This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8247a5ea-22ad-3fea-afa9-0b471461850c.roa
File: 8247a5ea-22ad-3fea-afa9-0b471461850c.roa (raw, json)
Hash identifier: pPtwmHOSnaMkYBXfUZ9ByIOIoXLlVXi347CWX5Yvk80=
Subject key identifier: 4E:FF:A9:1D:11:25:21:72:FF:6B:EE:39:09:E8:11:C0:6A:01:C8:D6
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584C34E67573BF2FC1B213F1DA80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8247a5ea-22ad-3fea-afa9-0b471461850c.roa
Signing time: Tue 16 Dec 2025 14:00:38 +0000
ROA not before: Tue 16 Dec 2025 14:00:38 +0000
ROA not after: Mon 16 Mar 2026 13:00:38 +0000
asID: 41264
IP address blocks: 104.133.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:34:e6:75:73:bf:2f:c1:b2:13:f1:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Dec 16 14:00:38 2025 GMT
Not After : Mar 16 13:00:38 2026 GMT
Subject: CN=2c0aa937-e5ed-41d4-afbd-2edc75cde470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a3:d0:a1:9b:3d:8d:cb:80:c8:59:ae:37:dd:
67:4e:f6:27:42:e1:48:75:a1:63:dc:8e:fc:75:ab:
df:6f:06:34:86:be:0f:bd:42:32:b8:f7:3d:08:ed:
75:42:69:d8:d5:93:f0:e4:51:05:da:bc:df:3e:1b:
f7:65:02:8a:0e:ad:d4:78:b1:9e:7b:91:1f:d8:e5:
3d:b0:fa:a7:81:1a:24:cc:84:cf:ce:64:95:85:90:
be:c2:4e:1c:3f:bf:8f:c1:36:40:a6:38:e6:c4:b0:
7b:0b:10:0c:cb:4f:73:a1:30:60:ff:ae:60:e0:9e:
46:00:aa:bf:65:45:bc:96:f3:60:80:25:ff:e6:8b:
cf:8b:77:99:28:a5:f0:2e:55:28:cb:75:4d:36:ec:
2e:c4:be:31:fe:20:da:f9:be:2d:0e:3d:9a:2c:55:
5e:07:52:c7:25:f1:7f:0e:ad:49:c9:2f:e6:e1:8a:
52:53:c5:3e:62:03:f8:b3:15:d5:1a:d9:c2:c7:ef:
a8:d3:d1:79:d4:2f:d6:32:e0:c9:6a:cf:87:fc:35:
cd:e7:bd:a2:ef:40:ff:59:de:59:ac:7f:46:94:a0:
43:e1:ae:23:36:43:f4:52:a1:da:22:46:5d:03:d8:
9b:7f:19:67:50:b0:42:9d:f1:01:4c:c1:9e:62:30:
34:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FF:A9:1D:11:25:21:72:FF:6B:EE:39:09:E8:11:C0:6A:01:C8:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8247a5ea-22ad-3fea-afa9-0b471461850c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:9c:45:f3:2c:dd:11:3a:de:89:eb:f9:4d:ef:1f:f9:f1:bc:
08:23:ff:c4:ec:47:4d:5f:59:53:e6:f2:64:1a:71:88:12:39:
d4:07:5e:b7:46:ec:a2:cb:f5:cd:77:70:4f:c0:b6:dc:2a:b5:
33:77:66:5a:24:56:3c:fa:45:78:dd:6a:d8:b3:7d:3d:b8:f2:
e1:c6:7d:d6:5b:7c:45:82:71:b8:3a:d1:cf:f5:57:86:6c:89:
84:f5:aa:81:ee:5b:77:2a:c6:b5:a4:8a:05:d3:5d:7c:7d:74:
38:12:84:ef:54:e0:63:d8:9e:a7:26:62:e4:d3:e9:37:cd:35:
a7:d3:e9:ff:9b:2d:55:f0:6b:3c:6c:c6:04:91:4f:31:5f:a1:
53:8b:69:c5:32:f7:26:a2:c6:c2:ce:b5:aa:01:c0:89:a2:24:
18:bd:65:75:8f:63:8f:de:27:50:f8:5e:26:2c:81:b3:cc:6b:
18:b1:9d:41:0a:3c:c9:62:4f:7b:fd:78:66:25:55:c7:2c:64:
40:6d:20:74:a1:58:db:d4:14:0b:0a:4c:4a:c0:09:6d:e4:2d:
74:40:84:17:1d:db:7a:95:2e:af:28:3e:ea:88:56:8d:89:b5:
60:b8:27:e5:bd:3a:0c:9e:fa:65:ba:dd:b5:9a:90:ae:51:24:
63:52:4a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:47:39 2025 by rpki-client