This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/e4bee016-f469-32b3-882a-abe4f14aaed6.roa
File: e4bee016-f469-32b3-882a-abe4f14aaed6.roa (raw, json)
Hash identifier: UKUOFIJAfYnrPcLm2MBEtv1RCRxlnejoReY37EBOkNk=
Subject key identifier: 03:65:DE:D0:3E:FB:33:BB:41:07:A8:D3:66:91:BE:C0:0D:D6:D0:80
Certificate issuer: /CN=935332e4-2b48-45ab-95bc-6d4c2916350f
Certificate serial: 010D0C9F4328584BCAD04C32FD838ED11368F910
Authority key identifier: DF:20:11:5A:2F:2A:44:A5:5D:73:0C:2A:31:F4:C2:AF:27:F9:EA:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/e4bee016-f469-32b3-882a-abe4f14aaed6.roa
Signing time: Sat 08 Nov 2025 14:00:39 +0000
ROA not before: Sat 08 Nov 2025 14:00:39 +0000
ROA not after: Fri 06 Feb 2026 14:00:39 +0000
asID: 393507
IP address blocks: 149.20.68.0/23 maxlen: 24
2620:137:6000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/935332e4-2b48-45ab-95bc-6d4c2916350f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/935332e4-2b48-45ab-95bc-6d4c2916350f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 01 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ca:d0:4c:32:fd:83:8e:d1:13:68:f9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935332e4-2b48-45ab-95bc-6d4c2916350f
Validity
Not Before: Nov 8 14:00:39 2025 GMT
Not After : Feb 6 14:00:39 2026 GMT
Subject: CN=7e56182d-ee5b-414f-81d6-ac72fb89fd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:39:65:05:83:4b:53:dd:a0:85:0e:36:38:
f6:b2:e7:a1:52:c8:03:dd:a5:e4:e4:4b:ad:58:d1:
e0:52:82:ed:5a:a5:4a:e2:f5:9d:be:68:24:95:a0:
3c:7b:65:e1:4a:38:2b:d8:de:36:74:be:10:5c:d4:
c3:72:10:02:3e:c2:74:56:98:fc:2d:c3:e9:5b:a9:
34:9a:2c:38:89:dc:64:b6:df:c2:c7:82:70:f1:b7:
21:f0:f7:ae:d9:df:24:5c:3a:24:dc:7c:b8:40:82:
09:36:4c:e2:b4:f7:d7:4c:5b:9f:f0:a8:62:a5:3b:
2f:ab:b3:2a:e0:23:13:ab:5f:6d:41:ab:2e:9e:48:
87:b8:ad:35:f1:da:f6:50:f4:16:43:8a:a9:21:56:
1d:fd:e3:cb:60:8f:ac:be:1a:f4:e3:8a:f1:dc:e8:
fe:d1:84:3a:bd:f3:a6:02:ab:eb:03:75:25:4d:a0:
03:43:f0:e9:38:51:c0:4e:45:b0:ca:bc:4b:5b:14:
00:8a:8c:4e:5c:f0:67:b9:a4:23:02:f7:a9:df:7b:
fb:b2:85:27:c8:ff:38:be:5b:1c:87:8a:30:c2:fd:
91:5a:77:a3:df:35:79:36:b0:64:5a:b9:fa:48:b9:
9f:f3:8f:ef:9a:63:4c:f8:2f:13:00:3b:0b:e1:e4:
8c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:65:DE:D0:3E:FB:33:BB:41:07:A8:D3:66:91:BE:C0:0D:D6:D0:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/e4bee016-f469-32b3-882a-abe4f14aaed6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/935332e4-2b48-45ab-95bc-6d4c2916350f.crl
X509v3 Authority Key Identifier:
keyid:DF:20:11:5A:2F:2A:44:A5:5D:73:0C:2A:31:F4:C2:AF:27:F9:EA:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f.cer
sbgp-ipAddrBlock: critical
IPv4:
149.20.68.0/23
IPv6:
2620:137:6000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:71:40:06:2b:a4:4b:0a:b5:e3:ad:41:e9:63:59:c5:72:ef:
01:9b:ed:20:27:1c:8c:2c:71:25:5b:d3:15:f3:44:21:81:3a:
30:6d:6c:67:af:fa:9b:f6:a3:a6:77:fc:7e:6e:cc:2d:40:d3:
7d:6a:78:35:4c:82:a4:b4:b6:1a:b3:64:83:7b:0e:cd:6b:0d:
48:0e:bd:9f:00:73:df:98:92:f1:4a:25:1f:41:73:a2:cb:9c:
dc:04:d8:57:ac:1a:22:00:5b:ae:5f:8b:46:48:2f:92:e4:88:
2f:50:cf:6e:07:d9:56:ef:82:dc:ce:5e:a9:4d:0e:41:f3:d9:
a9:ee:65:6e:2f:74:4e:7a:56:02:b5:40:92:06:fc:dd:a2:12:
f7:0f:88:c4:36:04:e9:c7:4b:02:86:ce:11:96:6c:dd:34:5a:
bb:7d:d3:bd:e4:96:91:76:a0:17:2c:af:e4:69:e2:c5:ba:58:
37:98:c6:98:4d:f6:ec:ad:af:f2:60:bd:8d:02:9d:6e:59:06:
fb:fc:c0:67:a3:0f:dc:0e:4c:f4:d9:94:08:29:98:12:ba:9d:
a6:f4:68:b2:12:aa:be:f0:57:f5:28:b4:89:c6:38:0f:fb:f5:
83:9f:94:71:d2:99:db:4e:8c:19:39:99:9b:40:d6:f7:76:32:
95:20:3f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 30 16:25:12 2025 by rpki-client