00:34:00:2c:74:60:93:3b:db:e3:a0:25:
2b:96:d4:e9:37:a9:16:d6:37:be:73:10:49:df:38:
4f:42:c7:ea:7a:91:25:0e:5a:60:d3:a4:4f:dc:f1:
10:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:77:49:11:93:DF:37:66:19:FB:A7:BE:F5:76:7A:72:0F:E3:C2:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/0c238eb0-5671-3c71-9597-92d5851254f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
64.4.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:5e:fb:4c:74:39:7d:c2:dd:7c:89:f7:52:40:ee:fb:87:9e:
c7:62:c4:d8:f8:22:7e:13:23:2e:92:f0:9a:c8:d2:0e:bf:b6:
09:7c:eb:4d:0d:f5:84:24:2a:92:6e:42:cb:11:88:eb:36:45:
da:30:b7:4a:01:f0:74:f2:0a:57:74:e2:fc:64:b2:70:75:65:
91:7d:36:2a:5f:39:36:65:7d:3e:05:aa:0d:f0:5f:2e:3d:ba:
20:bb:fd:15:ec:d2:e2:2f:7c:ca:8d:f4:17:cc:22:91:40:d2:
c6:96:36:26:95:c5:81:a5:61:e0:02:5e:d1:f7:a0:a0:5e:24:
fa:19:72:77:58:f2:27:26:25:fa:3e:31:3f:5a:22:ac:bc:2a:
e8:53:ff:a2:c4:8b:e7:1a:ea:67:33:1d:c8:35:ee:89:d7:8f:
b6:c6:ba:0f:60:c4:6a:cf:b0:0d:47:06:1e:16:1d:11:8c:d4:
aa:36:a0:eb:46:7e:b5:33:a9:ff:4e:3c:da:50:22:42:bf:7e:
60:85:48:61:17:0a:55:90:76:dc:7c:13:d7:c9:6e:53:ae:d7:
d9:f1:43:69:e2:93:b8:52:68:19:b7:bb:4e:86:c9:2a:cd:ac:
a2:fe:52:4c:aa:c9:cc:13:a8:49:84:e7:06:33:17:d9:cd:f9:
8a:20:21:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExMoRyd0WGO44+55EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2
OWQxMB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk
ZjZkZWUwNTUtMjRkMC00MTA0LTg1NjEtNzU0NGQ2ZWFlMTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaYSSp09lhG0ktQ7icPtNWyV1gjjkj497TL3
pXjlpnUnXqvMnKCT6TlYexl2zrI+zp8niGH40sN60h52vVY9xGwy1TMBdYwuKeyu
MjFhr8/h9Gp9n5Nr36p4ZfXIrIWFYTe1aoEVo7Y9g/K8fAj4Fh0pjAHaADk/7e1p
8b8idrIGmeBbucvwXEqbOhB8gbzATRKR2E9njzuUTBNQv620bUKVhlbA2/zQzAW3
GCmIQYGm469GVKmYbRxvBzVMb6cFlZxN6AYa6AteUdoXwjfBIix+jZwANAAsdGCT
O9vjoCUrltTpN6kW1je+cxBJ3zhPQsfqepElDlpg06RP3PEQXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI13SRGT3zdmGfunvvV2enIP48LQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk
NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMGMyMzhlYjAtNTY3MS0z
YzcxLTk1OTctOTJkNTg1MTI1NGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw
MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh
NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0
M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQATvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALJe+0x0OX3C3XyJ91JA7vuHnsdixNj4In4TIy6S8JrI0g6/tgl8600N
9YQkKpJuQssRiOs2Rdowt0oB8HTyCld04vxksnB1ZZF9NipfOTZlfT4Fqg3wXy49
uiC7/RXs0uIvfMqN9BfMIpFA0saWNiaVxYGlYeACXtH3oKBeJPoZcndY8icmJfo+
MT9aIqy8KuhT/6LEi+ca6mczHcg17onXj7bGug9gxGrPsA1HBh4WHRGM1Ko2oOtG
frUzqf9OPNpQIkK/fmCFSGEXClWQdtx8E9fJblOu19nxQ2nik7hSaBm3u06GySrN
rKL+UkyqycwTqEmE5wYzF9nN+YogIcc=
-----END CERTIFICATE-----
Generated at Fri Jan 9 18:30:50 2026 by rpki-client