This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/38442203-0a23-3c40-8941-6f49f8a5fb72.roa
File: 38442203-0a23-3c40-8941-6f49f8a5fb72.roa (raw, json)
Hash identifier: P+n+DZs749U0Wwat85teXlLPJBSMk8mSdm3yio2/Gp4=
Subject key identifier: 80:14:24:AD:CD:15:D3:FB:55:FB:80:1F:A9:50:D2:1E:7E:8A:55:6F
Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial: 010D0C9F4328584C5BFBDB7C9D24D64F805BFF00
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/38442203-0a23-3c40-8941-6f49f8a5fb72.roa
Signing time: Tue 30 Dec 2025 14:00:38 +0000
ROA not before: Tue 30 Dec 2025 14:00:38 +0000
ROA not after: Mon 30 Mar 2026 13:00:38 +0000
asID: 33039
IP address blocks: 142.248.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:5b:fb:db:7c:9d:24:d6:4f:80:5b:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Validity
Not Before: Dec 30 14:00:38 2025 GMT
Not After : Mar 30 13:00:38 2026 GMT
Subject: CN=86d02109-fcbc-462d-9865-bb42f7e3ca5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:39:d3:1f:a0:2d:11:65:57:90:a1:d4:d3:7b:
e3:a6:df:e0:de:76:76:5c:0a:b3:a4:e6:4f:41:93:
e5:35:36:11:db:a1:c7:54:40:8e:38:1a:0c:ce:41:
b7:57:cb:c6:0b:63:bf:e0:4e:92:19:d1:75:0f:42:
66:d0:b8:ee:98:02:9a:6c:2a:4b:9e:df:49:62:aa:
59:80:df:f9:9b:32:47:d5:0a:45:99:e0:a0:d6:c4:
46:32:19:b4:0e:bc:fa:ea:bb:c2:d0:cd:55:b1:de:
a4:13:ad:d8:5e:3c:7d:70:bd:ea:a5:28:ee:6f:2a:
ff:f4:98:d9:35:83:83:94:09:e7:9a:d2:d8:13:f9:
53:40:1c:57:27:a6:e9:8c:49:ad:80:7c:57:0b:b6:
49:5b:68:0c:ad:2c:0e:ca:63:16:9d:d5:af:55:ed:
7b:1e:52:29:6a:99:e6:98:85:e2:88:7c:4e:07:42:
5b:92:da:c5:24:8c:2d:07:3a:8b:70:a7:cc:a6:d8:
a1:57:e0:72:6d:c3:67:e9:69:0e:43:57:dd:03:bd:
38:bd:b0:77:2d:fd:67:57:d9:29:31:9d:bc:ff:75:
80:d5:11:5e:df:79:68:d0:90:f3:74:72:f8:11:74:
0a:49:29:03:52:7d:7b:1b:ed:c4:de:65:62:e8:d6:
6c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:14:24:AD:CD:15:D3:FB:55:FB:80:1F:A9:50:D2:1E:7E:8A:55:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/38442203-0a23-3c40-8941-6f49f8a5fb72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
X509v3 Authority Key Identifier:
keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
sbgp-ipAddrBlock: critical
IPv4:
142.248.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:ad:85:66:69:88:f4:ae:82:56:a5:68:20:64:08:6f:34:9b:
16:58:65:53:fe:c7:0a:dc:a8:33:33:29:46:4f:d3:3b:a1:45:
e7:d1:ff:5c:42:5c:a2:cd:4c:bb:7a:3f:e5:b2:eb:c6:38:8d:
fe:72:b9:36:9b:2d:04:5c:12:19:df:dc:d4:84:35:d0:b4:34:
12:94:f6:5e:5d:8f:e2:e6:4f:4c:dc:34:51:b5:ae:47:9c:b4:
98:34:6a:83:49:89:ab:22:cc:62:9a:0d:cd:25:28:6e:b4:1a:
dc:06:43:3a:e4:c3:ca:67:f5:1f:c5:8a:10:90:88:0c:05:4c:
9c:4a:73:2f:09:80:57:1a:75:06:07:ed:4a:fd:8a:51:c6:4e:
42:95:bf:bb:42:cf:96:82:f1:f9:a7:dd:3c:c3:ab:d0:1b:dc:
2d:08:52:6e:b0:23:16:ad:70:95:a7:a2:ba:32:96:7a:9d:18:
5a:a9:c6:f9:1b:2a:60:d4:d3:43:06:07:c7:3b:fd:60:46:f6:
84:45:1a:42:7b:c5:53:58:fa:ab:6c:b6:c1:fb:0c:9d:aa:bd:
66:60:d6:91:9d:a4:52:4b:dc:cf:85:6a:1e:f7:1b:27:9f:d3:
df:9b:88:83:a9:39:cd:68:cb:04:a6:81:bd:bb:66:44:67:01:
64:22:60:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:04:30 2026 by rpki-client