This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/0e4645bc-c3fe-36b8-8d81-10da41797a09.roa
File: 0e4645bc-c3fe-36b8-8d81-10da41797a09.roa (raw, json)
Hash identifier: +2OIy4x0Ge7GG/68QdyzYEH5tyyYNI5o7L7QZsgfPq8=
Subject key identifier: D6:D6:C6:4E:00:8C:3C:15:3A:FA:62:23:B5:2E:2A:31:77:89:68:BC
Certificate issuer: /CN=d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17
Certificate serial: 010D0C9F4328584BE6BB2578658DF779BCF52900
Authority key identifier: D1:8E:3F:84:49:98:82:D7:24:A2:C8:3F:24:E3:63:0B:16:31:62:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/0e4645bc-c3fe-36b8-8d81-10da41797a09.roa
Signing time: Tue 18 Nov 2025 14:00:38 +0000
ROA not before: Tue 18 Nov 2025 14:00:38 +0000
ROA not after: Mon 16 Feb 2026 14:00:38 +0000
asID: 46572
IP address blocks: 139.60.32.0/22 maxlen: 24
199.184.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:e6:bb:25:78:65:8d:f7:79:bc:f5:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17
Validity
Not Before: Nov 18 14:00:38 2025 GMT
Not After : Feb 16 14:00:38 2026 GMT
Subject: CN=0667e8a7-ad32-4687-af77-4d6a0bb77748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f1:67:ad:aa:eb:1f:15:5d:70:02:8f:74:4e:
68:9e:e8:b1:3f:59:5f:bf:a7:7a:67:6c:90:3b:e4:
18:83:94:34:c4:46:69:6b:2b:04:78:f3:f6:52:79:
a7:93:73:e2:ce:a3:77:48:5f:b2:09:cf:cb:ae:61:
91:15:b6:93:bd:0e:92:8a:4b:89:8a:fc:86:88:73:
4d:58:17:1c:fe:cc:cc:ec:bf:4e:95:a7:2e:a7:26:
17:89:3a:f7:92:2a:bd:fa:83:9a:3e:cc:d2:1f:b6:
11:27:13:19:da:b4:32:8f:11:fa:5a:b1:c4:6d:3e:
f8:13:80:23:97:ca:a0:db:25:55:35:5e:20:a8:43:
cc:c7:ca:47:ec:82:d6:7a:0e:c2:f5:a9:a4:c6:4e:
a7:cd:59:e2:ce:1a:c6:fe:6e:5b:64:63:bd:bf:98:
29:35:28:d6:40:d7:21:17:79:0a:66:2c:a7:58:75:
b7:b4:71:8d:58:3c:db:21:72:b4:b7:a8:70:d4:82:
07:89:21:9f:c2:6a:f4:18:cb:be:78:d0:d1:77:99:
ef:eb:90:47:8d:5f:c7:f8:39:84:b3:43:c8:73:15:
bc:bd:95:97:a4:4e:17:4e:c6:48:39:3e:49:94:c6:
2c:49:66:2f:0b:e0:67:e4:0d:03:98:1e:51:50:4e:
e7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D6:C6:4E:00:8C:3C:15:3A:FA:62:23:B5:2E:2A:31:77:89:68:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/0e4645bc-c3fe-36b8-8d81-10da41797a09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.crl
X509v3 Authority Key Identifier:
keyid:D1:8E:3F:84:49:98:82:D7:24:A2:C8:3F:24:E3:63:0B:16:31:62:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.cer
sbgp-ipAddrBlock: critical
IPv4:
139.60.32.0/22
199.184.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:e9:5e:78:3b:71:ff:8a:3b:5b:a8:f5:71:7c:95:fc:04:0c:
1d:cb:38:3a:ea:94:54:d9:84:41:a8:2d:9f:15:95:51:24:6d:
c8:d1:9b:2e:46:28:7d:47:95:9a:70:96:6a:46:00:5a:3b:ac:
07:0c:6c:a1:ae:e2:55:41:55:e0:0e:90:cf:04:b4:04:44:1a:
57:16:fe:9b:86:d9:17:31:ae:71:c7:4f:ce:44:2c:f7:3c:ef:
25:d1:70:66:24:6c:51:0c:36:07:bc:88:b4:c8:74:13:3b:8a:
b9:65:72:2d:96:9a:b4:29:7d:f4:89:aa:fd:af:a4:4c:6c:b0:
e7:4c:07:30:d5:81:e2:63:5c:47:69:4b:64:cb:c4:36:ea:0b:
04:31:b7:2d:fc:95:b1:fd:df:78:a1:6d:3c:f8:4f:c4:58:ac:
fa:ad:1a:58:91:cf:8a:13:aa:19:25:8b:5d:fa:27:c9:7c:30:
34:20:3b:73:8c:46:f2:18:bc:62:fa:04:a1:d2:f0:ca:24:4d:
c3:57:8d:8c:6d:99:c7:d3:a6:b6:48:23:09:c5:9b:6b:44:ac:
6f:b1:4b:e8:f5:b5:a0:16:2a:50:9d:bf:86:34:66:a3:29:4a:
32:ed:2f:e4:0b:b1:df:64:a5:12:65:ba:0e:0f:3d:2f:13:cc:
bf:bd:37:3f
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEvmuyV4ZY33ebz1KQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFlZjRiMzgtYjVkYy00YjM3LTkwYjUtZWI5ZTI2MmJm
YTE3MB4XDTI1MTExODE0MDAzOFoXDTI2MDIxNjE0MDAzOFowLzEtMCsGA1UEAxMk
MDY2N2U4YTctYWQzMi00Njg3LWFmNzctNGQ2YTBiYjc3NzQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPFnrarrHxVdcAKPdE5onuixP1lfv6d6Z2yQ
O+QYg5Q0xEZpaysEePP2Unmnk3PizqN3SF+yCc/LrmGRFbaTvQ6SikuJivyGiHNN
WBcc/szM7L9OlacupyYXiTr3kiq9+oOaPszSH7YRJxMZ2rQyjxH6WrHEbT74E4Aj
l8qg2yVVNV4gqEPMx8pH7ILWeg7C9amkxk6nzVnizhrG/m5bZGO9v5gpNSjWQNch
F3kKZiynWHW3tHGNWDzbIXK0t6hw1IIHiSGfwmr0GMu+eNDRd5nv65BHjV/H+DmE
s0PIcxW8vZWXpE4XTsZIOT5JlMYsSWYvC+Bn5A0DmB5RUE7nOwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFNbWxk4AjDwVOvpiI7UuKjF3iWi8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kMWVm
NGIzOC1iNWRjLTRiMzctOTBiNS1lYjllMjYyYmZhMTcvMGU0NjQ1YmMtYzNmZS0z
NmI4LThkODEtMTBkYTQxNzk3YTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDFlZjRiMzgtYjVkYy00YjM3LTkw
YjUtZWI5ZTI2MmJmYTE3L2QxZWY0YjM4LWI1ZGMtNGIzNy05MGI1LWViOWUyNjJi
ZmExNy5jcmwwHwYDVR0jBBgwFoAU0Y4/hEmYgtckosg/JONjCxYxYpUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kMWVmNGIzOC1iNWRjLTRiMzctOTBiNS1lYjll
MjYyYmZhMTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCizwgAwQD
x7iAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFHpXng7cf+KO1uo9XF8lfwEDB3LODrqlFTZhEGoLZ8VlVEk
bcjRmy5GKH1HlZpwlmpGAFo7rAcMbKGu4lVBVeAOkM8EtAREGlcW/puG2RcxrnHH
T85ELPc87yXRcGYkbFEMNge8iLTIdBM7irllci2WmrQpffSJqv2vpExssOdMBzDV
geJjXEdpS2TLxDbqCwQxty38lbH933ihbTz4T8RYrPqtGliRz4oTqhkli136J8l8
MDQgO3OMRvIYvGL6BKHS8MokTcNXjYxtmcfTprZIIwnFm2tErG+xS+j1taAWKlCd
v4Y0ZqMpSjLtL+QLsd9kpRJlug4PPS8TzL+9Nz8=
-----END CERTIFICATE-----
Generated at Tue Nov 25 08:18:22 2025 by rpki-client