This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/4278278f-0cf0-34aa-9142-25c0514085c8.roa
File: 4278278f-0cf0-34aa-9142-25c0514085c8.roa (raw, json)
Hash identifier: CnNoAgKW50d8z6OIciCWaTVNerL3GB4coMZBw71qaP8=
Subject key identifier: 21:B9:5C:36:85:1F:00:8A:2C:E7:21:04:AC:8E:D4:47:41:4A:EE:A3
Certificate issuer: /CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f
Certificate serial: 010D0C9F4328584BF1E5F399766A1DBC6FA4FA80
Authority key identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/4278278f-0cf0-34aa-9142-25c0514085c8.roa
Signing time: Sat 22 Nov 2025 14:00:39 +0000
ROA not before: Sat 22 Nov 2025 14:00:39 +0000
ROA not after: Fri 20 Feb 2026 14:00:39 +0000
asID: 4637
IP address blocks: 199.189.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:f1:e5:f3:99:76:6a:1d:bc:6f:a4:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f
Validity
Not Before: Nov 22 14:00:39 2025 GMT
Not After : Feb 20 14:00:39 2026 GMT
Subject: CN=9efba8c8-7ae7-49ed-ad21-913d84b83aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:38:22:41:81:45:91:04:6c:bf:53:f7:d0:81:
1c:ae:e2:f6:0b:82:94:5e:3a:88:ad:e5:95:34:c8:
13:52:39:7d:a5:2e:90:9a:d2:7f:93:86:f9:51:95:
ba:f2:a6:1c:bb:d9:84:5e:6b:69:75:ed:94:b6:ef:
dc:eb:cf:a9:65:aa:54:2e:5e:2c:4b:4f:c1:2e:bc:
26:3b:2d:72:9d:f6:96:58:94:a6:8a:6b:fc:2f:c8:
2e:d3:4a:7d:00:b6:83:ee:f3:34:6b:f8:ee:8b:5f:
73:ea:5c:26:8d:b2:96:b4:27:26:20:74:46:ad:4f:
83:42:8e:7d:04:1c:f2:84:b3:a5:a4:d2:8f:09:79:
85:81:4e:6a:79:dc:b1:2c:a7:6d:69:a8:01:be:b6:
8a:34:e9:a4:e2:aa:72:e8:0b:60:55:32:fc:be:f3:
3e:33:bf:d1:1b:21:9e:81:52:59:15:08:80:09:51:
9c:4c:97:89:ce:49:67:fc:9d:05:48:0f:3f:3c:3d:
f1:eb:a7:8e:56:2b:02:a4:81:b5:fd:cb:ff:15:3e:
e7:5d:03:28:38:73:51:36:b7:4f:a3:88:46:3f:65:
08:21:c8:52:c3:97:9d:75:54:31:7a:cb:26:dd:71:
b3:92:67:0f:9d:3f:08:a2:56:8c:94:44:1d:be:f0:
85:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B9:5C:36:85:1F:00:8A:2C:E7:21:04:AC:8E:D4:47:41:4A:EE:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/4278278f-0cf0-34aa-9142-25c0514085c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl
X509v3 Authority Key Identifier:
keyid:E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer
sbgp-ipAddrBlock: critical
IPv4:
199.189.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:e3:e4:7f:a3:b2:ca:19:13:54:cf:a6:4a:b9:ab:ad:90:0e:
92:1d:21:71:d1:47:62:4e:91:13:40:a8:14:02:95:25:f8:a1:
ec:e6:36:7e:6e:b8:72:f2:fb:2f:c8:b4:71:07:c4:55:5f:de:
cf:80:a8:eb:08:8f:e9:13:cf:59:c0:e6:5c:8d:80:da:45:de:
dd:bf:5e:11:45:b6:6f:e5:33:c4:d5:96:6f:38:0f:a3:ab:82:
81:98:07:9f:b1:54:2a:c1:69:79:41:a1:34:8b:9e:4e:80:b3:
ec:52:8a:60:89:dd:6c:74:6c:0c:5d:03:b1:d5:91:2c:be:5d:
91:12:be:11:90:e2:2a:6c:1d:67:cd:f3:c2:a6:f1:97:e7:69:
79:ec:b4:04:56:59:e3:cc:22:dc:78:4c:c5:24:31:6e:f7:4f:
26:7c:fc:d5:e9:69:6f:ef:4c:59:dc:64:d8:f9:c7:39:23:cd:
93:bb:ac:d1:3f:6b:fd:78:a0:c7:fa:e4:8a:be:3b:7f:2f:ad:
69:e1:1a:f3:1f:de:33:02:0b:72:f7:39:85:4f:2d:64:c5:70:
20:07:af:e7:43:3c:84:9d:33:d4:a6:0a:89:63:c0:2a:36:7e:
02:d0:52:d6:ea:4a:b9:ec:89:48:71:cb:86:77:d9:db:22:2d:
41:75:f9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 08:17:14 2025 by rpki-client