This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/25e18e3b-9c79-3b22-981d-d148fadacd2f.roa
File: 25e18e3b-9c79-3b22-981d-d148fadacd2f.roa (raw, json)
Hash identifier: FfcGB0S/OGomcxjyuZLfq7iDIMs/v+bkioO0c22NcF0=
Subject key identifier: FA:4D:02:88:CD:5A:BB:F4:0D:5A:9D:D6:AC:DF:5D:FA:46:4A:CA:10
Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial: 010D0C9F4328584C62F67F498109C3392508DDA8
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/25e18e3b-9c79-3b22-981d-d148fadacd2f.roa
Signing time: Fri 02 Jan 2026 02:00:30 +0000
ROA not before: Fri 02 Jan 2026 02:00:30 +0000
ROA not after: Thu 02 Apr 2026 01:00:30 +0000
asID: 21433
IP address blocks: 170.248.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Jan 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:62:f6:7f:49:81:09:c3:39:25:08:dd:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Validity
Not Before: Jan 2 02:00:30 2026 GMT
Not After : Apr 2 01:00:30 2026 GMT
Subject: CN=5a46b0a6-31c3-4313-a976-1e1eb25b6329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b4:36:c3:5f:99:cc:10:82:f4:89:4f:47:19:
81:21:66:97:1f:9e:73:5e:05:75:83:b2:d3:73:56:
09:f9:4e:d4:b7:ac:b5:6c:d2:06:44:fc:8b:07:6b:
cc:1b:36:0a:90:be:4b:1d:1b:f7:8e:f3:45:3a:24:
c7:5a:ac:be:d1:e3:f7:7d:77:ee:20:9a:17:29:59:
a2:7d:38:02:f2:1e:d1:f5:f7:7d:a5:ec:10:75:60:
66:53:51:fc:3f:17:1f:f0:12:30:6a:80:fd:8f:01:
32:7f:c7:c0:70:25:6f:16:f6:d0:3c:c3:6e:dc:93:
4d:ab:0d:16:4d:f5:58:c3:87:82:81:21:a5:36:e6:
28:6e:c1:a2:01:67:63:3e:5e:1a:be:47:c4:a7:d2:
18:aa:d7:9f:cd:e8:d9:9e:1a:21:6f:71:70:54:07:
26:28:9a:bf:c4:6d:45:9e:ae:4e:6f:8d:28:31:7a:
ef:55:e3:38:2e:a4:9f:44:c7:23:80:9f:2b:d6:77:
21:4f:f1:35:b5:25:25:d8:a6:3f:7f:10:de:ef:0b:
ea:aa:42:df:96:96:8b:88:7c:43:52:81:19:a6:e4:
b4:89:24:00:1e:b5:ed:30:9f:a0:52:5b:a0:90:49:
77:b1:d8:5e:50:83:59:e6:c3:ae:63:f8:49:49:f1:
16:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4D:02:88:CD:5A:BB:F4:0D:5A:9D:D6:AC:DF:5D:FA:46:4A:CA:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/25e18e3b-9c79-3b22-981d-d148fadacd2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
X509v3 Authority Key Identifier:
keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
sbgp-ipAddrBlock: critical
IPv4:
170.248.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:bf:df:1c:4f:37:ea:48:64:7a:5a:95:d1:64:c7:94:a6:4b:
16:c9:9d:d1:fe:e6:e1:86:7f:7f:35:51:4e:a9:c8:95:8a:55:
d0:7a:e4:c2:1d:a3:d5:10:c5:e3:26:56:7b:41:6d:23:a3:8b:
a0:06:02:53:d9:b4:43:1a:75:9d:d8:bc:3a:72:91:63:97:30:
2d:67:f2:d4:a5:3a:69:b7:d0:8b:75:e4:8f:5b:7b:40:32:68:
86:db:15:32:db:53:a4:b1:30:5d:11:60:81:67:a0:89:78:e8:
47:91:26:1b:c5:d7:da:48:34:b3:db:c7:0a:30:43:7f:a7:e3:
92:79:6c:6b:e3:63:3d:61:fd:3d:ea:47:46:90:2f:69:25:b2:
22:b2:54:4b:70:04:ee:fd:99:37:da:a7:7f:8e:26:3a:7f:56:
22:25:10:07:27:7e:6b:87:c8:e0:84:ac:f9:25:6b:f3:4c:bd:
c3:d0:d8:1c:c4:30:02:47:b1:24:38:70:c3:9f:c5:90:6a:bc:
f4:08:22:0f:79:87:45:68:9e:a6:2c:9c:62:98:96:7a:5e:ff:
e7:a9:ac:10:0b:32:1f:3e:66:f6:38:e4:f2:d9:07:2b:e8:24:
b1:21:da:7d:bb:c2:dc:3a:cb:d9:ca:b9:68:b0:2c:55:58:74:
30:40:7b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 08:51:38 2026 by rpki-client