This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f70c066-2334-345c-8e8d-a890ceb66284.roa
File: 3f70c066-2334-345c-8e8d-a890ceb66284.roa (raw, json)
Hash identifier: aSA7kFCqG6fcOtBXpMV6KYlpTNEbSl9rrYefOuhT8SQ=
Subject key identifier: BB:9B:FD:C2:43:A8:64:5D:DB:3D:91:48:56:EC:DF:3D:BC:22:E0:88
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F4328584C40111C560C9D747FDE183540
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f70c066-2334-345c-8e8d-a890ceb66284.roa
Signing time: Sat 20 Dec 2025 14:00:38 +0000
ROA not before: Sat 20 Dec 2025 14:00:38 +0000
ROA not after: Fri 20 Mar 2026 13:00:38 +0000
asID: 36040
IP address blocks: 136.22.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:40:11:1c:56:0c:9d:74:7f:de:18:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Dec 20 14:00:38 2025 GMT
Not After : Mar 20 13:00:38 2026 GMT
Subject: CN=b8488ee0-ae41-4042-8566-5d728b6f32d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:24:84:64:49:56:38:31:f9:43:ec:ef:4a:dd:
dc:d3:e3:dc:5f:b4:54:c2:f6:8a:20:74:1a:77:6d:
5f:4c:b3:c0:87:ad:68:e2:be:00:60:5f:fd:51:d2:
10:07:df:20:7b:57:15:03:d7:49:dc:5f:12:24:49:
83:71:5d:fa:da:ed:30:f8:43:84:cc:7d:45:af:4e:
6b:89:8e:74:7a:d3:66:a8:47:65:9b:99:30:f4:05:
1c:b9:bb:50:53:af:09:c6:bb:08:3a:41:fb:00:df:
bf:e4:2a:83:75:0e:d1:08:84:11:24:07:79:e1:97:
81:5a:76:b2:68:80:1b:6a:ce:17:85:9a:5d:01:00:
10:61:1b:1c:08:c5:31:24:bf:97:38:f3:ae:3b:18:
8b:9f:4c:a3:2f:f9:0e:4a:bc:be:03:4b:73:44:9c:
3b:34:87:5b:47:14:11:d8:07:20:a5:6d:fe:66:ed:
ac:7b:5c:79:ce:d2:5e:79:50:52:e8:72:3b:c6:95:
7a:ef:b0:bf:4d:07:b1:db:34:6e:cb:a9:03:77:66:
a4:45:6d:58:b4:97:ac:23:39:73:15:d6:75:2c:91:
af:e0:7d:db:40:9c:12:82:f6:16:21:89:a9:57:79:
e5:8a:f9:ac:3e:45:93:65:e7:01:bc:fe:8d:ce:ba:
b9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9B:FD:C2:43:A8:64:5D:DB:3D:91:48:56:EC:DF:3D:BC:22:E0:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f70c066-2334-345c-8e8d-a890ceb66284.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:d0:44:35:75:73:41:53:89:59:7b:71:5e:c5:da:83:27:6a:
20:f6:b6:87:a4:31:06:99:ee:44:56:06:37:ef:13:38:83:d3:
5f:33:dc:b8:81:b6:d4:62:ca:b2:54:8b:9f:f5:5b:4f:b3:7b:
ec:a9:41:04:7d:00:e9:c4:d5:9c:2a:9d:29:ed:68:a1:46:b2:
3a:45:1a:4d:87:cb:0b:b4:66:dc:f7:ab:7d:77:c2:5f:2c:c9:
84:81:d5:04:ee:a2:06:cc:48:6f:82:b1:90:55:07:e6:77:38:
29:13:2f:d0:6f:e9:e9:99:db:4b:ad:a5:c6:fe:44:ac:3b:64:
04:ca:4a:4e:76:0e:6f:51:6a:70:98:14:c2:37:e9:d2:79:62:
ab:ba:0e:eb:5d:b4:cc:a9:e9:04:de:91:60:8c:d5:25:8a:ad:
b8:db:06:7e:b9:c7:42:5d:79:ba:7d:62:b1:1a:d4:f2:9f:8e:
81:37:5b:0a:f2:a2:de:2f:74:a6:29:e5:f0:2b:73:58:00:10:
20:2b:1b:3e:66:96:f9:0c:44:49:5d:04:35:30:8f:7a:c2:a9:
9a:18:f1:74:b5:c2:1e:9c:e6:f7:ee:c5:d8:1c:ff:03:bc:0d:
0e:22:bb:27:1c:50:ff:99:95:6d:34:cc:5e:8f:98:c4:46:a6:
65:0c:0d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:36:41 2025 by rpki-client