This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/d126c33e-9a10-3dd2-867e-fd2b14dabe5f.roa
File: d126c33e-9a10-3dd2-867e-fd2b14dabe5f.roa (raw, json)
Hash identifier: JEKpqE0A/ptRbKrCNlsKmrzKGjPVsO1Nky/2TYwYUw8=
Subject key identifier: 73:32:CF:7C:04:B8:49:97:7A:5A:85:6C:4A:C6:AC:0B:11:07:65:C6
Certificate issuer: /CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580
Certificate serial: 010D0C9F4328584BEC509ECE6E5D04E563E1AD00
Authority key identifier: 93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/d126c33e-9a10-3dd2-867e-fd2b14dabe5f.roa
Signing time: Thu 20 Nov 2025 14:00:39 +0000
ROA not before: Thu 20 Nov 2025 14:00:39 +0000
ROA not after: Wed 18 Feb 2026 14:00:39 +0000
asID: 395950
IP address blocks: 104.232.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ec:50:9e:ce:6e:5d:04:e5:63:e1:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580
Validity
Not Before: Nov 20 14:00:39 2025 GMT
Not After : Feb 18 14:00:39 2026 GMT
Subject: CN=bb3ec22a-2fb4-4037-98f7-71eb533416ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:81:cb:db:6b:94:49:be:42:79:de:34:4c:c4:
fc:12:02:85:d7:d7:f0:67:b3:72:5e:59:52:02:a2:
55:e1:d7:e0:e5:29:03:a0:0f:f5:96:e8:8a:ea:e6:
95:9e:af:cd:9a:f6:a3:f5:9d:5e:a2:7f:f0:75:8f:
c5:0b:51:84:01:8b:6c:cc:a7:c0:c8:20:d2:f1:ed:
8e:28:fa:2a:47:e3:8c:c0:fb:04:7d:3d:6e:19:74:
bb:e6:46:0b:de:8a:a4:0c:73:86:7b:be:b5:99:1a:
95:c6:26:e9:3e:72:6c:00:4b:43:17:ac:77:05:22:
77:5d:f7:30:fc:3b:a8:ce:bb:3a:43:3e:fc:30:7d:
e7:4f:53:69:30:30:1b:e4:04:e1:fe:7b:3b:c0:9a:
a7:e1:e3:1c:2e:c2:8f:f6:94:ee:ba:5e:65:9c:d4:
87:ba:96:8d:fa:56:33:63:0b:e2:da:e4:66:91:2f:
9f:b3:f1:d1:17:fe:b9:64:58:53:86:b6:7e:57:9d:
ca:12:be:2f:87:84:7f:22:a1:af:0a:6a:5a:a7:53:
43:cc:95:41:33:24:f5:e3:d7:27:1a:f3:f0:49:96:
7b:9e:51:da:91:2c:02:23:12:60:72:f9:ff:dd:00:
af:49:d3:ec:39:eb:a5:a7:d8:1e:60:50:04:2b:90:
1f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:32:CF:7C:04:B8:49:97:7A:5A:85:6C:4A:C6:AC:0B:11:07:65:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/d126c33e-9a10-3dd2-867e-fd2b14dabe5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl
X509v3 Authority Key Identifier:
keyid:93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer
sbgp-ipAddrBlock: critical
IPv4:
104.232.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:52:67:f0:e8:50:2e:71:b4:b1:69:24:98:bf:a9:e7:22:15:
43:33:42:00:15:29:13:1b:37:04:50:2d:c6:2c:cd:07:86:fd:
9c:51:c0:2a:3d:f1:e6:52:de:2b:03:dc:55:d3:75:2c:59:c9:
44:cb:3a:8b:03:c3:a3:de:a3:08:44:93:c9:35:45:ee:4c:3b:
6a:7b:eb:a2:e5:5f:24:ac:0f:37:4c:c0:d7:99:30:21:d6:1a:
fd:b9:f0:e8:f8:4e:54:f1:49:34:4b:78:64:79:f2:41:9b:d8:
73:4e:69:91:6f:b9:18:9e:c3:93:c3:da:a5:a3:d3:b0:fb:4f:
1c:3b:74:d9:1f:56:fe:6e:fa:5e:4b:69:dd:f4:6e:24:f3:94:
c9:ca:15:aa:c3:61:60:f0:38:56:b6:56:4b:e6:03:47:a5:0a:
68:5f:e6:d3:ad:17:f9:14:be:4c:26:99:06:5d:45:44:62:4b:
a6:0a:43:ab:cd:43:10:d6:cc:a6:b5:7a:2a:64:bf:1a:f4:d5:
22:5b:9f:47:06:2f:8c:1e:e2:15:6e:d2:d9:60:1c:44:93:3e:
40:2a:df:6f:fd:26:eb:53:a8:96:9c:68:20:91:90:43:20:d7:
16:63:24:72:81:c3:76:75:f3:1f:64:13:b1:db:b7:fd:1c:a2:
4f:de:e4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:23:41 2025 by rpki-client