This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa
File: 2de13f6e-ba53-3029-9dbc-cc6728951529.roa (raw, json)
Hash identifier: GzprcjS8UVDKLd8eK96t+keng5FXlU6TPlGxSnpZrC8=
Subject key identifier: 54:18:52:42:0B:89:7B:59:B8:26:B8:3E:EB:C7:BC:D7:7C:88:96:C2
Certificate issuer: /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial: 010D0C9F4328584BEAEB1C5180DF039D3C0F2580
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa
Signing time: Thu 20 Nov 2025 02:00:30 +0000
ROA not before: Thu 20 Nov 2025 02:00:30 +0000
ROA not after: Wed 18 Feb 2026 02:00:30 +0000
asID: 803
IP address blocks: 104.152.28.0/22 maxlen: 22
104.219.8.0/22 maxlen: 22
104.255.48.0/22 maxlen: 22
108.60.160.0/19 maxlen: 19
108.160.16.0/20 maxlen: 20
108.174.160.0/20 maxlen: 20
162.253.8.0/22 maxlen: 22
192.34.224.0/21 maxlen: 21
198.245.112.0/20 maxlen: 20
199.26.190.0/23 maxlen: 23
199.189.88.0/21 maxlen: 21
206.163.224.0/19 maxlen: 19
207.47.128.0/17 maxlen: 17
216.126.200.0/22 maxlen: 22
216.174.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 25 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ea:eb:1c:51:80:df:03:9d:3c:0f:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Validity
Not Before: Nov 20 02:00:30 2025 GMT
Not After : Feb 18 02:00:30 2026 GMT
Subject: CN=f579a422-58c6-4c42-a2ff-5684e5c2987e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6a:77:dc:f9:4a:56:af:3e:cb:ec:30:37:e0:
76:3e:d3:ee:11:99:52:92:af:72:2e:54:38:4f:42:
bc:d1:2e:ca:bc:74:1a:19:06:ac:f8:80:6f:76:a6:
9e:fe:a7:2d:80:1c:82:ec:ed:7e:e5:95:86:68:c3:
d0:36:99:04:a2:2d:37:4a:1c:f5:51:2c:cf:42:c2:
ea:33:a0:c6:a5:15:a4:8e:22:aa:dd:2d:08:cc:5e:
91:7b:a3:6c:e9:b8:0d:3a:28:60:47:d2:51:87:bf:
f5:cc:da:0c:19:50:c8:89:35:2d:68:44:bf:f3:15:
d4:0e:b1:07:68:4d:1b:57:fc:d6:01:68:a1:34:9a:
e5:72:31:87:02:f7:6d:7c:6b:4a:1f:80:08:bb:8e:
d3:85:eb:76:14:33:2d:d5:db:8a:b7:2a:80:7c:97:
dc:dd:cd:8e:cb:1b:de:83:8b:83:0b:6a:45:5a:06:
3c:a6:c7:58:2c:2b:4e:a1:de:b8:f6:bb:07:96:b7:
27:2f:20:6b:06:b5:a3:fd:99:5d:1f:84:73:fe:0f:
fb:39:92:c8:6b:4a:7b:fc:6f:7f:df:32:77:76:7f:
19:71:97:81:46:f1:cd:65:e9:48:b7:77:ea:63:05:
3c:eb:9b:b8:a2:8d:4a:9e:c5:d9:ed:c5:79:c0:46:
f3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:18:52:42:0B:89:7B:59:B8:26:B8:3E:EB:C7:BC:D7:7C:88:96:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
X509v3 Authority Key Identifier:
keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
sbgp-ipAddrBlock: critical
IPv4:
104.152.28.0/22
104.219.8.0/22
104.255.48.0/22
108.60.160.0/19
108.160.16.0/20
108.174.160.0/20
162.253.8.0/22
192.34.224.0/21
198.245.112.0/20
199.26.190.0/23
199.189.88.0/21
206.163.224.0/19
207.47.128.0/17
216.126.200.0/22
216.174.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:10:25:cc:45:4d:94:2c:eb:d1:4d:33:db:b6:13:93:08:62:
6f:5b:6a:ad:f5:5b:e9:49:57:78:5a:e4:41:d4:7b:cf:85:83:
47:6f:1c:e3:4f:3c:62:34:a0:68:20:b4:b5:ff:1f:52:6c:b6:
b1:46:d2:c5:e0:50:65:12:25:d9:f4:96:85:34:30:11:91:6f:
48:b3:ef:7a:e6:f0:4b:af:7a:16:92:04:2f:d1:87:57:e4:36:
13:20:18:76:79:0a:82:d5:b3:39:55:18:dd:14:e4:55:52:75:
f3:5d:4c:2e:8e:c4:e8:3f:18:15:fb:5b:da:b3:99:45:2e:35:
55:58:fe:92:01:f6:15:49:a0:b6:7c:5d:ed:d7:8c:84:7d:51:
e6:49:30:cb:86:b7:4e:ce:70:a0:93:29:67:83:15:10:18:3b:
23:bf:2d:ee:d1:d2:a8:4d:73:45:ce:7c:8f:02:a8:b3:0c:5c:
c9:2d:3f:d7:df:6e:47:95:9b:79:73:30:c2:87:36:9e:d1:a6:
86:26:97:dd:b2:03:52:ed:5e:a3:60:e1:39:d1:1e:5a:95:89:
91:ad:c8:e2:56:d6:fe:02:7b:d5:7c:50:6a:03:2e:be:db:c5:
97:c4:3b:3f:93:01:23:3f:f3:62:0a:14:3d:23:71:3a:db:62:
b2:f5:3b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 23 20:09:30 2025 by rpki-client