This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7f2b3f46-2dd5-381e-b122-d7c2ad660070.roa
File: 7f2b3f46-2dd5-381e-b122-d7c2ad660070.roa (raw, json)
Hash identifier: Zd/bDEv8aB6R+YBmbz1nSQXkw1gYjzpqg4ME6dB0XlU=
Subject key identifier: 6D:EF:4F:6C:8E:70:C2:F5:BD:71:E6:AC:C8:A3:0A:A0:86:81:D3:B8
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F4328584C22C0E2721521E04216DD10A0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7f2b3f46-2dd5-381e-b122-d7c2ad660070.roa
Signing time: Wed 10 Dec 2025 02:00:31 +0000
ROA not before: Wed 10 Dec 2025 02:00:31 +0000
ROA not after: Tue 10 Mar 2026 01:00:31 +0000
asID: 13768
IP address blocks: 65.39.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:22:c0:e2:72:15:21:e0:42:16:dd:10:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Dec 10 02:00:31 2025 GMT
Not After : Mar 10 01:00:31 2026 GMT
Subject: CN=511af7a1-6b86-43ba-afb2-fe5b05e086e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4f:5f:a8:24:63:7b:c6:04:cf:7d:73:d1:99:
94:d9:56:f6:30:29:66:38:c4:b1:b8:4d:67:97:d7:
e1:b8:3c:ab:94:fb:ce:14:89:cb:10:c1:03:45:9c:
2d:bc:c5:66:04:22:63:8c:3d:90:84:94:89:2a:ee:
de:21:12:6f:80:8b:f9:4f:ea:b9:db:c8:6c:6f:96:
31:00:4e:de:92:3d:23:f0:de:fe:59:5a:19:cd:1b:
cf:5b:40:b1:c1:a8:15:96:2a:64:c4:47:a2:19:d1:
cf:79:32:a9:8a:6d:36:fb:11:7d:17:4a:05:93:da:
37:41:87:c8:3c:23:15:fa:94:62:2b:67:71:7a:56:
f8:78:eb:ae:74:03:37:39:0f:b4:60:36:1d:36:e3:
c6:0d:98:d1:47:e8:17:9c:b0:f2:68:63:17:f2:3f:
08:4c:36:b8:b6:b5:ca:36:78:f4:b2:b8:f4:ab:af:
c7:7f:ab:60:b8:41:df:b6:7d:07:2f:c2:82:e7:5d:
a2:7c:20:6f:36:76:ca:d1:4e:11:4d:2e:7d:3c:ab:
c2:39:bc:ee:a3:19:bc:78:7e:2a:f3:70:9a:59:f6:
6a:a7:44:03:d4:79:8d:73:be:ce:56:9a:1f:9d:2e:
9f:2d:5f:65:22:26:93:77:40:da:2d:65:35:2f:70:
e1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EF:4F:6C:8E:70:C2:F5:BD:71:E6:AC:C8:A3:0A:A0:86:81:D3:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7f2b3f46-2dd5-381e-b122-d7c2ad660070.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
65.39.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:6f:46:b1:a2:01:c5:63:7b:c3:f8:54:af:89:b1:32:c5:35:
dd:4b:e5:9e:d7:ef:79:37:15:b4:37:fb:0c:b9:57:4b:9b:e0:
21:58:28:86:75:5a:97:d4:e7:17:b3:49:1c:fd:73:19:a6:cf:
fa:31:10:fa:32:11:22:db:ce:f1:29:d3:14:b0:64:42:5d:0b:
12:83:d9:0d:2d:92:d4:50:7a:f3:6b:06:78:89:fb:d2:a7:e7:
13:d2:a8:03:b5:12:6a:fa:4a:c7:16:55:39:60:4d:d9:e2:b9:
44:20:6c:cc:8a:10:30:17:18:59:7d:65:ab:d1:29:b2:ee:15:
38:59:4b:aa:a0:c7:1a:93:d6:d9:b2:fc:b2:c4:de:e0:43:50:
d5:a8:bb:fd:cd:a4:5a:9c:ab:54:d4:b6:f9:33:e3:c0:60:96:
24:73:5e:85:11:6e:f3:dc:cf:40:ef:6e:da:40:7e:63:a7:69:
e3:3a:e6:34:91:fa:35:6b:27:56:af:d1:e9:a0:dc:09:15:d7:
66:cc:fd:d8:40:85:5a:1f:66:c0:dc:ca:2e:8d:e2:90:bb:61:
64:fd:c5:dd:b7:77:ee:13:83:2e:d8:6c:4c:8a:d8:3b:1e:f1:
77:82:48:e0:08:de:ed:2f:29:b8:20:44:5c:3f:2a:49:70:f1:
b4:4e:d3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 04:48:15 2025 by rpki-client