This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/bb5fb053-0a17-3122-970c-cf4d60448f9d.roa
File: bb5fb053-0a17-3122-970c-cf4d60448f9d.roa (raw, json)
Hash identifier: gkj9NYQWk+LiTp5LyMwYITlQiySkhMYPUR6ta0wAGlU=
Subject key identifier: 11:BE:32:D5:76:37:91:DB:30:55:21:84:7D:56:F5:F1:8F:B6:08:86
Certificate issuer: /CN=e659e35d-faf2-4685-b322-e54fbe3a41e9
Certificate serial: 010D0C9F4328584C3BE104B766F67425BE9B5F80
Authority key identifier: 0E:22:9A:4B:EB:5E:CF:B1:66:AB:A8:F5:E5:88:21:29:35:12:5A:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/bb5fb053-0a17-3122-970c-cf4d60448f9d.roa
Signing time: Fri 19 Dec 2025 02:00:31 +0000
ROA not before: Fri 19 Dec 2025 02:00:31 +0000
ROA not after: Thu 19 Mar 2026 01:00:31 +0000
asID: 23265
IP address blocks: 67.158.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 24 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:3b:e1:04:b7:66:f6:74:25:be:9b:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e659e35d-faf2-4685-b322-e54fbe3a41e9
Validity
Not Before: Dec 19 02:00:31 2025 GMT
Not After : Mar 19 01:00:31 2026 GMT
Subject: CN=ca12321f-7eec-42c0-9ccb-63d703957ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:e4:32:a1:4b:99:d1:3e:47:6d:34:87:6f:
5b:ed:7b:7c:90:30:f2:6c:4d:b3:92:98:4e:3c:8a:
6a:3e:03:03:90:97:34:63:6e:23:95:13:6c:fb:0c:
e9:a5:9e:e6:be:7b:26:71:b1:1e:35:c6:aa:e3:da:
6e:18:fe:df:42:94:af:97:d3:c1:9b:0e:b9:18:ba:
f9:ad:db:a3:c0:c8:f7:1c:68:a0:b0:6b:60:ed:a0:
9e:84:65:70:3d:62:cc:be:78:c6:02:ed:23:b2:7b:
ea:c7:c4:d0:71:e8:1a:86:10:4c:b8:4a:6d:b9:5d:
d9:d3:c3:65:45:be:5e:0f:be:d3:03:a8:20:82:85:
aa:a0:e4:92:1c:ce:80:27:25:47:de:f8:d2:7b:71:
0b:71:1c:f6:11:60:82:33:7d:dd:ec:0b:fd:4e:22:
99:d3:e9:37:9b:9d:b7:1b:2b:93:53:12:5c:6c:77:
09:7d:3c:8e:31:b0:84:f1:a0:bf:64:7b:b1:82:12:
ec:50:6c:7e:30:c9:c1:e4:eb:6e:59:d2:fb:ef:44:
cc:c0:c4:62:65:f5:13:7c:be:5e:52:69:d6:9e:25:
f0:9e:d9:63:9a:69:68:39:cd:b1:fc:2e:8d:c1:03:
19:df:fc:36:e5:33:7d:60:62:08:cd:7c:a7:de:0e:
f6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BE:32:D5:76:37:91:DB:30:55:21:84:7D:56:F5:F1:8F:B6:08:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/bb5fb053-0a17-3122-970c-cf4d60448f9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.crl
X509v3 Authority Key Identifier:
keyid:0E:22:9A:4B:EB:5E:CF:B1:66:AB:A8:F5:E5:88:21:29:35:12:5A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer
sbgp-ipAddrBlock: critical
IPv4:
67.158.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:27:7e:0a:54:02:0e:b6:51:ce:a2:8c:48:b4:25:97:35:61:
ba:fd:83:fc:af:08:bf:b3:29:cd:3e:b9:6e:d8:48:d6:43:87:
c6:e0:d2:ec:16:81:f8:ce:44:5a:19:7a:61:ce:24:ab:78:09:
2d:ba:f4:0d:e3:62:dc:4b:b9:85:6b:f1:53:ed:07:d1:94:9c:
1b:b6:38:70:2c:93:d8:57:17:0e:68:6a:c7:fa:4b:b6:cd:9c:
ee:83:91:31:18:cb:be:39:a4:0b:82:0b:69:26:73:b7:02:4a:
f7:24:af:9e:ea:98:b3:6d:50:c0:9e:ab:43:a1:59:27:cb:a6:
f9:ef:a0:b1:57:d3:68:a5:71:53:01:1f:21:39:52:06:82:ae:
38:a4:21:e2:2c:3f:3f:34:38:cc:eb:f6:ee:fe:d6:06:27:70:
26:eb:46:8e:8c:a7:62:7f:42:14:ac:f6:f1:04:67:b2:55:b7:
ba:93:d0:71:9a:33:cd:f5:6f:20:1a:8c:60:1d:d6:ee:d4:be:
cd:d0:45:df:59:00:3e:ff:87:73:ba:09:7b:51:7e:ea:89:97:
e6:a0:50:c4:2e:ad:68:79:39:80:6a:69:02:eb:72:a0:52:b9:
fd:ab:27:1e:b7:26:11:6b:21:21:12:b1:4e:c3:7c:90:14:8b:
1b:23:05:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 07:19:27 2025 by rpki-client