This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f4996217-8b86-3d06-ac32-26d4f109d5db.roa
File: f4996217-8b86-3d06-ac32-26d4f109d5db.roa (raw, json)
Hash identifier: lsL5b1sj7hrqwaE7C+9POvPg2uhWgffdhvsr4z1hadY=
Subject key identifier: E1:1C:C7:D0:EF:91:4B:33:13:49:9E:D4:4B:C0:A4:53:42:53:92:F1
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F4328584C0B062A0BD3C397C3978133CF
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f4996217-8b86-3d06-ac32-26d4f109d5db.roa
Signing time: Mon 01 Dec 2025 14:00:39 +0000
ROA not before: Mon 01 Dec 2025 14:00:39 +0000
ROA not after: Sun 01 Mar 2026 14:00:39 +0000
asID: 30103
IP address blocks: 144.195.0.0/21 maxlen: 24
144.195.8.0/21 maxlen: 24
144.195.16.0/21 maxlen: 24
144.195.24.0/21 maxlen: 24
144.195.32.0/21 maxlen: 24
144.195.40.0/21 maxlen: 24
144.195.48.0/21 maxlen: 24
144.195.56.0/21 maxlen: 24
144.195.64.0/21 maxlen: 24
144.195.72.0/21 maxlen: 24
144.195.80.0/21 maxlen: 24
144.195.88.0/21 maxlen: 24
144.195.96.0/21 maxlen: 24
144.195.104.0/21 maxlen: 24
144.195.112.0/21 maxlen: 24
144.195.120.0/21 maxlen: 24
144.195.128.0/21 maxlen: 24
144.195.136.0/21 maxlen: 24
144.195.144.0/21 maxlen: 24
144.195.152.0/21 maxlen: 24
144.195.160.0/21 maxlen: 24
144.195.168.0/21 maxlen: 24
144.195.176.0/21 maxlen: 24
144.195.184.0/21 maxlen: 24
144.195.192.0/21 maxlen: 24
144.195.200.0/21 maxlen: 24
144.195.208.0/21 maxlen: 24
144.195.216.0/21 maxlen: 24
144.195.224.0/21 maxlen: 24
144.195.232.0/21 maxlen: 24
144.195.240.0/21 maxlen: 24
144.195.248.0/21 maxlen: 24
156.45.0.0/21 maxlen: 24
156.45.8.0/21 maxlen: 24
156.45.16.0/21 maxlen: 24
156.45.24.0/21 maxlen: 24
156.45.32.0/21 maxlen: 24
156.45.40.0/21 maxlen: 24
156.45.48.0/21 maxlen: 24
156.45.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 06 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:0b:06:2a:0b:d3:c3:97:c3:97:81:33:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Dec 1 14:00:39 2025 GMT
Not After : Mar 1 14:00:39 2026 GMT
Subject: CN=0911ef6a-7d59-4406-9a97-7cdbf258a9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:88:a8:c5:94:e8:9a:49:87:84:23:7f:8c:e9:
1e:69:1a:d3:5d:43:a9:db:70:fc:47:73:9d:c6:b9:
a9:5f:3d:18:eb:44:48:42:9f:54:d8:ee:bf:58:88:
ff:7c:7c:c7:c9:21:d3:6c:7e:4a:a3:60:fb:a4:55:
ee:e1:4b:96:12:ea:44:80:3c:ff:5a:4a:c3:bd:db:
f4:16:ec:78:86:ab:0a:e7:33:89:15:4e:95:7f:aa:
ad:d6:b9:19:a5:52:7e:f3:76:ef:68:fb:a9:94:71:
cb:a1:0f:f5:35:71:37:a4:fb:f1:6b:4d:79:d4:c5:
b7:0c:c0:d3:21:91:37:e7:67:4f:c5:49:ff:90:3b:
ae:69:bc:ef:22:54:b4:3d:d8:5c:75:63:8f:2f:63:
0c:c5:ef:01:7b:ae:1b:fb:a8:04:f0:d5:68:f9:c8:
ae:de:1b:ae:1e:a3:51:b3:c1:a0:d0:25:d4:46:25:
bd:02:f9:de:0b:fe:68:76:46:56:b6:2a:a5:8e:54:
af:a3:8b:11:8d:46:fb:b6:d6:18:96:7d:e4:98:5e:
00:40:cd:70:56:84:1a:40:e0:50:99:e9:4b:29:09:
f7:97:fe:9d:09:d9:32:f3:a4:f7:c2:93:e7:cd:13:
fc:c3:76:44:90:c2:70:06:df:dd:66:0e:1a:5a:65:
60:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1C:C7:D0:EF:91:4B:33:13:49:9E:D4:4B:C0:A4:53:42:53:92:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f4996217-8b86-3d06-ac32-26d4f109d5db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv4:
144.195.0.0/16
156.45.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:5e:7c:b6:04:49:b7:9c:7c:2d:46:11:8d:ed:d8:60:f4:92:
a6:6c:5b:7b:6a:12:b4:b3:aa:88:fb:10:df:a0:fa:e7:1a:82:
c3:68:5b:45:21:36:80:6c:80:d3:85:19:e8:86:c1:c7:41:d7:
2a:24:10:a5:96:0b:e0:ef:a7:dd:01:88:16:64:0b:85:e9:72:
79:a7:6e:6e:e7:cf:31:f0:b1:03:cf:f7:0f:14:58:99:b2:78:
a5:ba:60:5e:59:b5:4f:bf:4f:55:87:b6:46:c7:e7:56:a4:01:
7a:58:40:b1:c2:db:02:23:8f:b7:2e:42:00:28:01:22:73:a9:
da:21:74:d5:88:51:56:52:5e:de:29:b0:df:2e:1f:82:ff:09:
3a:ce:46:57:21:cf:e4:18:11:ad:ba:93:12:6c:5d:91:df:0c:
6a:23:9e:44:ad:7e:b1:54:0c:39:43:7b:f4:e4:bc:cc:cb:d2:
60:0f:5c:5f:7d:e1:2f:f1:b4:af:b6:74:ee:3e:d5:27:1c:38:
bb:b7:a3:8c:8f:a2:62:03:40:14:ee:78:25:62:0a:1a:99:96:
e9:ed:ba:f1:1b:da:c7:ff:33:7d:67:bb:15:26:0c:eb:b6:14:
c4:28:78:f3:23:fc:7c:70:04:ec:c6:e8:ed:a8:fe:a1:76:f6:
86:07:d2:d7
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEwLBioL08OXw5eBM88wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI1MTIwMTE0MDAzOVoXDTI2MDMwMTE0MDAzOVowLzEtMCsGA1UEAxMk
MDkxMWVmNmEtN2Q1OS00NDA2LTlhOTctN2NkYmYyNThhOWEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIioxZTomkmHhCN/jOkeaRrTXUOp23D8R3Od
xrmpXz0Y60RIQp9U2O6/WIj/fHzHySHTbH5Ko2D7pFXu4UuWEupEgDz/WkrDvdv0
Fux4hqsK5zOJFU6Vf6qt1rkZpVJ+83bvaPuplHHLoQ/1NXE3pPvxa0151MW3DMDT
IZE352dPxUn/kDuuabzvIlS0PdhcdWOPL2MMxe8Be64b+6gE8NVo+ciu3huuHqNR
s8Gg0CXURiW9AvneC/5odkZWtiqljlSvo4sRjUb7ttYYln3kmF4AQM1wVoQaQOBQ
melLKQn3l/6dCdky86T3wpPnzRP8w3ZEkMJwBt/dZg4aWmVg3QIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFOEcx9DvkUszE0me1EvApFNCU5LxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZjQ5OTYyMTctOGI4Ni0z
ZDA2LWFjMzItMjZkNGYxMDlkNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAkMMDBAac
LQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAql58tgRJt5x8LUYRje3YYPSSpmxbe2oStLOqiPsQ36D65xqC
w2hbRSE2gGyA04UZ6IbBx0HXKiQQpZYL4O+n3QGIFmQLhelyeadubufPMfCxA8/3
DxRYmbJ4pbpgXlm1T79PVYe2RsfnVqQBelhAscLbAiOPty5CACgBInOp2iF01YhR
VlJe3imw3y4fgv8JOs5GVyHP5BgRrbqTEmxdkd8MaiOeRK1+sVQMOUN79OS8zMvS
YA9cX33hL/G0r7Z07j7VJxw4u7ejjI+iYgNAFO54JWIKGpmW6e268Rvax/8zfWe7
FSYM67YUxCh48yP8fHAE7Mbo7aj+oXb2hgfS1w==
-----END CERTIFICATE-----
Generated at Fri Dec 5 10:26:20 2025 by rpki-client