This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa
File: d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa (raw, json)
Hash identifier: BzSr71G8WBUZVj5+0+Im3iWflVmi7iJ2U6/+EjGSrHQ=
Subject key identifier: 83:A2:2E:B4:27:41:22:54:AB:0D:A4:87:1E:DB:25:52:27:71:02:BF
Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945
Certificate serial: 010D0C9F4328584C338137F72A845C3F8E269900
Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa
Signing time: Tue 16 Dec 2025 02:00:31 +0000
ROA not before: Tue 16 Dec 2025 02:00:31 +0000
ROA not after: Mon 16 Mar 2026 01:00:31 +0000
asID: 14618
IP address blocks: 192.28.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:33:81:37:f7:2a:84:5c:3f:8e:26:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945
Validity
Not Before: Dec 16 02:00:31 2025 GMT
Not After : Mar 16 01:00:31 2026 GMT
Subject: CN=73225fed-8c2f-4d91-bebc-ae56d2f3d9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4b:67:23:fa:d3:c4:39:dd:88:94:4c:66:ba:
af:87:21:43:63:e9:a8:9c:ec:87:0d:27:3e:e6:c8:
35:d4:64:53:89:75:e5:2b:4e:92:a3:a7:bd:dd:a9:
d7:f8:32:75:9d:0e:3a:88:90:e9:de:af:5c:a0:5c:
7c:59:74:8c:0b:19:1f:7f:ec:1c:96:92:2f:f7:a1:
0c:1a:48:ba:bc:3b:24:f3:a8:20:28:df:76:c5:8e:
1d:ed:c2:dc:0e:b6:a9:73:f8:52:6b:3d:02:28:27:
c7:fe:14:5f:17:a5:11:75:cc:5c:39:77:59:49:2a:
24:f6:9d:1a:8b:b1:6e:d8:99:d9:69:0e:79:df:b8:
56:0e:5f:2f:05:bd:ca:f8:a5:1a:36:68:8d:13:80:
53:b8:48:82:55:7d:66:72:91:62:41:d1:30:c5:2d:
9c:86:de:f8:53:26:37:49:74:62:80:2e:06:37:75:
42:14:f2:b6:78:c8:89:4e:41:88:96:60:48:1c:6e:
03:44:1f:e4:27:d7:77:cb:f6:57:94:07:8f:f6:7d:
0b:d5:d3:d3:3b:7f:ad:2a:65:25:47:f3:5e:36:57:
db:75:b0:e6:23:71:b5:b4:ae:7a:26:58:48:8f:80:
27:63:93:56:f1:6f:6d:78:e9:f4:79:e8:62:0e:4e:
a1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A2:2E:B4:27:41:22:54:AB:0D:A4:87:1E:DB:25:52:27:71:02:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl
X509v3 Authority Key Identifier:
keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer
sbgp-ipAddrBlock: critical
IPv4:
192.28.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:36:30:fd:8d:f7:27:34:e3:f7:f5:da:5a:dc:ba:e5:ea:69:
ca:f9:b6:bd:9c:ba:fe:27:c6:1c:84:d8:56:05:7b:88:cc:97:
8e:bc:71:1a:c2:6a:c0:da:30:51:a7:5d:13:15:f1:d3:3c:fe:
a0:bd:42:9a:03:a7:a2:d2:33:b2:86:35:08:b6:14:69:93:8f:
ad:5c:45:06:76:fc:7d:b6:1f:1c:9b:71:64:4e:88:70:32:59:
ef:c1:e6:eb:34:10:98:fa:11:2b:4d:ee:0f:c7:d7:f7:aa:95:
b3:23:e9:67:b6:65:6a:4e:11:be:0c:54:c5:85:11:fa:1a:2c:
66:4b:46:49:a4:85:ab:1e:f7:a0:f5:69:07:00:9b:13:83:7b:
3f:e6:d8:39:2a:29:84:32:5c:15:55:80:0f:85:dc:9d:e1:3b:
c8:a0:a1:47:79:6a:95:d6:22:b6:8f:e6:5a:fb:ab:c4:42:f9:
8c:50:0f:e4:26:13:73:46:67:d0:57:3a:30:ed:5f:c3:b2:a6:
67:51:ab:6d:66:3f:7a:b3:74:32:0f:ad:be:84:7f:30:38:f6:
0d:f8:ff:12:2f:20:6d:a3:1a:e7:a8:fd:4c:81:32:62:fd:74:
81:be:b7:93:6d:17:5c:f4:4b:45:1a:c2:07:1f:39:97:3c:ab:
ca:e3:9e:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgTf3KoRcP44mmQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi
OTQ1MB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk
NzMyMjVmZWQtOGMyZi00ZDkxLWJlYmMtYWU1NmQyZjNkOWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ktnI/rTxDndiJRMZrqvhyFDY+monOyHDSc+
5sg11GRTiXXlK06So6e93anX+DJ1nQ46iJDp3q9coFx8WXSMCxkff+wclpIv96EM
Gki6vDsk86ggKN92xY4d7cLcDrapc/hSaz0CKCfH/hRfF6URdcxcOXdZSSok9p0a
i7Fu2JnZaQ5537hWDl8vBb3K+KUaNmiNE4BTuEiCVX1mcpFiQdEwxS2cht74UyY3
SXRigC4GN3VCFPK2eMiJTkGIlmBIHG4DRB/kJ9d3y/ZXlAeP9n0L1dPTO3+tKmUl
R/NeNlfbdbDmI3G1tK56JlhIj4AnY5NW8W9teOn0eehiDk6hKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIOiLrQnQSJUqw2khx7bJVIncQK/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2
ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvZDk0YzY2NmMtYWI1Ni0z
Yjk0LThkM2EtMWM0MWVmYTM0OTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk
ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw
Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz
NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBwUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADk2MP2N9yc04/f12lrcuuXqacr5tr2cuv4nxhyE2FYFe4jMl468cRrC
asDaMFGnXRMV8dM8/qC9QpoDp6LSM7KGNQi2FGmTj61cRQZ2/H22HxybcWROiHAy
We/B5us0EJj6EStN7g/H1/eqlbMj6We2ZWpOEb4MVMWFEfoaLGZLRkmkhase96D1
aQcAmxODez/m2DkqKYQyXBVVgA+F3J3hO8igoUd5apXWIraP5lr7q8RC+YxQD+Qm
E3NGZ9BXOjDtX8OypmdRq21mP3qzdDIPrb6EfzA49g34/xIvIG2jGueo/UyBMmL9
dIG+t5NtF1z0S0UawgcfOZc8q8rjnpo=
-----END CERTIFICATE-----
Generated at Sat Dec 20 02:41:45 2025 by rpki-client