This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b/b8e89a95-4fa5-3b26-92bc-a224cf93b617.roa
File: b8e89a95-4fa5-3b26-92bc-a224cf93b617.roa (raw, json)
Hash identifier: NKGZhC+N4rXvYkzZaSMf1u0+IUe7dGWdtkmAUQ8YcMM=
Subject key identifier: 86:EA:3F:19:5F:F2:D2:92:EE:08:31:CB:21:D8:22:28:C5:24:CF:64
Certificate issuer: /CN=4ce48c56-e3a7-4306-aeb3-946a9bdde45b
Certificate serial: 010D0C9F4328584C2DEB9C306327ECA1DF932500
Authority key identifier: F8:FB:2C:A5:8D:4E:DF:CA:86:14:AE:E2:C4:6E:99:65:05:8F:96:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b/b8e89a95-4fa5-3b26-92bc-a224cf93b617.roa
Signing time: Sun 14 Dec 2025 02:00:31 +0000
ROA not before: Sun 14 Dec 2025 02:00:31 +0000
ROA not after: Sat 14 Mar 2026 01:00:31 +0000
asID: 33365
IP address blocks: 204.11.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:2d:eb:9c:30:63:27:ec:a1:df:93:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce48c56-e3a7-4306-aeb3-946a9bdde45b
Validity
Not Before: Dec 14 02:00:31 2025 GMT
Not After : Mar 14 01:00:31 2026 GMT
Subject: CN=bba032d4-71d3-421e-8e50-70fc293b8fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2a:b0:37:65:cf:a4:31:7e:d7:df:ac:a7:b9:
29:0a:b2:c8:7d:71:87:97:99:5c:1f:0e:a4:1b:15:
ab:b8:0f:11:50:8f:a1:1f:1a:01:8d:6e:2b:dc:a0:
5c:81:ad:29:2a:73:59:5c:56:35:00:f9:88:39:cd:
ce:81:21:a2:31:71:c8:26:a0:c9:51:1c:1b:e3:ca:
4f:79:2f:1a:d3:c6:16:85:93:38:b3:57:fe:3c:b9:
36:7a:28:46:5f:f1:81:ab:88:7b:48:a9:94:95:f3:
0c:05:9f:4a:b0:d9:6c:05:bd:74:23:37:70:92:21:
f7:e6:3b:7f:ba:6f:56:db:81:e2:13:92:a4:3a:10:
eb:30:09:0b:05:6e:2c:8b:fd:0c:ee:c8:3c:ba:28:
d2:9e:b0:0c:7f:21:05:2a:ab:be:f2:c3:45:5f:ab:
55:4e:fd:46:a8:2e:a1:42:0d:5c:4a:2f:5c:58:53:
8f:d5:b0:6b:f8:ab:78:09:36:c2:77:dd:0b:2a:da:
0e:b2:b0:2f:b1:08:fa:92:84:f3:b0:61:81:e8:fe:
4b:24:dd:0e:a6:fa:5b:3b:52:42:76:8c:94:ed:c0:
d6:2f:d0:09:8e:78:ac:ae:d5:7f:f7:65:d1:85:27:
55:7b:69:a5:ce:39:7d:af:34:4a:fb:e7:ee:89:b4:
7c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EA:3F:19:5F:F2:D2:92:EE:08:31:CB:21:D8:22:28:C5:24:CF:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b/b8e89a95-4fa5-3b26-92bc-a224cf93b617.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b.crl
X509v3 Authority Key Identifier:
keyid:F8:FB:2C:A5:8D:4E:DF:CA:86:14:AE:E2:C4:6E:99:65:05:8F:96:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b.cer
sbgp-ipAddrBlock: critical
IPv4:
204.11.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:f2:b4:2f:ef:e3:8b:f0:94:d1:99:7c:65:7e:43:58:8d:93:
a8:a0:8a:38:de:45:59:3f:2f:48:17:82:70:99:a8:b6:91:d5:
eb:b2:7d:80:78:75:60:f2:76:5e:0a:f9:48:38:2a:76:ae:f0:
d5:7f:85:03:ac:90:4c:83:61:63:13:18:15:6c:aa:45:21:dc:
de:66:37:d7:a6:c6:0e:70:a3:3e:48:5e:00:d2:28:3e:11:8e:
b6:58:5b:2a:a7:60:84:11:4f:62:52:80:da:66:ec:f7:63:ca:
7c:d0:f8:2b:18:06:59:f0:31:e8:44:23:9f:7c:2b:d9:39:3d:
32:73:73:ec:44:91:f7:f7:53:0d:ba:19:72:ce:cc:68:2a:04:
1d:08:34:84:a7:df:35:60:db:91:35:ed:7a:03:f7:33:d1:84:
fd:07:aa:fc:97:26:d5:7d:e9:a1:d5:19:75:47:a9:27:e0:48:
03:48:01:a8:1d:3b:5c:fc:a0:b1:d6:04:33:c9:ad:3f:f4:c1:
da:39:e7:97:b2:61:24:d0:52:f0:ab:77:b6:ee:89:a6:a3:76:
09:fa:d1:7d:20:7c:f3:f1:77:e1:f9:82:e9:a4:c7:0c:46:d7:
9f:a6:ea:9e:54:2c:17:25:f0:49:32:12:24:37:aa:4b:50:44:
06:05:fa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:56:53 2025 by rpki-client