This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58220b8c-a4af-3db5-a8f3-6ec2fb794b2e.roa
File: 58220b8c-a4af-3db5-a8f3-6ec2fb794b2e.roa (raw, json)
Hash identifier: YIZWvDytsamgf0mbqCSrXXqSwtNcyDVHY+zM42S3XaI=
Subject key identifier: CA:B7:42:5E:8F:12:5B:E5:7F:52:9C:A3:20:81:AE:05:BE:79:4E:98
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584C1E911054473F49C4DDFCFE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58220b8c-a4af-3db5-a8f3-6ec2fb794b2e.roa
Signing time: Mon 08 Dec 2025 14:00:38 +0000
ROA not before: Mon 08 Dec 2025 14:00:38 +0000
ROA not after: Sun 08 Mar 2026 13:00:38 +0000
asID: 22909
IP address blocks: 73.121.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:1e:91:10:54:47:3f:49:c4:dd:fc:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 8 14:00:38 2025 GMT
Not After : Mar 8 13:00:38 2026 GMT
Subject: CN=a840df7d-70d0-4121-afe8-6ad43eede20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f2:d7:26:c4:6a:9c:b1:20:01:b5:82:20:64:
95:49:d2:53:a5:0d:11:f0:bd:19:39:65:16:1e:ac:
b7:35:d5:2f:fc:60:bf:f4:e4:b4:02:36:29:82:41:
dd:ca:07:32:88:bd:7a:bc:19:69:9a:d7:ee:ce:21:
17:bd:56:2d:c8:ee:3a:b4:d8:5a:70:39:5b:f6:55:
ad:50:29:14:d6:6d:3d:53:df:60:b1:ae:33:a2:f0:
ac:4d:53:2e:d0:ae:74:bf:bb:fb:3f:8e:df:c5:c0:
17:6e:a3:64:c0:42:b3:ce:25:e8:4e:7c:db:50:73:
86:21:99:0f:70:b8:03:3a:6d:07:0f:08:18:23:89:
69:98:7a:e1:a8:dd:8d:5e:43:36:fd:93:7d:55:57:
d1:38:9a:85:6c:4e:65:1b:60:cc:b5:0f:90:35:5d:
52:bc:21:79:e1:67:8d:af:e8:02:63:3d:89:89:54:
dc:3d:2d:23:c7:bd:e3:8a:57:40:33:58:1d:26:42:
a9:bd:d1:de:9a:1d:2f:1c:3b:fb:f8:e1:ee:62:18:
32:50:93:14:28:2a:72:7d:0a:6c:6e:12:0b:6e:f0:
7e:a5:c2:13:d9:35:65:e0:68:e8:0f:93:fc:ef:61:
cd:25:98:03:93:9a:aa:d8:04:8f:b6:79:78:50:8c:
86:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B7:42:5E:8F:12:5B:E5:7F:52:9C:A3:20:81:AE:05:BE:79:4E:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58220b8c-a4af-3db5-a8f3-6ec2fb794b2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.121.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:44:f4:97:9d:ae:61:42:30:85:e9:0a:22:12:37:c4:ed:78:
81:bf:c6:42:96:40:62:fb:1f:ec:5e:35:49:e7:3f:34:7b:6f:
24:3c:54:bc:a8:34:08:43:fc:ec:e7:a7:1d:bb:89:37:8d:28:
36:31:1f:bf:44:cf:7c:e8:17:73:6f:3e:2d:d0:f7:cc:ab:03:
88:9b:52:a5:83:7a:b3:75:24:ab:09:64:50:ab:86:bc:cf:bb:
8a:01:1f:31:69:ea:bd:4d:7f:1a:c7:62:82:62:5c:c6:79:b2:
b1:cc:77:38:ca:b6:03:f6:93:39:4f:74:2a:a8:d2:2a:d0:db:
fd:3c:0e:a2:ac:22:c7:56:c0:dc:5e:94:e3:64:17:8f:74:ff:
d7:0b:2d:bd:bb:50:94:a5:63:ad:1a:17:ce:f4:9d:06:7d:db:
ef:4a:e0:64:a1:15:40:c3:70:25:d7:54:11:34:5a:bb:e1:a1:
30:c2:56:9a:cd:06:b0:dc:5d:f4:95:cf:06:2b:06:77:56:7d:
94:47:93:85:e0:0e:3d:e8:a0:a0:15:76:db:48:38:2e:ad:49:
24:ea:ca:4a:01:82:77:3a:3d:3d:f4:84:66:c4:86:23:48:98:
4b:ef:95:db:8f:97:5f:68:f4:d8:14:e4:28:b0:bb:ec:09:b8:
e7:33:7e:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwekRBURz9JxN38/oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTIwODE0MDAzOFoXDTI2MDMwODEzMDAzOFowLzEtMCsGA1UEAxMk
YTg0MGRmN2QtNzBkMC00MTIxLWFmZTgtNmFkNDNlZWRlMjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvLXJsRqnLEgAbWCIGSVSdJTpQ0R8L0ZOWUW
Hqy3NdUv/GC/9OS0AjYpgkHdygcyiL16vBlpmtfuziEXvVYtyO46tNhacDlb9lWt
UCkU1m09U99gsa4zovCsTVMu0K50v7v7P47fxcAXbqNkwEKzziXoTnzbUHOGIZkP
cLgDOm0HDwgYI4lpmHrhqN2NXkM2/ZN9VVfROJqFbE5lG2DMtQ+QNV1SvCF54WeN
r+gCYz2JiVTcPS0jx73jildAM1gdJkKpvdHemh0vHDv7+OHuYhgyUJMUKCpyfQps
bhILbvB+pcIT2TVl4GjoD5P872HNJZgDk5qq2ASPtnl4UIyGCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMq3Ql6PElvlf1KcoyCBrgW+eU6YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTgyMjBiOGMtYTRhZi0z
ZGI1LWE4ZjMtNmVjMmZiNzk0YjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSXnIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACxE9JedrmFCMIXpCiISN8TteIG/xkKWQGL7H+xeNUnnPzR7byQ8VLyo
NAhD/Oznpx27iTeNKDYxH79Ez3zoF3NvPi3Q98yrA4ibUqWDerN1JKsJZFCrhrzP
u4oBHzFp6r1NfxrHYoJiXMZ5srHMdzjKtgP2kzlPdCqo0irQ2/08DqKsIsdWwNxe
lONkF490/9cLLb27UJSlY60aF870nQZ92+9K4GShFUDDcCXXVBE0WrvhoTDCVprN
BrDcXfSVzwYrBndWfZRHk4XgDj3ooKAVdttIOC6tSSTqykoBgnc6PT30hGbEhiNI
mEvvlduPl19o9NgU5Ciwu+wJuOczfgM=
-----END CERTIFICATE-----
Generated at Sat Dec 20 21:33:43 2025 by rpki-client