This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/296474ca-9a2b-35f1-a900-62276c4b824d.roa
File: 296474ca-9a2b-35f1-a900-62276c4b824d.roa (raw, json)
Hash identifier: 8YfrR50T0kO+z3pDgQE6LndkBzUs2gbNp1tGHqdhV/4=
Subject key identifier: 9A:4B:C0:A4:E9:0E:18:65:23:29:51:B0:F0:4C:AD:72:CD:65:19:B0
Certificate issuer: /CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5
Certificate serial: 010D0C9F4328584C215B8BBDA23985BE7BC1B8C0
Authority key identifier: 0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/296474ca-9a2b-35f1-a900-62276c4b824d.roa
Signing time: Tue 09 Dec 2025 14:00:38 +0000
ROA not before: Tue 09 Dec 2025 14:00:38 +0000
ROA not after: Mon 09 Mar 2026 13:00:38 +0000
asID: 16509
IP address blocks: 64.207.222.0/24 maxlen: 24
64.207.223.0/24 maxlen: 24
67.222.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:21:5b:8b:bd:a2:39:85:be:7b:c1:b8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5
Validity
Not Before: Dec 9 14:00:38 2025 GMT
Not After : Mar 9 13:00:38 2026 GMT
Subject: CN=e97ed76a-9f79-4600-8683-96b9c10de34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e3:8f:99:8b:33:ef:40:f2:97:5a:29:8d:19:
c2:4a:d0:4d:8c:20:4b:9f:17:2e:cf:eb:28:df:84:
db:9a:12:c7:a6:12:df:0c:78:90:24:17:e8:f6:ff:
f4:b6:f6:db:5d:45:08:4d:ee:c0:0d:36:33:86:86:
1f:81:95:de:d0:5a:89:06:81:18:3d:ae:79:21:95:
33:ff:92:08:67:77:e8:d0:92:bf:e3:21:47:09:2c:
fe:1d:a3:4f:89:2e:7d:80:fe:af:53:02:a4:b7:0c:
33:7d:ff:72:64:70:12:0e:8c:de:8d:cf:08:27:bf:
71:0f:44:bb:cc:ff:ea:e4:6d:d6:70:fb:2a:11:92:
d9:d6:92:76:9b:cf:f3:96:98:6d:f5:19:e1:fd:a7:
52:c5:14:72:43:06:04:71:af:d0:f0:d6:c9:52:e9:
06:55:94:99:37:e8:3f:76:d0:80:a6:58:ca:aa:1d:
9f:97:5e:f2:1f:82:a3:b4:67:be:82:60:bf:48:66:
d9:dc:5e:c3:16:40:da:e9:31:f1:ad:d6:20:4d:f9:
32:43:2d:00:15:2d:dc:63:0a:52:8f:9c:8b:35:25:
d1:4c:9b:bc:40:da:75:04:6b:4f:dc:04:3a:4b:ec:
74:ca:58:ac:ab:00:47:21:35:3c:2d:31:09:f0:ce:
ec:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4B:C0:A4:E9:0E:18:65:23:29:51:B0:F0:4C:AD:72:CD:65:19:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/296474ca-9a2b-35f1-a900-62276c4b824d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl
X509v3 Authority Key Identifier:
keyid:0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer
sbgp-ipAddrBlock: critical
IPv4:
64.207.222.0/23
67.222.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:29:51:58:ec:9e:3c:2d:3a:21:58:40:23:08:37:fa:70:fa:
fe:20:98:d6:fc:7f:e3:f9:51:f9:ae:d4:74:60:a8:a2:32:a7:
17:07:49:ac:c4:b5:9a:76:fc:6c:da:a2:eb:41:9c:aa:00:37:
51:52:03:ba:06:72:08:fb:ad:ec:a4:cb:0c:08:18:f2:87:62:
d3:8b:d4:b5:60:0b:c6:36:f5:df:de:6c:44:ef:2d:c2:04:ed:
ee:7b:87:d0:7a:91:65:61:d2:1a:b9:63:67:45:e9:31:56:93:
ed:66:8d:f2:f7:34:49:3b:bc:9c:c2:4f:d7:7d:81:5e:e4:48:
fc:d0:0e:02:17:f7:89:f3:7d:cc:34:98:00:a1:43:c0:ad:67:
a8:cb:12:db:03:93:64:4a:f0:e7:07:f7:fc:71:7d:51:89:dc:
4e:18:39:2b:fe:a1:02:2f:1b:67:38:c2:16:c9:1e:9e:ec:02:
83:f1:e7:c9:e9:36:9e:8c:3a:b8:61:00:c0:9a:54:d9:16:7a:
9e:f6:09:c1:83:ba:8d:33:20:79:d9:2c:da:8d:6f:18:f2:ac:
7e:ff:24:71:ce:20:ac:a2:58:d7:cc:b7:16:a2:31:23:88:f6:
32:af:a8:63:fa:fe:ad:40:0c:e1:1a:34:bb:26:9f:a3:c8:07:
52:2d:be:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:55:41 2025 by rpki-client