This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ff3dbfc2-21d7-391e-85a3-49fe7943fbfc.roa
File: ff3dbfc2-21d7-391e-85a3-49fe7943fbfc.roa (raw, json)
Hash identifier: GI23ki1mJcvzrZgRzyc9T0vobzZ39f8RTo4agyRmToU=
Subject key identifier: E2:09:56:BB:BA:47:0A:EA:56:D7:5C:D2:36:CE:88:11:A2:A1:76:76
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584C34E657D1022DE0663B5FD590
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ff3dbfc2-21d7-391e-85a3-49fe7943fbfc.roa
Signing time: Tue 16 Dec 2025 14:00:38 +0000
ROA not before: Tue 16 Dec 2025 14:00:38 +0000
ROA not after: Mon 16 Mar 2026 13:00:38 +0000
asID: 41264
IP address blocks: 104.133.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:34:e6:57:d1:02:2d:e0:66:3b:5f:d5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Dec 16 14:00:38 2025 GMT
Not After : Mar 16 13:00:38 2026 GMT
Subject: CN=7ab3a002-914e-40b7-a2d2-800f12e1d576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b3:e5:20:1c:6a:52:47:94:5b:27:f1:f9:53:
c4:ce:30:cd:be:96:43:79:32:55:2e:43:ed:e2:55:
5d:3f:69:d8:9d:c7:67:a9:0b:ff:ee:e4:03:85:b1:
84:12:18:7f:81:fd:e0:76:6a:6f:29:82:a9:ad:1c:
d6:42:9a:19:59:05:66:28:7f:19:d5:7d:d0:82:60:
9e:ea:07:48:de:22:cb:dd:f5:f3:d9:77:fe:70:20:
e2:d5:dc:c5:94:d8:7c:75:6a:7a:9d:e6:46:ce:38:
d4:34:68:47:6b:fc:b0:72:fc:38:ae:22:5f:88:1e:
08:99:2e:3a:60:a0:31:c5:05:0f:24:dc:18:6a:1a:
97:16:81:47:36:c0:93:0b:3d:8f:de:6c:58:e3:7b:
84:4c:1c:41:af:79:bf:cd:1d:e6:07:07:1b:e8:12:
67:ae:e6:34:e4:e8:9d:d3:cc:af:96:7b:02:7d:d7:
73:b6:5d:ae:ac:f7:d3:0d:44:25:76:66:2e:a1:0c:
1d:72:c5:e9:67:cb:82:7f:59:fd:eb:d8:e3:1d:d9:
c0:c4:78:a8:c5:97:94:2b:b8:00:b1:3e:c6:1e:d5:
92:0a:91:34:0c:07:4d:9c:06:d7:a3:17:c5:34:d4:
b7:89:cb:0b:7a:1c:ac:20:27:16:c1:dd:cb:49:8c:
03:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:09:56:BB:BA:47:0A:EA:56:D7:5C:D2:36:CE:88:11:A2:A1:76:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ff3dbfc2-21d7-391e-85a3-49fe7943fbfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:f5:9f:5f:e6:30:de:78:44:3d:a8:56:17:d9:96:d1:e1:5b:
72:70:71:cf:38:3e:92:6a:12:fd:14:33:3d:37:48:a4:5c:0f:
1e:1d:cb:f8:d2:84:9b:9e:eb:57:1b:89:ab:14:46:36:95:42:
68:d5:bd:2e:f1:a8:ac:ca:8b:8f:94:9d:22:23:97:59:0d:82:
09:aa:1f:b2:e4:f5:a4:94:e0:bf:ac:1e:a7:bb:64:3c:80:3e:
3a:a2:f0:28:18:b4:c4:31:9c:4f:bd:a4:b2:1b:b1:e7:8f:9e:
b3:90:85:c4:55:58:06:44:38:b3:71:e2:51:1d:2e:4d:f9:ae:
8e:8a:ef:da:73:c9:2d:23:3f:3e:23:75:37:1b:99:af:38:ff:
66:8b:f6:01:a4:4c:06:f1:4d:06:cc:7c:09:a9:fd:60:2d:66:
ee:fd:5d:aa:9b:f1:47:61:1e:34:6f:6a:45:da:08:27:8d:ca:
43:86:56:03:ee:68:6b:a9:b1:2e:ea:9d:f1:26:4b:fb:ed:dd:
4c:dd:76:6a:bf:5e:5c:c9:9d:21:64:d0:2e:40:f2:56:f6:e3:
35:4b:b2:0f:44:a7:98:eb:1f:dc:55:81:e6:be:b0:82:0b:e1:
50:d1:92:43:1e:d4:a8:9d:9f:19:01:6e:13:7a:6a:2d:80:f8:
f8:68:20:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:56:31 2025 by rpki-client