This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d33ddacc-232f-3cc5-a6c6-833156127de4.roa
File: d33ddacc-232f-3cc5-a6c6-833156127de4.roa (raw, json)
Hash identifier: d59l5Q3kUQmd7IqQs5H+QM22tXUF/js5AOs8ZsFTQgc=
Subject key identifier: 38:BF:60:36:87:61:21:46:2B:6C:DD:B1:89:97:7A:7B:CF:BE:76:7C
Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial: 010D0C9F4328584BEDB5D0B0468B2E00516003E0
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d33ddacc-232f-3cc5-a6c6-833156127de4.roa
Signing time: Fri 21 Nov 2025 02:00:30 +0000
ROA not before: Fri 21 Nov 2025 02:00:30 +0000
ROA not after: Thu 19 Feb 2026 02:00:30 +0000
asID: 53927
IP address blocks: 139.131.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ed:b5:d0:b0:46:8b:2e:00:51:60:03:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Validity
Not Before: Nov 21 02:00:30 2025 GMT
Not After : Feb 19 02:00:30 2026 GMT
Subject: CN=b3ff867b-c9c5-4b78-bdb7-70c02afc82a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b5:e0:74:57:18:c6:26:10:3f:e9:e0:31:d7:
14:7a:02:62:a8:be:0c:ed:16:06:7d:4f:c3:d3:12:
6c:f4:d2:df:6b:99:47:cf:a5:ec:fb:fe:4f:48:d9:
52:4e:ef:e6:ab:6d:41:b3:d7:48:78:ec:2e:5f:e7:
76:8e:7f:3c:24:3d:6e:a2:11:b1:58:5b:64:57:b6:
80:76:13:ce:85:cc:8a:20:ae:77:3a:a7:9d:84:7b:
8b:5d:f9:f0:14:b9:72:fe:18:e4:5a:1e:3f:b3:50:
ce:cc:12:6b:d2:d6:1d:9c:9d:1c:b3:eb:16:1d:47:
95:b8:29:b6:3d:3f:50:f3:ac:fb:7d:d7:92:09:c0:
b9:04:52:16:51:29:8e:41:b3:84:9d:22:96:94:ea:
9e:3a:c0:76:ab:18:68:06:3c:2b:17:4f:d3:0e:9d:
67:89:fe:c6:e1:b7:c9:cc:65:0b:bc:b8:46:2d:2f:
16:0c:bf:37:d3:4b:0b:84:a3:bb:1f:c0:d3:eb:e4:
03:14:77:0a:51:f6:a1:83:dc:bb:f6:97:07:2d:51:
48:62:9d:3c:63:49:de:43:ac:8a:70:1e:ac:6f:9a:
5f:27:df:32:61:77:bd:04:88:69:46:08:e1:cd:db:
90:49:f2:df:a1:eb:d8:b5:6e:ea:38:3f:3e:0b:50:
ad:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BF:60:36:87:61:21:46:2B:6C:DD:B1:89:97:7A:7B:CF:BE:76:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d33ddacc-232f-3cc5-a6c6-833156127de4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
X509v3 Authority Key Identifier:
keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
sbgp-ipAddrBlock: critical
IPv4:
139.131.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:c3:7a:5a:ed:07:4f:5c:a9:7a:a4:ce:a2:56:e0:7c:55:c3:
2a:15:eb:da:04:77:d8:0b:96:78:fa:af:52:fe:17:a8:f2:eb:
d0:6f:fe:41:6b:10:7d:71:f5:b3:ac:82:c3:c1:6a:02:25:1b:
b0:cf:f7:bf:1f:c2:d5:f9:b7:22:66:28:f5:3c:3e:5c:7e:7e:
14:08:cc:15:42:b2:6b:7e:fa:5e:1a:e1:21:6a:0b:fc:c1:80:
cb:3c:12:dd:74:92:34:48:0c:e7:07:30:e7:40:36:c5:3e:f2:
fc:f1:1e:85:36:ee:7e:c7:93:12:29:04:d2:62:5c:75:6c:9d:
7f:16:0c:a3:ff:34:df:b2:da:a6:65:ff:9a:3d:44:b4:14:f4:
84:a5:64:49:c7:44:ed:a3:a6:dd:2b:c6:f7:6f:24:31:90:2f:
20:2e:13:8a:32:a1:25:a9:d4:17:6e:4e:4f:10:53:eb:35:49:
54:83:dd:ff:51:4a:c2:96:f5:bb:dd:57:38:34:d9:e9:ec:30:
19:de:93:8a:4e:7f:63:c6:fb:b8:c4:41:02:82:c5:3b:68:9f:
26:60:11:3e:bf:ee:fc:f2:a6:84:36:20:30:9b:1e:f1:36:8d:
6a:d2:ee:49:b2:b6:93:29:3a:3b:cb:04:0b:72:ae:4f:30:9a:
97:59:83:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 24 22:39:16 2025 by rpki-client