This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/898d80f8-2b61-317a-8bb0-4e06fc2c2c52.roa
File: 898d80f8-2b61-317a-8bb0-4e06fc2c2c52.roa (raw, json)
Hash identifier: tFcE+AiADWf196aovt4aTZBPhDdP/RoeWfQfrEa4b+g=
Subject key identifier: BA:FB:0F:7F:13:CB:02:05:83:D9:0D:DC:C1:C8:EF:B2:28:20:D4:37
Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial: 010D0C9F4328584BD8C5CD09E2670775E380BB40
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/898d80f8-2b61-317a-8bb0-4e06fc2c2c52.roa
Signing time: Thu 13 Nov 2025 14:00:38 +0000
ROA not before: Thu 13 Nov 2025 14:00:38 +0000
ROA not after: Wed 11 Feb 2026 14:00:38 +0000
asID: 31898
IP address blocks: 130.35.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d8:c5:cd:09:e2:67:07:75:e3:80:bb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Validity
Not Before: Nov 13 14:00:38 2025 GMT
Not After : Feb 11 14:00:38 2026 GMT
Subject: CN=d96ed968-e4c0-486f-9215-10f6488bc803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:e5:53:1c:21:44:e0:73:12:94:be:dd:d3:
be:12:48:33:1e:8c:22:5b:26:34:c7:ab:83:25:8a:
94:b0:c1:26:37:37:4d:0b:58:96:d1:3a:0b:a6:f9:
48:34:08:ed:b1:a9:a6:63:24:3c:85:76:5e:a5:88:
63:12:74:1c:76:0b:31:91:c0:6e:77:c9:60:e1:bb:
b9:4d:52:29:e9:cb:a0:61:8a:29:d7:85:a5:5f:47:
8c:ad:c1:a5:38:a9:50:e7:95:16:bc:21:90:d6:84:
3f:e6:28:82:c4:8f:60:f7:30:dd:1f:6e:1f:42:56:
b8:91:7b:5a:8f:af:90:0f:ea:32:e6:9d:e1:d6:76:
de:6d:20:36:d6:4f:ae:1f:d7:37:f2:7a:d9:1c:b1:
16:8d:da:ef:dd:95:5c:b5:2f:dd:f8:85:d4:a3:26:
fa:6c:67:42:a2:b2:c3:36:d7:a5:fe:15:7a:f7:25:
64:4c:45:ae:5e:57:17:3f:96:bf:db:16:0a:d2:db:
e4:e8:f7:d5:51:91:ea:23:bb:5d:f0:a8:8c:95:81:
c2:4a:33:d1:8c:4e:db:a6:0f:5b:3e:de:3f:df:2c:
a7:28:79:92:83:34:75:6a:63:f2:4b:ce:8e:6f:3a:
5e:2c:a0:4b:26:ed:80:41:c5:9c:72:4b:11:01:a9:
85:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FB:0F:7F:13:CB:02:05:83:D9:0D:DC:C1:C8:EF:B2:28:20:D4:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/898d80f8-2b61-317a-8bb0-4e06fc2c2c52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
X509v3 Authority Key Identifier:
keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
sbgp-ipAddrBlock: critical
IPv4:
130.35.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:7b:4f:57:6f:a0:4c:b7:92:24:a1:b3:95:0e:ff:15:db:40:
47:b9:c4:c5:bb:6e:17:e8:ec:8f:b7:90:09:78:3f:75:56:17:
16:65:e7:12:09:66:ba:f0:22:89:4c:7c:3b:75:79:e4:8c:09:
62:d2:d2:6e:7b:54:b1:53:55:29:38:45:fd:95:93:bb:9b:ea:
b5:ea:69:0a:c4:8b:c5:90:86:66:9f:34:9f:2e:d3:4e:8f:a2:
1c:d7:8b:5e:69:6b:ce:98:48:a7:a7:92:83:d5:fc:a7:50:06:
c9:fe:95:eb:8a:8b:1a:22:b3:c3:ec:0a:16:97:e3:ff:a7:da:
ea:98:f4:aa:8c:e2:6c:25:24:ae:6c:47:aa:a8:8f:80:a9:fb:
15:cc:32:49:45:9f:5f:56:9c:e0:e6:34:77:75:b8:56:23:d3:
eb:a7:f7:2b:7a:5b:bf:32:7a:d6:84:5a:0e:b5:fd:ef:97:18:
0f:fa:d9:fe:8e:1f:09:0f:09:51:93:3f:90:94:73:0c:36:f1:
be:da:15:bd:48:87:cf:bf:79:37:90:f9:f1:7a:f8:24:ca:67:
70:da:93:4f:75:74:19:e1:35:b7:e8:05:8a:54:34:31:23:9d:
0b:f0:8b:ac:a2:90:b8:bd:b5:80:d4:bc:c0:d7:87:d5:6c:4a:
d3:1b:87:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:28:00 2025 by rpki-client