This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/08780fc2-df88-3de5-b147-ed57d81f5382.roa
File: 08780fc2-df88-3de5-b147-ed57d81f5382.roa (raw, json)
Hash identifier: EzB6eoirkKH3GSqBdNuK7A+84rj3t8d5g9lvHLXilsU=
Subject key identifier: 4C:9B:57:5E:95:87:C8:63:6D:AC:D9:A4:62:5D:DB:CF:4C:3C:80:8E
Certificate issuer: /CN=1c5b9809-1c38-4760-b9bf-096829114292
Certificate serial: 010D0C9F4328584C5501217875BF3763F98B1A40
Authority key identifier: D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/08780fc2-df88-3de5-b147-ed57d81f5382.roa
Signing time: Sun 28 Dec 2025 02:00:30 +0000
ROA not before: Sun 28 Dec 2025 02:00:30 +0000
ROA not after: Sat 28 Mar 2026 01:00:30 +0000
asID: 32524
IP address blocks: 66.244.128.0/20 maxlen: 24
100.42.192.0/23 maxlen: 24
100.42.194.0/24 maxlen: 24
100.42.196.0/22 maxlen: 24
100.42.200.0/21 maxlen: 24
162.208.112.0/22 maxlen: 24
192.30.176.0/21 maxlen: 24
199.38.200.0/22 maxlen: 24
199.87.184.0/21 maxlen: 24
199.255.24.0/22 maxlen: 24
208.82.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Jan 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:55:01:21:78:75:bf:37:63:f9:8b:1a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5b9809-1c38-4760-b9bf-096829114292
Validity
Not Before: Dec 28 02:00:30 2025 GMT
Not After : Mar 28 01:00:30 2026 GMT
Subject: CN=33086b53-d229-4e2f-822b-e0896899018d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c3:c3:7e:ec:d5:53:f0:8e:6c:99:3c:f6:8c:
3a:be:af:e0:b6:b2:c4:2d:df:70:ac:37:80:8a:37:
9e:35:be:79:b9:96:c1:c9:a9:a0:06:3a:2b:49:8c:
72:3e:00:d7:43:96:10:31:a3:33:6c:24:ca:69:a0:
1f:b0:1c:f4:21:c1:07:0b:ff:c5:86:e6:03:0e:78:
8e:47:77:7c:1a:62:45:d7:1f:1f:d9:cf:64:4a:ca:
e1:e4:a1:2c:e6:5f:f5:b0:99:07:c4:9a:c6:2e:34:
1a:c4:dc:3d:20:2a:c1:d7:ac:87:72:e8:bc:6d:ac:
9b:76:21:e4:14:05:62:ef:18:d3:a4:81:be:d1:3a:
5f:9d:6d:41:cf:b7:d0:01:94:96:a4:c3:dd:45:bc:
55:c9:02:da:d8:2d:d0:b1:89:4c:45:42:55:12:c2:
7b:6a:85:6f:3a:f3:eb:3a:a2:72:b9:12:88:fd:34:
ff:10:6f:46:5b:12:e6:79:8e:90:87:e0:b7:88:04:
a4:5b:e3:c2:9b:74:2b:0b:fb:5f:bc:01:f4:fc:f5:
e2:b6:e8:81:64:be:3d:de:61:53:cb:f3:10:88:8e:
ca:b4:ba:a3:de:f4:f1:4f:ba:a5:99:3a:26:c1:41:
81:86:ce:1a:9b:a7:d9:f7:30:5d:d6:e3:de:1a:76:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9B:57:5E:95:87:C8:63:6D:AC:D9:A4:62:5D:DB:CF:4C:3C:80:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/08780fc2-df88-3de5-b147-ed57d81f5382.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.crl
X509v3 Authority Key Identifier:
keyid:D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer
sbgp-ipAddrBlock: critical
IPv4:
66.244.128.0/20
100.42.192.0-100.42.194.255
100.42.196.0-100.42.207.255
162.208.112.0/22
192.30.176.0/21
199.38.200.0/22
199.87.184.0/21
199.255.24.0/22
208.82.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:b3:bc:9f:82:3a:0a:ba:ad:9e:c9:5b:9b:f3:c9:ea:91:22:
9b:b7:3e:8c:ec:cf:41:50:ea:65:e2:83:34:2a:1d:fc:a1:99:
9f:00:f8:7f:c1:75:d7:4f:a2:33:d2:12:8c:49:59:e6:61:94:
5f:71:dd:7f:5e:d8:61:ae:ad:93:27:54:0e:5a:38:b9:39:01:
bd:3a:82:48:0e:f7:e8:73:ac:f4:4d:88:95:8d:73:80:42:39:
b9:32:ab:f6:da:bb:d9:46:6f:3c:c6:26:1e:79:81:5e:47:61:
a0:97:9a:60:cf:ec:42:b6:c3:6e:d7:7a:d5:82:b4:c6:12:f4:
23:a8:34:a9:c0:7d:25:d6:56:46:32:7b:4b:3b:81:60:d2:b6:
e3:fd:cb:1e:71:0d:3a:31:59:c5:66:b1:91:81:43:aa:53:a5:
c6:78:ca:55:e7:55:62:50:36:a8:c0:40:c8:49:dc:40:5e:94:
ed:85:dd:f1:89:4c:a9:1a:a0:6d:0a:33:b8:f6:02:a3:29:0a:
03:fb:01:6a:82:28:25:c7:d3:7d:43:d4:86:c8:49:2f:f5:e4:
91:7d:0e:b6:5c:c5:91:4f:69:05:47:87:26:b8:6f:0e:15:ea:
d2:15:86:6d:84:2c:1b:8c:75:e6:f9:fa:53:a2:7d:7f:9b:d6:
a3:01:6d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:03:20 2026 by rpki-client