This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0258d4d8-1e81-3948-9d97-c298972ed3e9.roa
File: 0258d4d8-1e81-3948-9d97-c298972ed3e9.roa (raw, json)
Hash identifier: YZG6/U84rtd+HXvEZ7c+QAaL4W51Gz3OC7jH2XRVWrA=
Subject key identifier: DC:6C:24:82:F6:8B:0F:0B:DE:A6:6B:49:B3:E7:58:DB:A7:6E:DA:30
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584C1E9280EB7EF4138548547D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0258d4d8-1e81-3948-9d97-c298972ed3e9.roa
Signing time: Mon 08 Dec 2025 14:00:38 +0000
ROA not before: Mon 08 Dec 2025 14:00:38 +0000
ROA not after: Sun 08 Mar 2026 13:00:38 +0000
asID: 22909
IP address blocks: 68.53.170.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:1e:92:80:eb:7e:f4:13:85:48:54:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 8 14:00:38 2025 GMT
Not After : Mar 8 13:00:38 2026 GMT
Subject: CN=20b4ff16-22cc-4730-82bd-b2c25b75818d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bb:e7:8f:a6:86:78:7d:a2:d9:48:dd:0c:b2:
f5:cf:63:7f:11:59:e2:18:3b:86:25:3b:e8:5c:c1:
ec:45:0b:e9:d0:79:88:32:39:47:a7:5d:98:1c:92:
7c:11:cb:6c:c1:30:b5:a6:3a:cd:ec:32:7f:cf:f1:
18:3d:51:15:87:5d:77:b4:e9:b2:1c:ca:cf:0b:12:
6a:5e:d1:68:98:9d:4b:1e:cc:be:f9:99:43:51:05:
64:a4:a5:8d:cc:17:7c:4c:51:79:dd:49:34:af:bf:
0f:09:68:10:1d:68:e3:ee:cb:fd:64:1a:38:46:63:
95:e7:09:02:99:e3:45:6b:3c:f0:0b:dc:7e:2e:36:
a2:30:20:02:96:b1:ec:e0:49:18:d4:f1:08:05:66:
6e:b2:11:48:72:35:a4:65:b6:c8:5c:cc:0f:ec:9b:
30:88:1b:13:5e:51:b8:d3:eb:ab:50:7a:cd:a7:83:
d9:7f:d2:88:c5:de:95:77:db:3c:44:6d:4d:46:a5:
18:eb:2f:3e:8f:a8:fd:91:0f:27:a5:2a:3c:d6:2a:
3c:de:d4:01:86:db:ee:e0:fd:12:12:4c:2c:04:3d:
e9:a0:3d:25:5d:1e:a6:e9:e2:cc:94:5d:4f:9c:5c:
c6:b3:a2:ec:e9:28:47:27:1e:77:5a:51:6f:ae:2d:
44:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6C:24:82:F6:8B:0F:0B:DE:A6:6B:49:B3:E7:58:DB:A7:6E:DA:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0258d4d8-1e81-3948-9d97-c298972ed3e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.53.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:f4:16:33:d4:6f:e2:a6:06:de:b5:9b:d0:68:e2:b5:d7:35:
02:07:eb:84:79:54:28:08:3f:6d:ec:a1:92:ed:ac:26:9e:06:
1f:6e:d2:e2:31:5a:f7:2e:4d:07:0f:69:89:4e:fe:af:98:a8:
09:0a:ac:50:a6:30:35:ce:39:e6:ee:ad:2d:fc:f0:8e:25:e4:
29:5b:28:85:59:46:06:4c:5d:44:74:99:ec:b5:cd:5c:0a:6a:
7c:ce:a6:9a:0b:04:6c:4c:fd:da:e1:4f:af:fe:c6:99:3b:3c:
43:97:a0:d8:bc:2e:d5:c8:46:91:82:52:e6:69:5a:06:8b:03:
de:7d:ef:39:63:4b:a5:d9:af:97:db:2d:12:6b:c2:e8:c2:42:
6d:1b:0d:02:ae:41:aa:2e:78:d3:c8:23:21:c0:df:1b:8e:66:
5d:1e:2e:48:27:83:a7:47:b8:9e:6d:72:52:7d:ae:dc:5a:af:
5b:47:b4:21:7c:8a:9d:2f:d7:57:89:b5:36:97:10:80:10:17:
9b:b0:e2:2c:54:f8:3a:16:ae:16:0b:fd:d9:d5:b3:00:3b:9d:
cb:98:b7:6f:07:e8:0d:92:64:63:1d:fc:96:74:10:1a:77:38:
ea:a2:c9:7a:fc:95:5d:f4:93:1f:36:f0:15:7e:3a:1d:77:b7:
46:d9:fb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:41:23 2025 by rpki-client