This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fbad288e-40ff-39e8-ad0c-a4eef8fcefcb.roa
File: fbad288e-40ff-39e8-ad0c-a4eef8fcefcb.roa (raw, json)
Hash identifier: WPZai37Jqq4jArQZn0WR6Jd38fC6UQDcAFmQRfzMZfc=
Subject key identifier: 9B:14:BC:7C:43:96:F5:D0:F7:85:7A:83:06:F4:50:B8:B3:AF:03:2B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584C258B850A83DBAAB971C44F00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fbad288e-40ff-39e8-ad0c-a4eef8fcefcb.roa
Signing time: Thu 11 Dec 2025 02:00:30 +0000
ROA not before: Thu 11 Dec 2025 02:00:30 +0000
ROA not after: Wed 11 Mar 2026 01:00:30 +0000
asID: 13335
IP address blocks: 172.64.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:25:8b:85:0a:83:db:aa:b9:71:c4:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:00:30 2025 GMT
Not After : Mar 11 01:00:30 2026 GMT
Subject: CN=3dd38143-11e9-4235-b47b-26bdb9a977f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2b:58:81:8d:7b:6e:09:a2:56:06:c1:b2:4d:
5b:72:a0:59:c9:62:0d:df:91:24:78:bc:9a:c1:67:
6f:de:67:a1:3f:15:e1:6c:3f:d3:a8:24:12:fe:55:
2e:11:34:f1:0f:c1:68:19:33:58:8b:c9:f4:6e:0c:
27:1d:34:f6:cf:19:c4:b7:38:48:40:86:b2:59:be:
f2:9f:72:0c:5d:80:fb:31:7f:42:c0:78:05:88:5c:
f3:f9:4f:36:fd:75:67:52:4f:15:7f:be:3d:1e:e5:
de:5c:f3:0d:19:d5:4c:23:eb:86:b5:57:cb:39:86:
f1:e5:24:b3:65:e0:d4:0c:15:3d:c1:a1:a2:6b:de:
64:dc:80:90:96:7c:43:e0:09:21:5f:33:fb:0b:f7:
ce:8d:04:03:01:63:d1:e2:75:ff:2a:c3:2a:7f:3d:
b6:fd:8b:12:d2:44:1c:ba:af:75:6d:a6:64:6f:78:
0f:ac:1e:20:a5:c2:32:bd:67:5e:ea:c1:63:26:81:
df:6c:5b:70:6d:11:d6:b6:85:34:be:a3:2e:9e:aa:
f0:f1:39:f9:c6:5c:77:2f:5f:dc:f4:d0:7a:5b:74:
9f:35:39:cc:31:7c:93:8f:d6:d7:02:57:7b:82:80:
73:39:13:ac:08:77:9b:b3:fe:60:a2:9b:bf:a0:13:
5b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:14:BC:7C:43:96:F5:D0:F7:85:7A:83:06:F4:50:B8:B3:AF:03:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fbad288e-40ff-39e8-ad0c-a4eef8fcefcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:12:3f:e1:0b:0e:05:ca:25:f8:af:8d:5b:f4:5d:60:cd:d8:
26:5c:8a:2d:1d:27:1b:1f:20:b2:29:bd:ad:ca:a4:b6:b6:ce:
47:28:5f:74:a2:b0:ea:d0:28:ec:e2:a3:2f:12:44:34:fb:76:
9f:f7:5e:b5:aa:f6:5e:99:df:7d:42:a9:6e:4a:20:9b:8c:f9:
9a:92:85:66:f5:96:77:5a:0a:f0:13:9f:13:5c:94:34:8e:48:
fc:86:f8:70:8b:50:93:a0:d0:63:17:0c:82:01:59:e6:72:5f:
9b:35:e9:6e:f1:96:a9:94:c0:4c:3b:9a:2b:cb:81:7f:8a:7e:
57:85:ca:eb:12:14:98:ff:5f:a0:60:e1:27:55:e9:a4:b8:51:
df:79:11:3f:84:06:34:22:b4:8c:a2:2f:44:ea:9d:3e:b3:73:
3e:63:9e:a4:65:32:40:e0:3e:b9:e7:a8:6f:77:c3:4a:cb:90:
f1:4a:f8:92:53:75:3f:3c:3b:38:9a:4d:69:0b:45:7c:f4:2e:
8e:a9:20:88:7c:4f:3c:8b:b3:92:99:1b:74:9c:46:98:8c:aa:
ef:d3:d4:39:e9:7d:39:2f:29:38:b6:d1:33:85:07:c1:aa:89:
ac:ec:27:bd:d1:bb:d2:ce:a2:2b:cb:ca:76:67:73:75:8d:41:
cf:5d:f5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:01:55 2025 by rpki-client