This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/921235d4-dca8-3fbb-acb6-08ba21924e2c.roa
File: 921235d4-dca8-3fbb-acb6-08ba21924e2c.roa (raw, json)
Hash identifier: l6kQDmM9x6y2ppHKa/WLjuD+QKfpbxaamUwA1yjyPiQ=
Subject key identifier: 39:CA:60:13:58:A1:0D:05:3B:E1:90:87:14:AC:13:4B:A6:3B:42:22
Certificate issuer: /CN=ddca76af-4c49-4bd6-b142-1774c42d55b2
Certificate serial: 010D0C9F4328584BEAEB5D79EECFA4BA0F8C3D40
Authority key identifier: C3:69:1A:4B:EC:52:26:1B:23:7C:5A:E5:B5:95:C9:D0:24:3E:D6:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/921235d4-dca8-3fbb-acb6-08ba21924e2c.roa
Signing time: Thu 20 Nov 2025 02:00:30 +0000
ROA not before: Thu 20 Nov 2025 02:00:30 +0000
ROA not after: Wed 18 Feb 2026 02:00:30 +0000
asID: 398019
IP address blocks: 162.216.240.0/24 maxlen: 24
162.216.241.0/24 maxlen: 24
162.216.242.0/24 maxlen: 24
162.216.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/ddca76af-4c49-4bd6-b142-1774c42d55b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/ddca76af-4c49-4bd6-b142-1774c42d55b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 25 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ea:eb:5d:79:ee:cf:a4:ba:0f:8c:3d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddca76af-4c49-4bd6-b142-1774c42d55b2
Validity
Not Before: Nov 20 02:00:30 2025 GMT
Not After : Feb 18 02:00:30 2026 GMT
Subject: CN=38cfd16c-44cc-47c8-9c67-18d0fb4c5a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:97:0f:a0:bd:bd:6e:31:a2:8b:ad:57:57:71:
cb:c5:b8:e7:db:ce:0d:06:85:21:21:c2:6e:85:22:
d5:da:51:bc:8a:e7:6a:9b:d2:6c:ef:3d:a2:13:0f:
0d:12:84:cf:2b:1c:dd:b7:5c:35:ef:3c:d5:86:3c:
f2:04:a1:cd:85:ca:43:d2:21:6c:71:b5:a8:6a:a0:
d4:6d:65:94:a9:d9:9f:6d:68:a4:88:dd:44:81:1c:
de:43:84:8d:f5:2d:4c:38:48:11:1d:15:0b:bf:c4:
0f:80:3d:e8:78:30:73:e6:a5:ff:28:fc:71:fd:32:
dc:5b:a5:f6:9b:01:b7:65:a7:ff:37:bd:38:b8:f6:
4f:60:ed:4a:21:17:f1:1a:65:0a:0e:37:ee:f3:07:
f3:2e:d5:3c:de:5f:08:40:bf:01:70:ca:8a:c6:35:
aa:ad:24:19:e9:30:f0:2c:b1:7a:ee:b9:16:70:6a:
59:54:5a:9d:94:99:c5:48:71:71:7a:b7:30:95:80:
14:88:53:06:0f:00:dd:49:a8:4b:64:a3:f6:5b:9b:
cb:ca:80:95:92:bf:f2:92:f7:9b:9e:db:36:d3:d7:
f5:42:13:aa:c7:c8:3b:0b:dd:6d:b6:44:aa:0f:d4:
34:29:3b:f0:ea:e4:cf:68:00:ca:a4:a1:de:85:ac:
af:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CA:60:13:58:A1:0D:05:3B:E1:90:87:14:AC:13:4B:A6:3B:42:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/921235d4-dca8-3fbb-acb6-08ba21924e2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/ddca76af-4c49-4bd6-b142-1774c42d55b2.crl
X509v3 Authority Key Identifier:
keyid:C3:69:1A:4B:EC:52:26:1B:23:7C:5A:E5:B5:95:C9:D0:24:3E:D6:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.216.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:1d:aa:02:f6:61:00:92:d0:4e:bc:85:ad:d6:ef:95:4a:89:
88:37:b2:10:44:8f:08:1a:6b:6a:da:75:db:8c:68:1a:96:29:
09:63:1a:5d:7f:fc:72:a0:6b:53:f9:d6:73:e3:01:ca:88:bd:
a1:71:96:22:69:08:8b:af:1a:74:93:bc:96:e4:31:e3:d6:32:
e0:e4:79:52:40:6a:27:f0:67:9e:e1:09:3c:57:3b:7f:8d:97:
46:77:03:24:d9:15:02:ad:47:f6:70:f0:b9:40:43:b9:d2:6d:
30:9b:8c:4b:fd:0f:3d:22:89:b7:e0:32:d3:85:ab:c6:3d:f2:
75:43:0f:5e:ff:b6:2d:64:d5:96:0e:e8:d9:7d:8d:67:82:54:
08:e6:a9:63:bd:73:c1:b4:a6:b8:b6:9a:d4:b7:96:c1:5d:39:
2e:fb:fe:d4:97:d1:b8:7a:46:a8:2a:cf:9d:9d:de:59:68:1e:
91:9a:84:a4:0c:9e:31:6e:c8:21:e5:4d:c7:2f:62:f8:d5:51:
b0:12:be:a0:d6:3a:6d:e6:2f:34:7a:66:e3:32:96:4a:44:21:
b9:74:77:f2:b7:09:62:b4:28:e9:cf:0e:ad:f5:7e:ea:8b:4a:
cf:8e:dd:b7:d0:36:eb:2c:32:c0:50:66:8f:55:89:ee:d8:9e:
1f:5e:84:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvq61157s+kug+MPUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGRjYTc2YWYtNGM0OS00YmQ2LWIxNDItMTc3NGM0MmQ1
NWIyMB4XDTI1MTEyMDAyMDAzMFoXDTI2MDIxODAyMDAzMFowLzEtMCsGA1UEAxMk
MzhjZmQxNmMtNDRjYy00N2M4LTljNjctMThkMGZiNGM1YTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZcPoL29bjGii61XV3HLxbjn284NBoUhIcJu
hSLV2lG8iudqm9Js7z2iEw8NEoTPKxzdt1w17zzVhjzyBKHNhcpD0iFscbWoaqDU
bWWUqdmfbWikiN1EgRzeQ4SN9S1MOEgRHRULv8QPgD3oeDBz5qX/KPxx/TLcW6X2
mwG3Zaf/N704uPZPYO1KIRfxGmUKDjfu8wfzLtU83l8IQL8BcMqKxjWqrSQZ6TDw
LLF67rkWcGpZVFqdlJnFSHFxercwlYAUiFMGDwDdSahLZKP2W5vLyoCVkr/ykveb
nts209f1QhOqx8g7C91ttkSqD9Q0KTvw6uTPaADKpKHehayvgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDnKYBNYoQ0FO+GQhxSsE0umO0IiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kZGNh
NzZhZi00YzQ5LTRiZDYtYjE0Mi0xNzc0YzQyZDU1YjIvOTIxMjM1ZDQtZGNhOC0z
ZmJiLWFjYjYtMDhiYTIxOTI0ZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGRjYTc2YWYtNGM0OS00YmQ2LWIx
NDItMTc3NGM0MmQ1NWIyL2RkY2E3NmFmLTRjNDktNGJkNi1iMTQyLTE3NzRjNDJk
NTViMi5jcmwwHwYDVR0jBBgwFoAUw2kaS+xSJhsjfFrltZXJ0CQ+1uIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kZGNhNzZhZi00YzQ5LTRiZDYtYjE0Mi0xNzc0
YzQyZDU1YjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotjwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAIdqgL2YQCS0E68ha3W75VKiYg3shBEjwgaa2radduMaBqWKQljGl1/
/HKga1P51nPjAcqIvaFxliJpCIuvGnSTvJbkMePWMuDkeVJAaifwZ57hCTxXO3+N
l0Z3AyTZFQKtR/Zw8LlAQ7nSbTCbjEv9Dz0iibfgMtOFq8Y98nVDD17/ti1k1ZYO
6Nl9jWeCVAjmqWO9c8G0pri2mtS3lsFdOS77/tSX0bh6Rqgqz52d3lloHpGahKQM
njFuyCHlTccvYvjVUbASvqDWOm3mLzR6ZuMylkpEIbl0d/K3CWK0KOnPDq31fuqL
Ss+O3bfQNussMsBQZo9Vie7Ynh9ehKE=
-----END CERTIFICATE-----
Generated at Sun Nov 23 18:54:22 2025 by rpki-client