This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/cb483792-d161-3b71-b488-5c52bb929cc3.roa
File: cb483792-d161-3b71-b488-5c52bb929cc3.roa (raw, json)
Hash identifier: LaFNvKTxcPRbIh6EA1ZU/SyrNAmzW+Exlm5RxRIktR4=
Subject key identifier: 71:90:AB:E7:7A:46:84:BC:C0:11:11:78:F0:8F:73:ED:DB:F5:86:6E
Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6
Certificate serial: 010D0C9F4328584C1E90DE29EB15FE926E630000
Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/cb483792-d161-3b71-b488-5c52bb929cc3.roa
Signing time: Mon 08 Dec 2025 14:00:38 +0000
ROA not before: Mon 08 Dec 2025 14:00:38 +0000
ROA not after: Sun 08 Mar 2026 13:00:38 +0000
asID: 30242
IP address blocks: 199.167.252.0/24 maxlen: 24
199.167.253.0/24 maxlen: 24
199.167.254.0/24 maxlen: 24
199.167.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:1e:90:de:29:eb:15:fe:92:6e:63:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6
Validity
Not Before: Dec 8 14:00:38 2025 GMT
Not After : Mar 8 13:00:38 2026 GMT
Subject: CN=05855552-9c29-4aa5-a6c3-61d920303408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2c:c5:c1:cd:8e:c9:45:64:04:29:2c:60:ce:
33:9c:22:26:1a:ef:d5:16:3a:db:4e:f6:7c:9d:54:
17:b2:cc:a5:ea:35:82:41:10:e7:c9:4c:5c:f6:d3:
48:39:96:ea:7e:75:83:3e:27:4f:08:5b:90:fe:b4:
94:ec:84:01:7b:fc:df:a4:f3:6c:68:5b:cf:72:0a:
59:34:02:b8:e1:b4:23:c0:0a:d0:66:a5:b0:15:40:
d3:f1:20:35:e8:f3:df:44:bd:97:9e:0a:7d:e6:d5:
70:eb:ec:a9:8d:97:19:74:c9:c6:8b:5d:71:a7:16:
59:71:ed:4a:ad:a4:5e:de:a8:9b:6c:c1:32:24:d2:
92:bd:30:a7:69:e9:80:ec:0b:80:a8:ce:d6:19:7a:
a1:2e:f7:b5:d3:c1:ff:b8:35:da:94:52:6a:ce:41:
3a:7d:f8:52:74:a8:8c:02:51:ed:60:ab:16:4f:56:
61:27:22:f1:86:ce:64:c6:5d:e8:ce:f8:07:e1:45:
bd:0b:ca:a2:c5:97:f3:86:06:48:7c:7f:cd:02:c8:
f5:23:60:7c:04:78:7e:84:73:fc:bb:fd:2b:8d:ad:
d0:48:f3:af:42:54:7f:f4:5d:9c:8f:c7:f1:19:b7:
3b:da:0a:7c:d5:40:28:af:4c:6c:f5:33:a5:ae:e5:
8d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:90:AB:E7:7A:46:84:BC:C0:11:11:78:F0:8F:73:ED:DB:F5:86:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/cb483792-d161-3b71-b488-5c52bb929cc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl
X509v3 Authority Key Identifier:
keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
sbgp-ipAddrBlock: critical
IPv4:
199.167.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:46:3f:79:de:76:0b:6b:65:d7:fe:6e:27:75:a5:42:6b:8a:
ba:d0:e1:58:05:c2:85:f0:a6:8e:b5:7f:ef:c1:6a:7e:35:7e:
31:bf:9e:06:67:6c:4a:ee:fb:27:a3:31:b3:ad:f5:a9:88:77:
ea:96:35:1c:20:7f:00:74:b1:8a:cc:61:c8:7f:9d:e9:9a:6e:
be:55:d2:67:9a:18:20:47:e3:b2:02:ec:8e:39:76:57:fe:28:
93:57:b2:34:5b:17:15:09:f9:ac:d9:da:6c:a1:1d:21:bf:d1:
34:3b:42:e9:37:c3:00:40:22:57:7f:42:19:ff:9d:c4:06:6d:
54:b9:98:2b:0c:a1:9e:28:48:7a:e5:74:c7:3c:e4:c3:9d:71:
ef:e4:c1:25:cd:c1:2b:aa:14:98:92:58:ee:c5:ed:ac:cd:93:
54:44:d7:2c:d7:6b:60:d2:e9:d0:b8:28:4d:91:33:e3:0f:a1:
fa:60:76:73:ef:64:e7:0c:ff:36:fa:41:b2:e7:36:c9:ab:64:
9b:b9:39:a3:47:74:92:5a:68:b8:9c:80:c2:f3:5f:a7:c2:b3:
06:1c:59:d2:ff:08:a5:43:8b:fc:f7:c7:f8:7a:3c:25:40:fb:
80:22:90:6c:43:8c:3b:2b:c5:f9:e9:53:c3:b2:69:0e:b6:23:
6c:b8:b2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:04:04 2025 by rpki-client