This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/a29feace-471c-3bbd-813c-81620749951b.roa
File: a29feace-471c-3bbd-813c-81620749951b.roa (raw, json)
Hash identifier: /4s9NzCTd/A3t4d5S4zqWGhT4HycfNu9RozaqKNKGEg=
Subject key identifier: B9:AB:64:00:3E:67:E5:D0:8B:BE:FB:50:83:17:7C:5D:D7:B0:C4:6F
Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial: 010D0C9F4328584C34E64A838837C097AFE1DA20
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/a29feace-471c-3bbd-813c-81620749951b.roa
Signing time: Tue 16 Dec 2025 14:00:38 +0000
ROA not before: Tue 16 Dec 2025 14:00:38 +0000
ROA not after: Mon 16 Mar 2026 13:00:38 +0000
asID: 4213
IP address blocks: 97.64.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:34:e6:4a:83:88:37:c0:97:af:e1:da:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Validity
Not Before: Dec 16 14:00:38 2025 GMT
Not After : Mar 16 13:00:38 2026 GMT
Subject: CN=fea0650d-9a21-4fa4-894b-fd732995cbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:fd:07:1e:c3:a3:80:a7:80:a3:68:88:04:
cc:12:c9:29:5a:e5:24:1c:7f:06:9f:25:f9:89:e8:
ee:76:2a:e9:10:19:2a:da:32:f5:f9:ae:38:0f:63:
e0:7c:b9:d8:3e:8b:77:8d:09:ba:bd:69:96:92:fd:
37:43:a4:55:d2:12:cc:de:62:42:90:fc:67:d9:49:
e6:eb:c4:5e:b9:67:8a:f9:e8:47:30:d6:42:d8:4d:
f1:b8:9c:a7:6b:b6:a4:7f:32:d7:13:8c:a7:6b:8e:
03:45:c8:12:0a:74:23:fc:c7:fb:d2:fb:1c:02:61:
c5:ae:9a:79:26:8d:10:83:a7:d2:d6:76:88:e5:20:
74:57:91:a2:04:cf:8e:e9:8e:88:86:c8:a3:7f:63:
da:6d:96:37:e4:b5:47:a5:88:1c:5d:32:92:74:53:
b8:16:25:85:ee:91:84:c5:33:1e:92:a3:67:7a:10:
b5:1d:9d:0c:47:12:af:3a:42:73:4f:8c:e1:3b:35:
b7:d3:63:01:79:de:f1:e8:61:ae:39:cf:25:4f:09:
98:e4:4f:34:3a:ec:53:ce:48:07:ad:5a:48:ac:8d:
5b:3f:05:3f:90:c6:8d:88:10:15:df:d0:45:7d:00:
af:69:11:e9:e3:e7:d1:af:d7:f3:e1:81:04:5b:c5:
3f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AB:64:00:3E:67:E5:D0:8B:BE:FB:50:83:17:7C:5D:D7:B0:C4:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/a29feace-471c-3bbd-813c-81620749951b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
X509v3 Authority Key Identifier:
keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
sbgp-ipAddrBlock: critical
IPv4:
97.64.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:bf:43:30:ba:5c:15:e1:b4:f2:0c:91:a8:42:d8:a1:e0:68:
58:14:97:db:93:a8:21:9d:3a:f5:73:f0:ec:9e:d2:b1:a9:2c:
55:e5:15:40:5d:85:fd:8e:c8:3f:46:de:76:29:e2:f0:8f:1e:
f1:78:4f:e6:7d:f6:5f:e9:cf:e7:d4:5e:f5:28:8b:65:3a:57:
05:bb:4e:a0:0c:a7:a6:23:91:7c:15:f3:0f:00:85:19:6c:bc:
5a:f0:0a:4c:da:24:6e:ce:23:a4:7d:10:ab:18:d6:51:21:de:
80:e8:fe:0b:57:f6:47:a7:92:67:5e:c3:78:da:1d:15:0f:83:
56:f2:c1:60:5d:21:25:4d:c6:4d:12:01:4e:5a:ba:59:40:76:
35:af:a4:08:5c:b0:ee:ac:c3:c9:b7:db:11:4a:36:2b:57:15:
03:5a:12:ed:02:2e:7f:4d:80:17:9c:1a:30:6d:81:f1:f0:64:
e3:ca:f8:d7:84:ea:a3:81:d3:dd:0e:3c:2c:6d:ed:8a:c2:8e:
d9:58:76:23:77:a0:51:3b:2a:c8:59:67:be:81:0e:0b:d8:95:
48:67:c1:b6:77:0c:2c:e5:a8:0c:9e:47:ff:05:68:4a:78:7a:
a1:11:1c:d6:d9:bc:cd:bc:8f:f9:8f:36:a1:8a:6b:3f:c5:54:
80:a4:81:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:19:46 2025 by rpki-client