This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa
File: 25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa (raw, json)
Hash identifier: lb+FZgG/pb161Pj2ddwdcnv1owQvaeshRk0UMsZzhA0=
Subject key identifier: A9:C7:3E:C7:06:43:21:64:F7:DE:FF:2E:31:9E:44:02:92:45:8C:21
Certificate issuer: /CN=f9d82c71-366a-467f-9b6c-3667d1ae7605
Certificate serial: 010D0C9F4328584BD3BCD83C062D6DD84E497F34
Authority key identifier: 8A:F9:AB:9E:B6:76:28:B8:31:1E:EA:07:D3:3C:77:D9:A5:01:F7:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa
Signing time: Sat 08 Nov 2025 14:00:39 +0000
ROA not before: Sat 08 Nov 2025 14:00:39 +0000
ROA not after: Fri 06 Feb 2026 14:00:39 +0000
asID: 32083
IP address blocks: 66.158.192.0/18 maxlen: 24
173.46.160.0/19 maxlen: 24
208.111.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d3:bc:d8:3c:06:2d:6d:d8:4e:49:7f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d82c71-366a-467f-9b6c-3667d1ae7605
Validity
Not Before: Nov 8 14:00:39 2025 GMT
Not After : Feb 6 14:00:39 2026 GMT
Subject: CN=1fe54add-bad8-4ca1-873d-1e8a025a6a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f6:16:e6:0e:1b:31:bd:0d:84:5e:6a:a9:2b:
1e:34:c6:b5:29:58:78:49:f8:62:73:ff:ca:14:d9:
10:03:38:49:eb:c3:a8:98:74:f7:31:83:60:de:17:
2d:a0:b1:42:6b:f7:98:45:f6:18:0a:d8:d9:70:55:
0c:1c:74:17:ac:ce:d1:e9:3d:e3:a8:25:d2:0d:e9:
b1:5b:08:7d:c8:57:f3:fd:53:d7:3f:a9:6c:f5:12:
ce:5f:e0:d7:e8:33:80:c4:b4:51:cc:39:bd:d4:ce:
eb:54:30:ac:c7:89:87:37:6c:e7:05:a4:d9:a8:f0:
ad:18:2b:19:5d:8b:8e:ad:4c:c0:89:1c:3b:5f:2f:
ad:f8:8a:af:00:bd:71:79:7e:44:22:b6:42:44:ea:
83:a0:1b:57:ca:4c:5e:4e:e5:fc:07:34:c6:d5:f6:
ab:01:ad:38:0b:0b:5f:af:9b:18:6e:c2:09:49:0f:
15:7e:f3:d8:9d:c7:b0:ff:6e:4c:98:24:0a:a7:2c:
ef:d1:00:21:2a:08:37:95:89:a0:8c:a1:5e:43:b3:
4d:63:36:aa:c5:79:2e:de:a0:41:d7:17:35:7a:85:
1b:a8:54:5d:7b:b6:81:7e:0f:55:ef:57:6c:9b:bc:
bd:34:a4:c4:c1:b7:00:f4:3d:a1:50:8c:2d:b3:93:
18:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C7:3E:C7:06:43:21:64:F7:DE:FF:2E:31:9E:44:02:92:45:8C:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.crl
X509v3 Authority Key Identifier:
keyid:8A:F9:AB:9E:B6:76:28:B8:31:1E:EA:07:D3:3C:77:D9:A5:01:F7:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer
sbgp-ipAddrBlock: critical
IPv4:
66.158.192.0/18
173.46.160.0/19
208.111.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:aa:9e:51:f1:55:ff:ee:dc:89:67:a0:bc:41:94:0e:6a:55:
95:1b:52:c2:e1:46:6f:a3:c3:d3:c5:ac:38:c4:59:71:8f:36:
d0:3e:0f:95:3b:b4:8c:1e:d7:ad:d9:bd:ef:ee:43:0f:96:26:
85:ed:b8:4d:bd:03:76:72:67:24:c4:46:e9:3a:9a:24:61:2d:
e7:ff:bd:ff:6f:a2:1e:33:12:6a:df:77:4d:54:eb:d1:95:17:
a6:6d:0a:90:a7:26:b8:f3:59:2e:0f:f3:f5:ee:b3:77:c5:a7:
66:77:7f:4d:3c:c6:5e:59:fe:cf:b7:59:41:bf:79:25:1c:33:
9e:12:b4:ac:ba:96:ea:3a:40:aa:a1:22:90:7e:49:55:fe:93:
50:62:4a:ff:8e:ba:43:c9:4c:a9:d9:60:47:0e:d9:dc:53:82:
0a:3d:a0:d7:54:5f:8c:85:4e:cf:9d:1d:0f:07:14:57:83:4d:
26:b4:b6:ed:b6:71:10:6d:02:06:89:2a:c4:bd:b2:82:7a:3d:
1f:a2:ec:75:73:83:98:f5:c0:e9:7e:75:ea:e8:e2:8c:e2:ff:
d0:5c:ab:c9:b8:70:43:4a:bd:90:e6:13:d3:7a:cc:b8:ab:76:
30:1a:b1:f2:64:3a:ea:33:b7:67:90:ef:da:7f:f7:86:21:fc:
e4:09:80:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 11:34:43 2025 by rpki-client