This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2a100aef-69e9-3767-ab66-74b1ee2e59a6.roa
File: 2a100aef-69e9-3767-ab66-74b1ee2e59a6.roa (raw, json)
Hash identifier: iXgQj9hNReWKg6aKH2gsI/qRx+dmgTpgnhu8D+7i+fQ=
Subject key identifier: 98:0C:82:7E:F4:95:54:02:73:71:52:8C:C1:00:16:8B:84:4C:A7:E1
Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
Certificate serial: 010D0C9F4328584C5F89C966C01BAB6B9E709B00
Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2a100aef-69e9-3767-ab66-74b1ee2e59a6.roa
Signing time: Wed 31 Dec 2025 20:34:03 +0000
ROA not before: Wed 31 Dec 2025 20:34:03 +0000
ROA not after: Tue 31 Mar 2026 19:34:03 +0000
asID: 62943
IP address blocks: 67.221.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Jan 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:5f:89:c9:66:c0:1b:ab:6b:9e:70:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
Validity
Not Before: Dec 31 20:34:03 2025 GMT
Not After : Mar 31 19:34:03 2026 GMT
Subject: CN=8639f0fd-02d2-4dcf-8f1e-44ec77a6f510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:fc:09:45:7a:5e:28:b6:47:7d:c7:ca:22:
cc:6e:99:a5:22:9d:39:cd:bf:4c:9d:a2:f3:33:58:
61:aa:ef:a6:f6:ae:eb:db:c5:19:4c:b5:9c:05:37:
d1:8c:ae:c4:38:85:ec:4e:7b:8e:63:09:79:d1:bb:
2a:8e:44:0b:45:8c:20:c7:a1:67:d8:7d:df:98:e4:
d6:ea:c5:1c:4d:37:1e:2a:f8:64:6c:8a:4f:59:c9:
2e:80:46:44:f5:a4:95:5c:ef:0d:6f:64:e4:13:eb:
dc:3e:b7:5b:e9:86:77:3d:f2:d6:0d:56:68:68:a9:
83:68:99:78:df:93:ab:56:6c:16:44:16:c9:99:77:
60:27:73:6b:47:ef:9b:8f:3b:12:94:b3:06:69:66:
8e:89:ac:12:0a:fc:2e:90:65:00:59:02:68:6a:eb:
27:21:97:05:e6:9a:66:b6:fd:ef:ee:2c:f7:bb:ee:
10:a2:df:4e:6b:ed:05:74:5e:8c:fb:ce:55:df:9a:
ce:05:87:04:be:81:45:f9:36:52:60:54:e3:ed:e6:
d9:42:c9:a2:d6:14:98:a5:ad:b6:7d:94:cd:4a:1e:
9e:6e:c0:c7:27:09:74:7f:20:e9:ec:d2:68:b9:98:
96:02:3a:46:4f:7d:90:3e:91:d5:8e:e6:94:59:b5:
0a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0C:82:7E:F4:95:54:02:73:71:52:8C:C1:00:16:8B:84:4C:A7:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2a100aef-69e9-3767-ab66-74b1ee2e59a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl
X509v3 Authority Key Identifier:
keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
sbgp-ipAddrBlock: critical
IPv4:
67.221.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:47:d4:01:f9:dc:c1:09:e9:30:ca:08:df:13:73:9f:1a:21:
a9:66:8c:00:f0:ff:62:48:f4:6d:9f:4f:70:ff:fd:12:31:9b:
f4:13:41:10:46:58:94:af:a7:bf:9a:37:cc:a3:db:5e:90:10:
22:94:0c:6a:d5:4a:c7:18:dc:cc:4a:6c:d6:27:6a:e2:da:df:
ad:10:c9:c5:df:01:8c:b9:08:56:aa:26:8d:38:f2:65:16:d5:
df:03:8f:bb:a4:40:78:0e:62:a1:4b:22:34:d7:ee:0c:56:04:
78:c2:c3:aa:c3:2a:51:f7:65:15:87:9a:47:f7:c8:5d:06:1c:
39:3b:8e:ed:35:fd:a3:60:09:f7:47:c4:2b:99:28:d7:e9:93:
bc:70:ee:47:c2:9a:3c:bf:f6:5f:c4:d9:8c:ff:5d:52:39:2b:
4e:95:f8:a4:68:cc:53:5b:32:c7:2e:0f:7c:9f:a8:e5:79:6a:
4c:81:3f:fe:2f:4b:03:2f:8d:fd:93:3c:24:33:35:22:f1:df:
cf:fc:91:ed:fb:85:3b:4d:e3:4a:45:84:8d:bc:d0:62:eb:50:
81:a8:be:22:8c:06:dc:6f:c5:54:b3:02:66:f6:12:6a:70:9d:
b9:f1:61:97:e8:30:00:d2:74:fa:3d:cd:9e:e1:48:9b:38:30:
16:50:a8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 03:57:57 2026 by rpki-client