This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/2db12b78-bb60-3bee-8ea6-72b50ff5c07e.roa
File: 2db12b78-bb60-3bee-8ea6-72b50ff5c07e.roa (raw, json)
Hash identifier: uQ3Wbdwf+DPQZeVH3n111fVu9nVd+OghJGPh26lyr4g=
Subject key identifier: FC:32:F6:5C:BB:8D:3A:3F:EF:AE:A7:E4:EB:9E:CE:B5:F8:DE:FD:2D
Certificate issuer: /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
Certificate serial: 010D0C9F4328584C29BBA55A811A5106EFDFFC40
Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/2db12b78-bb60-3bee-8ea6-72b50ff5c07e.roa
Signing time: Fri 12 Dec 2025 14:00:38 +0000
ROA not before: Fri 12 Dec 2025 14:00:38 +0000
ROA not after: Thu 12 Mar 2026 13:00:38 +0000
asID: 395567
IP address blocks: 64.225.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:29:bb:a5:5a:81:1a:51:06:ef:df:fc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
Validity
Not Before: Dec 12 14:00:38 2025 GMT
Not After : Mar 12 13:00:38 2026 GMT
Subject: CN=bfdc96fe-354c-4ba6-b6fa-7cfd83740c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cd:14:ab:58:33:18:c2:51:f6:f8:e9:ef:90:
b7:21:f4:ba:c5:29:ad:df:27:a5:07:ff:8d:d3:74:
5e:ed:66:6b:c9:ca:72:08:84:f1:a9:48:be:97:67:
f3:4c:cc:b3:e2:d5:e7:d1:12:63:ed:e6:45:59:17:
d7:93:41:a9:ba:74:c5:43:f8:0d:e7:4d:1a:b1:32:
96:f8:e7:47:c7:a3:81:19:fb:fa:4f:09:2b:8a:04:
18:c4:58:00:7c:be:87:d4:26:f3:f7:f3:75:ae:0e:
e7:79:2d:11:40:88:13:94:3e:59:56:7c:45:14:7f:
8c:43:94:1e:f1:21:df:11:a1:a2:62:53:9a:58:31:
79:55:2e:14:05:ec:38:b3:4e:9a:4e:84:10:ba:ad:
67:5e:ef:f2:b7:ba:bd:61:93:c2:65:57:d9:04:08:
27:66:37:92:5d:0d:00:9e:b2:88:02:b4:d6:b3:d8:
fb:e8:32:99:4d:4b:14:14:ea:94:b0:11:c0:b7:60:
39:6c:43:0a:e3:b9:7d:4f:f2:e2:02:5f:b5:63:27:
23:75:ec:14:e2:25:3d:66:f7:05:41:22:2c:e0:61:
d6:ef:31:1c:cd:37:2e:40:6a:6a:86:36:53:7b:ec:
15:8b:4b:b8:6d:0b:1c:aa:02:4e:2a:ad:c9:41:2a:
fd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:32:F6:5C:BB:8D:3A:3F:EF:AE:A7:E4:EB:9E:CE:B5:F8:DE:FD:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/2db12b78-bb60-3bee-8ea6-72b50ff5c07e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl
X509v3 Authority Key Identifier:
keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.225.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:78:4f:06:9b:46:a2:df:a2:1c:25:94:c8:f3:f0:93:e1:29:
82:ea:2d:1e:c8:19:95:00:d8:4a:5f:c1:bd:86:bb:06:15:08:
17:37:62:55:bd:b5:42:49:6b:25:c3:ba:ac:41:d9:93:4a:06:
c0:63:d2:60:9c:76:c7:1b:56:18:06:fb:6e:fb:8b:65:62:3e:
f8:70:58:d1:7e:ef:33:3a:26:03:b8:8f:82:27:a6:2c:38:45:
07:e0:10:41:4a:c5:87:1e:38:83:67:af:b1:31:7b:eb:29:eb:
23:f0:51:5e:14:85:07:eb:86:0d:15:25:6c:a3:b6:dc:6d:c7:
e5:4b:3c:12:86:ee:db:30:64:78:ad:b3:9d:da:d0:83:4a:22:
e7:aa:1f:c5:64:e7:be:7d:ec:4b:b3:96:3e:b1:36:e7:1d:f8:
17:e9:fd:f6:7d:41:5a:86:f9:1e:a2:d7:e5:cf:a1:a0:81:07:
b4:d2:ea:c4:07:fd:a8:9c:96:26:76:5c:e5:12:5e:e4:a4:ef:
4d:46:80:77:ae:b6:d0:06:4f:49:38:89:da:e1:9b:e3:2c:95:
2f:83:65:b9:09:2a:e8:ca:7b:d9:02:e3:ba:f0:a9:c3:db:37:
fc:10:e9:87:47:f8:b7:de:c7:df:9d:8c:5b:d5:7b:6e:e2:c2:
0a:c1:95:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:29:52 2025 by rpki-client