This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/49d8c248-3e47-313c-9e44-7d968df76125.roa
File: 49d8c248-3e47-313c-9e44-7d968df76125.roa (raw, json)
Hash identifier: bOFrFmce9Le9GdZAR7h+Yt1B+x8VZHA29P0GWOEFqww=
Subject key identifier: E9:95:2C:73:70:DD:DA:25:CF:DA:8E:B4:63:22:C4:A7:74:81:D5:60
Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial: 010D0C9F4328584C34E679B9AC873585678B1FF0
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/49d8c248-3e47-313c-9e44-7d968df76125.roa
Signing time: Tue 16 Dec 2025 14:00:38 +0000
ROA not before: Tue 16 Dec 2025 14:00:38 +0000
ROA not after: Mon 16 Mar 2026 13:00:38 +0000
asID: 0
IP address blocks: 66.1.0.0/16 maxlen: 24
66.87.0.0/16 maxlen: 24
66.233.0.0/16 maxlen: 24
67.215.108.0/22 maxlen: 24
71.20.0.0/14 maxlen: 24
72.6.0.0/15 maxlen: 24
72.57.32.0/19 maxlen: 24
75.92.0.0/14 maxlen: 24
96.26.0.0/16 maxlen: 24
142.255.128.0/18 maxlen: 24
144.227.0.0/16 maxlen: 24
144.231.0.0/16 maxlen: 24
148.52.128.0/19 maxlen: 24
198.57.16.0/21 maxlen: 24
198.57.24.0/23 maxlen: 24
207.52.0.0/16 maxlen: 24
207.167.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:34:e6:79:b9:ac:87:35:85:67:8b:1f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Validity
Not Before: Dec 16 14:00:38 2025 GMT
Not After : Mar 16 13:00:38 2026 GMT
Subject: CN=bd708093-b8d0-440c-ac16-3a71f1147d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:a7:74:15:52:9a:be:19:59:c4:52:83:c4:
cc:e7:da:2f:a3:0a:ac:40:58:d7:b9:b9:01:20:31:
ab:e2:06:09:80:7b:9f:cd:f2:6a:bc:7a:23:d8:f4:
2e:9a:f8:12:b2:f5:0e:01:c7:ab:7d:02:d7:68:07:
3b:4e:81:41:8f:88:dd:79:b3:63:54:59:23:57:a7:
fe:81:28:c8:58:20:47:02:4c:9a:11:b0:ed:b2:6b:
37:67:0a:ca:35:ab:bf:6c:44:e2:ad:6d:71:90:c8:
ec:c4:27:a8:0b:d4:b4:13:d2:95:25:ca:15:13:08:
86:67:2a:0e:67:03:5f:b6:92:1b:6e:42:5a:c4:d0:
0b:74:be:5c:af:d5:69:64:0c:32:6a:76:2f:a7:6b:
3f:da:3b:7a:6d:54:00:6c:16:19:6c:e0:41:cd:cc:
8e:92:82:5b:d8:c4:7a:7c:b2:19:65:98:fc:48:1d:
66:f9:21:0f:d8:8c:8d:70:dc:bf:c4:ae:bf:49:53:
5b:4a:af:15:f5:08:84:15:97:fd:1b:5a:c1:aa:b7:
4f:b0:1b:46:d4:12:a0:d9:2d:79:44:9a:f1:be:40:
53:e9:94:0a:f0:98:3e:26:0c:59:1f:d9:7e:5e:9c:
fa:93:9e:ec:c3:ec:1b:a2:21:4c:3a:e3:0a:17:3a:
3f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:95:2C:73:70:DD:DA:25:CF:DA:8E:B4:63:22:C4:A7:74:81:D5:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/49d8c248-3e47-313c-9e44-7d968df76125.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
X509v3 Authority Key Identifier:
keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.1.0.0/16
66.87.0.0/16
66.233.0.0/16
67.215.108.0/22
71.20.0.0/14
72.6.0.0/15
72.57.32.0/19
75.92.0.0/14
96.26.0.0/16
142.255.128.0/18
144.227.0.0/16
144.231.0.0/16
148.52.128.0/19
198.57.16.0-198.57.25.255
207.52.0.0/16
207.167.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:90:03:c9:03:81:22:e9:24:26:d3:c1:b4:ad:fb:de:62:a8:
30:01:1e:59:dc:6f:d0:c1:77:6a:bb:cd:7c:e1:88:17:30:4a:
e3:f4:68:ec:ae:0d:22:ea:de:b0:71:68:29:77:a6:72:08:96:
5a:49:63:c6:5e:99:7e:f4:e0:6f:bc:23:61:5c:18:f2:df:d0:
02:61:f1:bd:15:c5:67:3c:83:89:d9:5c:c3:a3:0e:2a:da:b7:
32:17:19:d3:e2:42:5e:ae:18:f8:d4:89:f0:5a:6f:e7:36:a2:
12:65:8a:e0:71:0c:ff:0a:b5:3d:b9:56:e3:08:7c:1a:5a:d7:
ef:48:52:4b:a1:f5:a8:4e:e8:10:f6:3e:58:6b:b4:b1:97:3b:
43:c7:67:a7:45:c6:cd:9f:a0:a8:75:a9:cb:6b:2a:88:f8:7d:
f1:e6:4e:c6:53:bc:35:d0:37:1d:94:ff:8f:b7:97:e6:a0:b6:
33:de:6c:8a:8c:85:3d:23:f1:21:7a:19:6e:cb:a6:9c:d2:d0:
43:2e:8d:a8:cb:c9:25:32:ac:24:1f:87:15:84:8c:1b:f2:2e:
b6:90:f4:d4:4e:a4:d9:a9:0d:ea:be:33:d4:6b:d1:bb:2f:42:
7c:4b:ba:6b:a3:a1:5b:97:46:46:1c:d3:65:90:f8:ec:c8:18:
2f:f7:81:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:10:02 2025 by rpki-client