This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a70cb687-faed-31e5-a935-8278dec6f2f2.roa
File: a70cb687-faed-31e5-a935-8278dec6f2f2.roa (raw, json)
Hash identifier: X+0GWde0ehBPvL0tdohni6o4ph3Yy7Aew1OXjfN1uPs=
Subject key identifier: 53:AA:58:3B:04:BA:E6:F4:B9:8E:5F:E1:0E:3B:C6:A9:58:78:6E:A4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584C3381157964647574489297A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a70cb687-faed-31e5-a935-8278dec6f2f2.roa
Signing time: Tue 16 Dec 2025 02:00:31 +0000
ROA not before: Tue 16 Dec 2025 02:00:31 +0000
ROA not after: Mon 16 Mar 2026 01:00:31 +0000
asID: 33491
IP address blocks: 68.58.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:33:81:15:79:64:64:75:74:48:92:97:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 16 02:00:31 2025 GMT
Not After : Mar 16 01:00:31 2026 GMT
Subject: CN=dcd90083-27c0-4d3b-a6c2-85aa5491b284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:25:15:0e:a2:eb:e7:0b:9d:f8:e4:d0:e7:13:
04:69:0e:6a:b8:cf:1d:9c:96:b2:c8:30:e0:2a:d3:
dd:b8:a7:84:6e:ad:c3:66:c0:da:98:65:8a:37:51:
1b:3d:e6:03:50:ed:a5:1a:6a:8c:23:b0:5a:be:db:
b3:38:0b:91:2d:80:12:d4:24:7f:d3:64:37:92:0c:
0d:e9:c0:b5:82:83:68:94:fb:75:ac:d3:7d:e1:71:
e3:18:33:46:35:41:61:67:05:da:bf:98:7a:0e:6d:
7d:c0:06:e4:7f:6b:66:94:b7:66:0c:b2:2c:cc:fa:
4d:e2:8e:58:8b:cb:3c:dc:7e:ba:5b:6d:a7:66:ec:
f3:33:5f:a7:7a:4e:d4:e5:38:4b:7f:c8:e2:db:d3:
a4:f6:13:2f:ba:0b:33:23:85:c6:2c:1e:c8:d8:62:
5f:63:7c:9b:a8:4b:6f:b8:f3:fc:aa:21:a1:52:5a:
4e:39:77:51:44:ed:f8:4b:78:56:b8:8b:4b:71:e0:
40:e2:84:72:38:8f:e9:85:c7:37:f6:23:5e:ea:51:
5f:1c:fc:3d:09:b0:ad:c9:1e:62:7d:46:cd:0a:f9:
78:23:de:f5:6a:6c:d6:95:08:53:17:d2:58:04:ee:
80:7a:4e:c5:51:e6:b1:ec:bf:60:c4:24:7b:99:2f:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AA:58:3B:04:BA:E6:F4:B9:8E:5F:E1:0E:3B:C6:A9:58:78:6E:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a70cb687-faed-31e5-a935-8278dec6f2f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.58.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:a9:c8:61:46:2b:c4:27:f5:61:b3:fc:79:7e:cc:b6:0f:75:
ba:9a:26:db:b4:50:e1:20:dc:b1:29:94:b4:f1:47:f9:cc:52:
64:fa:83:b9:06:dc:f7:74:41:a1:6a:33:02:55:79:59:98:da:
7d:be:44:59:1d:5d:81:10:ed:d0:a0:96:ce:11:4c:d9:96:b8:
1a:bd:ef:f9:a9:64:e5:18:53:13:24:d9:c5:ba:d0:0f:14:60:
1f:03:2d:34:ac:0c:92:a1:75:d0:17:d3:c6:d8:bc:5f:47:46:
8a:be:ea:8d:17:b7:0a:c1:77:84:76:e3:c1:04:8c:d4:7c:57:
22:96:25:92:a9:ab:42:58:14:83:ce:55:89:15:c8:1c:c5:39:
f2:96:d9:3a:cf:ee:59:7d:7a:01:fe:93:61:78:44:36:a1:e4:
20:fa:13:46:cb:4d:1a:64:21:c5:d4:ce:34:d1:b9:89:46:a0:
8f:b7:1e:ae:d0:17:2e:02:c3:bf:bb:e9:1f:e5:74:04:8d:47:
2e:30:e2:8d:5f:6e:c2:cf:7f:5a:66:d2:e3:ce:b9:9e:0c:0d:
71:73:4f:6a:c7:f7:26:b3:f1:37:5d:b5:e9:3c:ea:8a:5c:e3:
03:e7:40:3c:38:0b:8a:c0:d6:25:ce:fa:68:3e:31:36:49:15:
b9:7a:fd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:56:43 2025 by rpki-client