This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/66c3ccdc-8e6c-32e6-9299-14efbc883724.roa
File: 66c3ccdc-8e6c-32e6-9299-14efbc883724.roa (raw, json)
Hash identifier: kcK58+Y5ALEt5eGVJCiH63YrYW84Ge9C7XzJxBKVWA8=
Subject key identifier: 6B:E7:16:DC:49:E0:06:BA:A2:51:FD:9D:96:6E:E5:54:3B:AD:87:B0
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584C22C0E65D8895864766EE5B00
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/66c3ccdc-8e6c-32e6-9299-14efbc883724.roa
Signing time: Wed 10 Dec 2025 02:00:31 +0000
ROA not before: Wed 10 Dec 2025 02:00:31 +0000
ROA not after: Tue 10 Mar 2026 01:00:31 +0000
asID: 398823
IP address blocks: 107.148.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:22:c0:e6:5d:88:95:86:47:66:ee:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Dec 10 02:00:31 2025 GMT
Not After : Mar 10 01:00:31 2026 GMT
Subject: CN=6377eca5-81a2-4ce6-b2f7-fd927214a58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:5f:38:85:ce:39:99:2f:45:8d:74:3b:ae:
87:7f:82:78:8d:eb:76:b5:e5:3e:35:29:b8:57:12:
54:b0:76:a4:de:52:62:13:7b:eb:33:f5:c2:6d:43:
18:5f:ff:e7:ad:3e:dd:78:d8:90:fd:17:72:36:c0:
76:66:82:2a:cf:99:47:ac:79:13:f4:b7:82:40:a1:
3c:69:12:84:1e:96:3c:76:96:53:14:3a:35:55:bc:
34:71:ac:e1:e1:0a:9f:21:fe:0c:8a:f3:19:41:82:
68:b2:b2:c8:bd:c0:ae:5e:aa:5c:53:dc:9d:db:23:
6c:ab:08:72:46:b1:5f:4e:da:a9:50:bb:51:03:db:
1b:b1:28:64:a3:35:37:b8:f5:5a:1c:2e:af:da:8a:
33:bc:7d:c9:df:b9:04:f6:77:a5:d6:99:96:ac:91:
0d:d4:57:c1:a9:63:31:26:6e:a3:62:9c:8d:ff:e5:
3f:f6:00:e2:52:af:79:c4:c0:fc:60:4c:62:28:06:
ea:b6:53:6c:fd:db:5c:6c:e1:89:5a:ed:1a:53:b8:
f9:85:a3:51:1e:4c:26:1b:18:8b:53:23:b7:76:f5:
39:d3:17:32:4c:ba:b5:31:31:10:e2:ee:79:73:14:
4a:4a:f3:e9:b7:06:d6:55:10:b7:97:5c:8b:c5:94:
c8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E7:16:DC:49:E0:06:BA:A2:51:FD:9D:96:6E:E5:54:3B:AD:87:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/66c3ccdc-8e6c-32e6-9299-14efbc883724.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:63:c8:3c:f9:3f:69:68:87:6e:45:f1:06:db:59:c8:a4:fb:
3b:fc:60:a7:14:b1:ef:3d:51:15:61:84:5f:6b:6d:e6:1d:55:
5c:69:b9:0a:4a:f2:44:93:78:0b:f3:93:48:81:d9:0e:a7:24:
6f:a2:60:7a:05:d8:81:32:39:2b:fe:1e:ae:2b:8d:f7:ff:32:
91:f9:2c:3e:fe:b5:cf:0f:ce:11:63:f9:78:dc:a2:07:4a:db:
84:2a:74:ad:a8:fb:f6:56:17:36:f3:83:1e:fc:99:cf:6b:c2:
e4:b4:c2:db:7c:7b:d7:7d:c6:7f:62:3d:78:b7:0c:11:4e:7a:
7c:75:b0:58:4a:c7:73:60:97:0e:f8:56:10:8d:8f:21:ee:39:
05:74:e5:cc:9a:28:da:58:66:31:49:83:e8:e7:a0:44:f2:ba:
36:f0:22:46:2f:09:26:09:dd:00:ad:9f:96:13:11:d5:21:5a:
0a:ee:f4:23:f6:32:cd:41:6a:c9:15:c9:dd:0b:25:57:56:3c:
98:7a:76:94:c6:de:dc:ad:b9:da:86:2d:76:35:7b:4e:e9:06:
b3:fd:19:c5:1d:a6:44:e7:53:41:43:e4:f7:9a:c3:10:bd:99:
09:72:e6:18:b7:67:0a:6c:5e:22:35:d1:b8:f8:64:e3:b1:60:
9e:84:e7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:46:13 2025 by rpki-client