This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/de036389-821c-33d3-8cb8-20b495d08324.roa
File: de036389-821c-33d3-8cb8-20b495d08324.roa (raw, json)
Hash identifier: d7VR16alxdw9nTYBdZii0Nw/eWZtLyZT/HJ8QYIldVM=
Subject key identifier: 58:B5:0C:AD:E7:C3:95:6C:B1:13:37:C0:12:65:93:1E:96:C9:C3:56
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F4328584C1E90D35966AE7D491A57F700
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/de036389-821c-33d3-8cb8-20b495d08324.roa
Signing time: Mon 08 Dec 2025 14:00:38 +0000
ROA not before: Mon 08 Dec 2025 14:00:38 +0000
ROA not after: Sun 08 Mar 2026 13:00:38 +0000
asID: 401152
IP address blocks: 198.20.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:1e:90:d3:59:66:ae:7d:49:1a:57:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Dec 8 14:00:38 2025 GMT
Not After : Mar 8 13:00:38 2026 GMT
Subject: CN=1a04c366-54ad-4c6d-90ec-64b8edbffe65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:58:08:9e:a7:4f:8d:e9:1b:45:2d:e0:20:f8:
a3:3c:f5:82:dd:69:f4:fa:c3:ba:ad:36:17:c7:03:
c6:28:9f:74:64:dc:74:23:4e:08:90:3f:84:c6:f5:
f8:dc:fd:81:49:53:29:4e:51:99:a0:fa:62:be:3f:
1e:47:68:80:41:e3:e8:c7:20:b7:fd:b5:6f:c6:37:
cd:9a:03:de:92:dc:46:1d:56:f7:7d:2c:7a:31:88:
d6:df:fe:8d:4f:45:45:a6:7b:19:8c:a9:7d:1e:dc:
de:a9:49:65:17:76:d3:4a:cd:33:d9:67:5b:a0:0b:
2d:b1:ef:0b:9a:dd:76:a5:08:8f:83:d1:34:fd:93:
6a:fa:d2:b4:9e:e3:ea:28:2b:2f:fc:7b:e5:f9:70:
44:70:da:47:a2:21:e3:5e:79:dc:84:26:c1:ab:d8:
2f:22:2b:93:40:2a:84:6c:d2:e1:45:83:88:fc:f1:
5f:eb:52:47:28:8b:fb:6c:7c:7d:09:7b:b1:db:e0:
8c:fc:f8:9c:e6:d9:1e:f3:57:e9:1b:d0:53:42:d4:
70:83:70:b6:e6:f0:af:37:35:1e:b3:a4:ec:17:c6:
2c:9f:bc:1f:80:79:11:13:67:ee:a4:80:ac:1a:b9:
ce:93:54:90:2e:61:a4:34:f4:0a:2a:e1:9f:48:0f:
76:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B5:0C:AD:E7:C3:95:6C:B1:13:37:C0:12:65:93:1E:96:C9:C3:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/de036389-821c-33d3-8cb8-20b495d08324.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
198.20.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:69:9a:9d:a7:1a:16:eb:af:78:75:16:1e:c6:c7:c3:13:9a:
99:54:45:dc:db:f6:b8:4a:03:da:25:5c:98:aa:af:b0:12:5c:
2e:2f:fb:3c:c9:36:64:51:83:51:0e:79:a6:49:fc:93:9f:97:
a3:0f:a0:ff:ac:31:ad:22:ac:b7:34:2d:4a:e9:75:8e:a7:61:
32:0c:fb:f3:ae:83:2d:8e:41:f4:56:7c:6d:89:ce:d9:7d:8c:
d4:6e:1b:f1:93:aa:cc:25:73:62:d7:17:80:9d:f8:93:79:03:
62:00:38:27:06:8d:ff:61:5b:68:3e:b8:53:4a:45:5d:3c:cb:
33:d1:7f:67:48:4c:b6:d2:8a:8e:a1:e8:ca:9e:12:5b:21:bc:
f5:a7:53:c4:bf:86:b3:85:f1:d2:45:45:01:f6:9a:3b:b7:fc:
fa:f5:54:50:5b:9d:d3:f1:89:38:20:41:51:1a:bb:dd:19:8c:
55:eb:12:e2:5a:64:76:df:41:8d:60:02:fe:a1:fa:f4:24:e5:
d3:ad:6e:0b:a5:e9:6e:3a:ba:3c:5c:cd:ae:49:6a:af:d8:d9:
7c:99:1b:55:32:d7:22:6f:50:3d:69:25:49:48:32:a3:5f:7b:
85:ed:f5:df:57:56:b6:06:bb:80:28:7e:41:6e:46:26:b9:26:
60:04:c5:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwekNNZZq59SRpX9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MTIwODE0MDAzOFoXDTI2MDMwODEzMDAzOFowLzEtMCsGA1UEAxMk
MWEwNGMzNjYtNTRhZC00YzZkLTkwZWMtNjRiOGVkYmZmZTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVgInqdPjekbRS3gIPijPPWC3Wn0+sO6rTYX
xwPGKJ90ZNx0I04IkD+ExvX43P2BSVMpTlGZoPpivj8eR2iAQePoxyC3/bVvxjfN
mgPektxGHVb3fSx6MYjW3/6NT0VFpnsZjKl9HtzeqUllF3bTSs0z2WdboAstse8L
mt12pQiPg9E0/ZNq+tK0nuPqKCsv/Hvl+XBEcNpHoiHjXnnchCbBq9gvIiuTQCqE
bNLhRYOI/PFf61JHKIv7bHx9CXux2+CM/Pic5tke81fpG9BTQtRwg3C25vCvNzUe
s6TsF8Ysn7wfgHkRE2fupICsGrnOk1SQLmGkNPQKKuGfSA926QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFi1DK3nw5VssRM3wBJlkx6WycNWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGUwMzYzODktODIxYy0z
M2QzLThjYjgtMjBiNDk1ZDA4MzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhSIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABtpmp2nGhbrr3h1Fh7Gx8MTmplURdzb9rhKA9olXJiqr7ASXC4v+zzJ
NmRRg1EOeaZJ/JOfl6MPoP+sMa0irLc0LUrpdY6nYTIM+/Ougy2OQfRWfG2Jztl9
jNRuG/GTqswlc2LXF4Cd+JN5A2IAOCcGjf9hW2g+uFNKRV08yzPRf2dITLbSio6h
6MqeElshvPWnU8S/hrOF8dJFRQH2mju3/Pr1VFBbndPxiTggQVEau90ZjFXrEuJa
ZHbfQY1gAv6h+vQk5dOtbgul6W46ujxcza5Jaq/Y2XyZG1Uy1yJvUD1pJUlIMqNf
e4Xt9d9XVrYGu4AofkFuRia5JmAExaU=
-----END CERTIFICATE-----
Generated at Sat Dec 20 04:49:12 2025 by rpki-client