This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dd6d8f2a-322b-3f67-afad-827d03321a91.roa
File: dd6d8f2a-322b-3f67-afad-827d03321a91.roa (raw, json)
Hash identifier: 4TPJ4SkKObBvydTXz/S8+W2/E32CgYPVwW4shCem1EA=
Subject key identifier: 2A:43:19:C2:C8:72:17:2C:50:86:FB:AA:9A:89:C6:7F:1E:70:6E:7E
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584C222D6CC2991DD99811D6C040
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dd6d8f2a-322b-3f67-afad-827d03321a91.roa
Signing time: Tue 09 Dec 2025 21:03:39 +0000
ROA not before: Tue 09 Dec 2025 21:03:39 +0000
ROA not after: Mon 09 Mar 2026 20:03:39 +0000
asID: 7029
IP address blocks: 198.170.0.0/17 maxlen: 24
198.171.0.0/16 maxlen: 24
198.172.0.0/18 maxlen: 24
198.173.64.0/18 maxlen: 24
199.103.192.0/18 maxlen: 24
199.236.0.0/16 maxlen: 24
199.237.0.0/18 maxlen: 24
199.237.128.0/17 maxlen: 24
199.239.192.0/18 maxlen: 24
206.50.64.0/18 maxlen: 24
206.184.64.0/18 maxlen: 24
206.184.128.0/17 maxlen: 24
206.239.64.0/18 maxlen: 24
206.239.128.0/17 maxlen: 24
207.20.0.0/18 maxlen: 24
207.20.128.0/17 maxlen: 24
207.137.128.0/17 maxlen: 24
209.39.128.0/17 maxlen: 24
209.57.128.0/17 maxlen: 24
209.70.0.0/17 maxlen: 24
209.70.128.0/18 maxlen: 24
216.42.0.0/17 maxlen: 24
216.44.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 17 Dec 2025 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:22:2d:6c:c2:99:1d:d9:98:11:d6:c0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 9 21:03:39 2025 GMT
Not After : Mar 9 20:03:39 2026 GMT
Subject: CN=6e0c6127-3080-430b-872e-c568cf1291e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8b:a5:10:33:98:1b:b6:91:fc:bc:a6:23:5d:
d4:93:43:03:ca:56:f8:ca:08:a2:b5:59:a4:ef:33:
f3:f3:6b:7c:f9:0d:79:2a:0f:ec:9f:8d:24:41:06:
15:7f:c5:55:29:0e:e0:12:b0:6b:93:9f:ca:35:15:
80:ed:ad:4f:e6:16:c1:c4:ba:63:df:3e:7f:74:2f:
e6:bf:34:04:90:e6:28:c3:6d:8c:06:67:42:94:67:
74:25:80:99:56:d6:df:18:6c:7c:5f:72:be:b7:db:
bf:04:02:55:9e:48:0a:f2:ff:79:bf:48:c5:ad:92:
e8:4c:33:86:7c:c1:17:50:7c:a1:6d:91:11:56:1f:
df:e2:7f:1e:84:b3:93:fc:57:43:a4:a6:24:b2:ed:
24:d2:6a:48:ee:d1:4a:f6:3a:ba:3e:8e:40:55:75:
58:3d:0a:82:35:e3:d3:44:c4:94:2e:0b:fb:2e:ba:
a1:7f:3f:dd:59:b0:18:12:cd:e8:b5:a5:a7:ae:26:
c7:80:f0:5b:04:d0:29:7a:c5:01:90:a8:a2:d1:6e:
f2:59:99:6c:e7:56:93:fb:8c:b5:16:25:d1:e0:8b:
72:fd:99:2a:5a:08:9e:73:9e:91:af:f6:d4:4c:c8:
d2:2f:cd:41:ad:08:6a:1f:18:5c:9d:76:e3:04:f5:
f1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:43:19:C2:C8:72:17:2C:50:86:FB:AA:9A:89:C6:7F:1E:70:6E:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dd6d8f2a-322b-3f67-afad-827d03321a91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.170.0.0/17
198.171.0.0-198.172.63.255
198.173.64.0/18
199.103.192.0/18
199.236.0.0-199.237.63.255
199.237.128.0/17
199.239.192.0/18
206.50.64.0/18
206.184.64.0-206.184.255.255
206.239.64.0-206.239.255.255
207.20.0.0/18
207.20.128.0/17
207.137.128.0/17
209.39.128.0/17
209.57.128.0/17
209.70.0.0-209.70.191.255
216.42.0.0/17
216.44.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:02:3b:08:69:87:c3:6d:10:60:43:90:86:83:74:54:1f:b1:
8d:30:60:b7:74:ad:a9:eb:b3:c2:12:84:c2:cd:24:f3:f9:a6:
79:a1:93:48:9f:72:4f:e0:a1:9b:d3:31:33:3e:0c:23:ff:42:
b5:93:fe:45:3e:93:0c:0f:ff:a5:0c:64:b5:72:8f:a7:3f:39:
f9:80:90:09:41:42:01:bb:1b:d1:9a:a5:23:c2:d6:5e:37:fd:
7e:84:58:8a:2d:76:c6:14:2a:ac:71:1c:46:eb:a6:90:1d:96:
b4:62:8f:3e:3f:ce:b8:b8:77:24:c7:8f:40:4a:7d:71:e1:06:
f6:1c:76:d6:c8:e9:f2:65:fc:ef:82:f2:22:34:52:1f:7b:bf:
c4:84:6a:e3:2a:5e:ac:bc:fb:7a:ac:5e:29:6b:e7:ef:44:0f:
ea:99:f3:7b:c7:e2:f0:9e:10:77:3f:d7:06:e2:b9:db:74:3d:
23:b7:92:84:cd:e0:e3:af:dc:24:03:94:0f:33:44:53:5a:31:
d1:c5:3a:d9:1a:f7:27:93:b2:44:9d:97:ba:dd:53:1d:13:49:
cf:03:38:fd:51:08:8a:c7:18:c4:f6:67:4e:e0:a0:40:81:53:
af:1a:a5:ca:30:71:68:41:0a:cb:17:3b:fe:b2:c5:49:3f:7a:
f5:9c:77:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:56:59 2025 by rpki-client