This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/a64bf38f-925a-34bb-b213-9abac238d2a5.roa
File: a64bf38f-925a-34bb-b213-9abac238d2a5.roa (raw, json)
Hash identifier: w0GTQjcdp1JdK8P2af9m1v9kP22hcgUz24QVzsa9v8k=
Subject key identifier: 70:73:40:31:50:3E:72:2D:32:4C:0A:C2:B2:4A:94:17:1D:6F:8E:46
Certificate issuer: /CN=432c4e45-9934-4a21-b56f-b27d7aa21e49
Certificate serial: 010D0C9F4328584C28563848F0339135C155A000
Authority key identifier: E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/a64bf38f-925a-34bb-b213-9abac238d2a5.roa
Signing time: Fri 12 Dec 2025 02:00:30 +0000
ROA not before: Fri 12 Dec 2025 02:00:30 +0000
ROA not after: Thu 12 Mar 2026 01:00:30 +0000
asID: 3152
IP address blocks: 131.225.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:28:56:38:48:f0:33:91:35:c1:55:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432c4e45-9934-4a21-b56f-b27d7aa21e49
Validity
Not Before: Dec 12 02:00:30 2025 GMT
Not After : Mar 12 01:00:30 2026 GMT
Subject: CN=d16a934b-7bc7-4707-adbe-0955f8d57079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:88:a8:2c:ab:ec:56:9a:c9:de:58:c2:6d:
e0:19:2d:bc:3b:e1:90:32:80:01:3f:66:02:4b:75:
8d:10:89:4a:55:bb:7e:54:45:b4:97:90:28:44:9f:
70:38:69:52:0c:88:49:e7:4a:1e:23:eb:39:28:db:
91:ce:0f:a7:59:db:a1:d1:1d:9e:2b:86:97:04:80:
a9:95:ec:7e:71:ed:84:d4:b2:f2:d9:9f:f5:34:9a:
4b:56:e3:d2:b7:84:8b:e5:66:60:71:16:21:34:d3:
bb:5f:e6:0e:00:4c:60:2a:ac:c3:14:cc:c3:01:88:
83:03:a6:16:da:fb:0f:a2:0b:c8:9a:7d:09:7f:a8:
b3:66:a9:b0:c0:8c:a8:ab:91:5d:65:42:6d:bd:f5:
1f:0a:dd:01:d2:6c:32:06:1d:49:97:20:ac:78:95:
92:27:db:d0:20:30:e9:49:d5:7a:bb:18:0a:6a:ef:
18:c4:48:5f:98:34:17:74:7e:91:b6:76:fc:27:dd:
2f:af:16:92:27:81:05:3c:19:12:13:73:6a:a0:e2:
c8:92:61:3d:28:f6:0a:09:4b:d4:a9:3d:61:b8:95:
89:ed:14:9f:37:3d:6b:8c:2c:f6:c8:dc:cc:f8:6f:
75:88:38:6b:95:03:ba:bf:f4:ed:ec:73:83:80:78:
95:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:73:40:31:50:3E:72:2D:32:4C:0A:C2:B2:4A:94:17:1D:6F:8E:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/a64bf38f-925a-34bb-b213-9abac238d2a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl
X509v3 Authority Key Identifier:
keyid:E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer
sbgp-ipAddrBlock: critical
IPv4:
131.225.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:c8:b9:5a:dc:9d:aa:87:c5:d1:59:52:4f:f2:f8:df:06:43:
aa:66:3c:c5:c1:21:ad:6f:bb:8d:d1:3a:75:ad:c3:20:95:9f:
f6:94:95:45:6b:4c:b8:55:65:dd:41:2c:ff:b6:29:8b:e9:92:
fb:ff:0c:bf:4f:46:b3:c7:75:74:1c:b0:ee:09:7f:b0:7f:b7:
78:15:44:de:e0:08:d5:fb:0c:b0:21:cb:bf:d8:b8:5a:71:c4:
ab:34:6d:6b:10:90:28:81:28:1f:c3:7d:44:8a:2c:a9:73:03:
ce:1d:5e:2e:f3:df:83:58:f3:55:d5:02:62:3b:e3:3c:b3:ca:
bf:57:20:67:56:f4:a0:ba:c4:92:ec:2c:62:52:80:e6:fa:62:
80:ff:69:a6:98:89:ea:37:b5:37:40:31:2d:d8:24:b5:d8:01:
ac:37:9b:81:65:83:f2:08:2d:50:bc:24:6b:6e:cb:c5:bc:37:
47:f8:e2:e1:79:0b:b1:83:de:25:d2:d8:1b:b6:af:20:2a:ad:
3e:5d:9f:74:de:34:17:89:4c:28:9a:25:4b:ec:c2:a8:ea:5e:
75:fa:3b:8a:5b:d0:17:e5:72:0b:33:a1:37:e6:67:67:ca:00:
c0:ec:e2:85:b9:20:77:36:51:f4:cf:f5:49:eb:83:28:d6:4c:
22:4d:c1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:03:58 2025 by rpki-client