This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/d50ed0af-6b2c-39b8-8ab5-7518873cf5c8.roa
File: d50ed0af-6b2c-39b8-8ab5-7518873cf5c8.roa (raw, json)
Hash identifier: lBPPIdkaUcTSlLqz+j8Uy5AiTHPLrZ50GRmFldLo91s=
Subject key identifier: 4A:61:C0:48:F4:07:66:29:36:CF:D7:05:E4:94:0E:3A:EE:7F:BD:EA
Certificate issuer: /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial: 010D0C9F4328584BEF1B2D8E453859DD91EE0FC0
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/d50ed0af-6b2c-39b8-8ab5-7518873cf5c8.roa
Signing time: Fri 21 Nov 2025 14:00:38 +0000
ROA not before: Fri 21 Nov 2025 14:00:38 +0000
ROA not after: Thu 19 Feb 2026 14:00:38 +0000
asID: 8987
IP address blocks: 198.29.20.0/22 maxlen: 24
2602:f9e7:2e::/47 maxlen: 48
2602:f9e7:38::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 06 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ef:1b:2d:8e:45:38:59:dd:91:ee:0f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Validity
Not Before: Nov 21 14:00:38 2025 GMT
Not After : Feb 19 14:00:38 2026 GMT
Subject: CN=55ea11f6-1b13-4233-a1aa-009b8447e7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cb:8a:27:88:9c:73:6a:79:bf:c1:22:e0:32:
4b:46:c3:3b:39:ba:3c:3e:43:64:d2:7e:3d:53:06:
e0:c6:6f:b8:5c:eb:10:6a:59:b4:57:33:0f:b0:7e:
94:a5:f0:39:38:32:19:d7:6f:74:6e:99:07:66:78:
26:b0:40:ab:f7:e5:d6:53:25:a8:3d:8a:54:ea:82:
db:74:a6:4e:85:cc:48:c6:92:f1:1a:c9:b9:54:0c:
09:b0:b5:6e:03:23:10:3e:e1:0e:37:61:f7:3e:9c:
99:db:90:53:f7:22:56:84:80:81:a6:57:97:79:c7:
97:60:c0:4a:aa:43:9d:e5:cb:52:26:15:2d:27:45:
95:be:b5:3c:68:4d:5a:99:49:51:cc:28:64:65:95:
b3:e7:74:99:1a:11:94:f4:e4:89:5f:3f:2c:ac:e3:
d2:b6:f8:7a:ac:39:58:76:90:6a:d4:d8:5b:12:4b:
24:a7:9b:d7:df:dd:5f:39:96:6a:9f:a5:50:73:46:
fe:1c:40:fd:cf:2f:62:ef:70:68:08:84:30:b8:c1:
ee:b3:79:13:d8:c0:a0:5f:b3:5b:da:93:df:1c:15:
d7:7c:a4:20:f4:0e:67:54:4f:75:29:6d:ab:85:00:
99:a5:b0:af:5d:05:c1:ea:e2:70:72:fc:93:dd:bb:
b6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:61:C0:48:F4:07:66:29:36:CF:D7:05:E4:94:0E:3A:EE:7F:BD:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/d50ed0af-6b2c-39b8-8ab5-7518873cf5c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
X509v3 Authority Key Identifier:
keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.29.20.0/22
IPv6:
2602:f9e7:2e::/47
2602:f9e7:38::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:dc:62:68:8d:e2:b2:9d:bc:db:89:37:f6:1f:39:15:d3:f8:
ee:3b:fa:1b:7b:9a:90:b4:f3:08:0a:85:55:c2:9c:68:55:da:
02:21:53:26:f7:dd:6b:77:72:b8:d2:3f:6a:f9:9c:3e:3d:95:
73:5e:fa:7b:25:bb:5a:f5:84:b2:cf:7f:e7:55:79:bc:3d:df:
20:4e:3a:8c:d2:41:f5:47:e5:3c:c0:46:3b:b5:c8:bb:1b:98:
c2:9a:8d:1d:55:b9:73:c2:0f:52:dc:15:94:33:de:2f:77:38:
f3:4f:cb:4b:77:7d:3c:57:31:73:13:4f:e1:7d:a5:52:27:aa:
30:ac:a9:9f:31:ba:c3:75:12:f4:be:36:e3:27:15:4f:40:09:
02:1f:72:aa:53:86:a9:c0:93:81:13:2f:6c:2c:b9:c1:6c:1b:
19:4b:1f:f7:33:e4:58:80:3e:df:bf:94:1d:78:a2:19:cc:00:
9a:c3:46:ba:8f:a2:de:04:76:98:80:41:5f:f2:e5:2f:f8:c5:
83:62:4b:66:d9:13:ca:f1:e1:e6:f7:b9:b0:d3:70:54:71:03:
d4:cf:da:61:98:2f:62:3b:a7:94:95:6b:d9:6b:e9:b9:d2:c5:
d7:ab:e6:95:95:79:3d:d5:f4:99:4c:b7:47:43:c8:a4:dd:69:
33:e3:c9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 07:30:14 2025 by rpki-client