This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd895d36-9a69-3002-8f53-5c6ba38acca8.roa
File: fd895d36-9a69-3002-8f53-5c6ba38acca8.roa (raw, json)
Hash identifier: 6PFU3NJkzsGj98GfNrKj//nYCsQy+sFI5hmqSI24VKg=
Subject key identifier: 4F:66:80:76:4C:C0:B3:C8:E8:0E:35:8C:23:64:9B:B6:19:69:41:47
Certificate issuer: /CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170
Certificate serial: 010D0C9F4328584C258B75AB6250923DAB5B3640
Authority key identifier: 0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd895d36-9a69-3002-8f53-5c6ba38acca8.roa
Signing time: Thu 11 Dec 2025 02:00:30 +0000
ROA not before: Thu 11 Dec 2025 02:00:30 +0000
ROA not after: Wed 11 Mar 2026 01:00:30 +0000
asID: 14618
IP address blocks: 198.145.124.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:25:8b:75:ab:62:50:92:3d:ab:5b:36:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170
Validity
Not Before: Dec 11 02:00:30 2025 GMT
Not After : Mar 11 01:00:30 2026 GMT
Subject: CN=13475dca-c038-4601-af7d-617e4ee22672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ad:d2:21:67:36:2b:90:50:22:26:8b:dd:de:
36:df:a2:d9:fa:c1:4e:06:26:42:a5:84:50:26:7a:
79:c6:39:09:f8:5c:c9:3e:4f:62:8b:25:6a:f2:6d:
33:b4:01:18:a5:d0:48:53:22:d4:92:70:76:f0:3c:
02:32:03:a1:a7:eb:f6:ce:d8:6a:75:61:60:5b:0c:
91:93:7d:cd:b9:b6:6a:75:74:9e:15:5e:6a:0a:6c:
27:77:fc:21:e9:07:2d:c8:23:11:28:df:6b:8b:1d:
ff:53:91:86:a5:d0:f3:75:4e:1b:c0:98:74:74:2e:
6a:ec:73:bd:78:d4:1c:d1:02:43:e4:19:d7:89:bd:
ed:71:27:35:25:bd:b7:fe:9f:bb:d6:ca:37:e1:07:
7c:92:a5:57:d2:ed:56:3a:e8:5f:36:d1:d2:6e:87:
1b:2f:58:9f:c2:0f:62:93:9e:45:ab:15:30:cf:df:
cc:66:4c:eb:91:b8:8a:2f:35:99:34:aa:77:0c:8e:
e1:2d:df:b0:6c:92:eb:c9:06:92:9d:b7:e8:e6:f4:
b1:e2:b1:3c:9e:c4:af:90:9b:18:bb:cf:7b:3f:b0:
a8:2f:a8:0f:f3:b7:4e:82:57:8e:4a:e6:10:e0:75:
fa:56:70:49:ec:da:8e:e4:1f:7b:30:f3:1e:3c:51:
37:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:66:80:76:4C:C0:B3:C8:E8:0E:35:8C:23:64:9B:B6:19:69:41:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd895d36-9a69-3002-8f53-5c6ba38acca8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl
X509v3 Authority Key Identifier:
keyid:0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.124.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:23:e4:51:d3:ed:22:d8:7d:a4:5e:e4:24:9a:8a:6b:4a:d5:
45:70:16:06:26:06:69:24:84:5b:1a:72:b4:ec:22:5c:fd:e1:
02:bf:51:d4:0d:61:00:09:41:d6:c5:ce:01:b1:96:9f:1a:00:
b6:36:4e:06:8b:be:51:89:47:10:31:7d:dc:e1:ae:53:f6:42:
46:a7:31:f9:84:de:a2:cc:fb:ea:65:bc:fc:fa:63:a2:7d:15:
52:18:05:96:0f:73:3a:16:b0:d7:6c:37:3d:72:16:e2:2c:b0:
ad:1f:91:a3:be:12:63:76:57:86:51:3d:8d:8b:fa:34:61:29:
b2:7f:36:01:e8:e6:44:94:39:32:dd:5a:84:46:2a:ec:21:8c:
8e:32:de:b9:67:1a:5f:0e:f1:6e:47:8f:74:6a:95:6d:96:5b:
b9:59:7e:1e:fa:99:84:5b:3a:aa:a9:02:27:2b:8a:2f:0d:09:
db:0a:c5:dc:df:b3:0a:40:dd:92:8c:1d:52:2e:48:c5:fb:19:
c3:5c:6f:42:53:01:70:40:78:c5:87:71:8d:92:9e:e1:b4:81:
d6:56:8f:d3:ac:1a:a1:77:ed:2f:14:c5:5f:86:e2:79:7d:ce:
3c:f7:33:78:8b:0c:28:c6:7a:9f:6c:e1:46:37:14:2b:bd:b5:
4d:69:25:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:13:42 2025 by rpki-client