This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/03d609bb-e0d2-3ffa-8996-b2eac543f536.roa
File: 03d609bb-e0d2-3ffa-8996-b2eac543f536.roa (raw, json)
Hash identifier: PF87Oac/3FSACiiEQ0bmtJ5bOWgWLtkLtoq8E9mroaA=
Subject key identifier: 3E:D7:EA:7B:CC:3C:B0:87:B7:D1:2F:C6:2E:69:1F:CC:AF:EF:CC:07
Certificate issuer: /CN=65df72a5-f0da-4c64-953a-15a62d5ca3b0
Certificate serial: 010D0C9F4328584C470BACFBA85650A24D990F60
Authority key identifier: C3:F7:ED:6B:01:E3:63:27:BC:9B:BA:09:FA:0B:89:B4:83:CF:97:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/03d609bb-e0d2-3ffa-8996-b2eac543f536.roa
Signing time: Tue 23 Dec 2025 02:00:31 +0000
ROA not before: Tue 23 Dec 2025 02:00:31 +0000
ROA not after: Mon 23 Mar 2026 01:00:31 +0000
asID: 30417
IP address blocks: 172.81.4.0/22 maxlen: 24
192.64.196.0/23 maxlen: 24
199.85.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/65df72a5-f0da-4c64-953a-15a62d5ca3b0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/65df72a5-f0da-4c64-953a-15a62d5ca3b0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Jan 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:47:0b:ac:fb:a8:56:50:a2:4d:99:0f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65df72a5-f0da-4c64-953a-15a62d5ca3b0
Validity
Not Before: Dec 23 02:00:31 2025 GMT
Not After : Mar 23 01:00:31 2026 GMT
Subject: CN=210bb739-5011-4463-bc12-27f036608f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d8:e7:97:fe:da:9d:fb:09:c1:3a:6d:65:6e:
9c:f0:ff:f1:e1:fb:c4:de:98:51:fa:43:ac:fd:b0:
2e:ee:3f:49:cd:7e:37:6d:29:d7:6e:10:e2:56:ac:
27:1e:00:e4:08:05:d5:1b:d1:a4:25:3c:b2:2a:ca:
5d:a8:d9:a1:3b:ad:4c:aa:2c:52:85:26:44:0a:b9:
74:12:d0:bb:d9:f6:0a:2e:4c:60:96:9c:18:63:cb:
62:4a:29:7f:eb:81:04:d7:11:dd:7f:80:e3:1a:e2:
c4:ae:8c:31:8b:11:c8:7d:9b:62:80:42:42:aa:e2:
e4:eb:d6:a4:2b:3f:6c:18:0b:cb:77:2d:7b:9f:f6:
38:bc:e9:0c:80:74:2a:c0:ab:ac:7f:59:b3:ae:9b:
ec:bb:7b:4a:96:ac:e7:06:9e:72:70:47:54:58:96:
08:45:1a:2d:c2:b7:9f:7f:61:fd:9c:3f:e0:c1:36:
33:0a:97:59:a2:4b:b5:d9:2e:f2:bd:c9:23:6d:ea:
cd:04:54:40:4f:d3:c9:e5:7c:64:46:6b:31:cd:70:
67:af:4e:14:cf:c9:fc:87:60:92:30:52:92:a8:2f:
91:c0:ba:d4:86:f8:13:5a:36:18:d8:43:1a:59:2a:
c9:6a:5d:3d:19:2b:f1:c0:6b:1e:65:be:6d:22:ce:
09:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D7:EA:7B:CC:3C:B0:87:B7:D1:2F:C6:2E:69:1F:CC:AF:EF:CC:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/03d609bb-e0d2-3ffa-8996-b2eac543f536.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/65df72a5-f0da-4c64-953a-15a62d5ca3b0.crl
X509v3 Authority Key Identifier:
keyid:C3:F7:ED:6B:01:E3:63:27:BC:9B:BA:09:FA:0B:89:B4:83:CF:97:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0.cer
sbgp-ipAddrBlock: critical
IPv4:
172.81.4.0/22
192.64.196.0/23
199.85.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:be:4e:a9:1f:8a:fa:56:83:59:b1:66:7e:7b:0c:97:9f:0c:
b2:a3:fd:16:5c:f1:4e:b8:a5:c2:2c:60:5a:c2:29:5d:ab:ad:
63:35:2b:a3:4b:a3:a8:c7:bf:05:e0:49:85:0b:72:b4:56:cb:
20:51:a1:38:87:21:d1:03:75:cb:7d:72:67:79:56:fd:d7:18:
66:df:fa:18:f5:95:18:5c:27:5a:56:27:d7:5a:a0:45:51:0f:
c3:88:8d:e1:d6:54:85:1d:c7:6e:22:86:70:3d:25:72:0a:dc:
38:da:58:6c:0a:3c:9c:71:c8:96:de:f0:cc:b2:3a:85:7d:6e:
5a:2c:9d:22:cd:bf:89:81:7a:55:bd:11:50:b1:18:2e:7f:3d:
7a:ad:75:b1:c6:f1:f6:5a:ba:06:67:17:8a:1e:f6:6b:9e:88:
c4:4b:24:67:94:32:29:b1:a0:d8:b1:bd:24:e1:17:ba:25:8f:
fd:2c:05:ca:aa:b5:6c:19:a2:6d:dc:90:3d:ca:21:d7:b2:13:
ab:bd:d2:0b:23:9f:5b:d5:5f:8c:d8:35:f9:0d:ff:2a:61:72:
74:04:ca:8d:c1:ae:42:68:36:6c:5a:a1:cc:6e:01:0e:ef:0a:
db:2f:53:da:8c:c0:35:8b:f7:cf:98:e4:7f:9d:08:de:4d:df:
83:8f:42:da
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWExHC6z7qFZQok2ZD2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVkZjcyYTUtZjBkYS00YzY0LTk1M2EtMTVhNjJkNWNh
M2IwMB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk
MjEwYmI3MzktNTAxMS00NDYzLWJjMTItMjdmMDM2NjA4ZjYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNjnl/7anfsJwTptZW6c8P/x4fvE3phR+kOs
/bAu7j9JzX43bSnXbhDiVqwnHgDkCAXVG9GkJTyyKspdqNmhO61MqixShSZECrl0
EtC72fYKLkxglpwYY8tiSil/64EE1xHdf4DjGuLErowxixHIfZtigEJCquLk69ak
Kz9sGAvLdy17n/Y4vOkMgHQqwKusf1mzrpvsu3tKlqznBp5ycEdUWJYIRRotwref
f2H9nD/gwTYzCpdZoku12S7yvckjberNBFRAT9PJ5XxkRmsxzXBnr04Uz8n8h2CS
MFKSqC+RwLrUhvgTWjYY2EMaWSrJal09GSvxwGseZb5tIs4JnQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFD7X6nvMPLCHt9Evxi5pH8yv78wHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82NWRm
NzJhNS1mMGRhLTRjNjQtOTUzYS0xNWE2MmQ1Y2EzYjAvMDNkNjA5YmItZTBkMi0z
ZmZhLTg5OTYtYjJlYWM1NDNmNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjVkZjcyYTUtZjBkYS00YzY0LTk1
M2EtMTVhNjJkNWNhM2IwLzY1ZGY3MmE1LWYwZGEtNGM2NC05NTNhLTE1YTYyZDVj
YTNiMC5jcmwwHwYDVR0jBBgwFoAUw/ftawHjYye8m7oJ+guJtIPPlyIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy82NWRmNzJhNS1mMGRhLTRjNjQtOTUzYS0xNWE2
MmQ1Y2EzYjAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCrFEEAwQB
wEDEAwQAx1X1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAGa+TqkfivpWg1mxZn57DJefDLKj/RZc8U64pcIs
YFrCKV2rrWM1K6NLo6jHvwXgSYULcrRWyyBRoTiHIdEDdct9cmd5Vv3XGGbf+hj1
lRhcJ1pWJ9daoEVRD8OIjeHWVIUdx24ihnA9JXIK3DjaWGwKPJxxyJbe8MyyOoV9
blosnSLNv4mBelW9EVCxGC5/PXqtdbHG8fZaugZnF4oe9mueiMRLJGeUMimxoNix
vSThF7olj/0sBcqqtWwZom3ckD3KIdeyE6u90gsjn1vVX4zYNfkN/yphcnQEyo3B
rkJoNmxaocxuAQ7vCtsvU9qMwDWL98+Y5H+dCN5N34OPQto=
-----END CERTIFICATE-----
Generated at Sat Jan 10 23:36:35 2026 by rpki-client