This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/f580b67a-767d-31bd-8089-26fba68e71a7.roa
File: f580b67a-767d-31bd-8089-26fba68e71a7.roa (raw, json)
Hash identifier: ac9MY7ZYYKjrXr7vCcdQLyjxgcNnQcYTSfHLERuCFAw=
Subject key identifier: 29:69:E3:49:A6:B9:C5:0D:92:35:11:AC:5D:BF:B4:D8:14:B1:6E:80
Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Certificate serial: 010D0C9F4328584BC96AF24BF85AA1CD76D19480
Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/f580b67a-767d-31bd-8089-26fba68e71a7.roa
Signing time: Sat 08 Nov 2025 02:00:30 +0000
ROA not before: Sat 08 Nov 2025 02:00:30 +0000
ROA not after: Fri 06 Feb 2026 02:00:30 +0000
asID: 396982
IP address blocks: 152.38.158.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c9:6a:f2:4b:f8:5a:a1:cd:76:d1:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Validity
Not Before: Nov 8 02:00:30 2025 GMT
Not After : Feb 6 02:00:30 2026 GMT
Subject: CN=2285fc16-1211-4ff7-b21f-46f7b67bca8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6f:c1:c9:47:6a:0b:1d:6c:2d:0f:6d:97:63:
b8:4d:ac:24:c1:a3:9d:0d:5f:09:3d:b9:55:74:c2:
bb:7a:f3:13:f0:5e:cd:dd:e8:31:d4:f3:61:f9:3f:
a8:67:49:d0:62:ef:04:03:cf:1d:11:cc:83:e6:6d:
08:a2:2a:c0:78:1a:21:47:91:e7:63:67:e5:4c:5b:
47:c5:33:b4:6d:35:2a:41:da:90:dd:bb:96:7c:04:
d1:75:1f:86:8c:4c:8a:b0:a8:58:42:35:fb:2f:c6:
66:44:ef:93:ea:5a:50:ed:f5:99:02:17:96:04:17:
a5:53:84:e3:f6:f6:6b:3e:70:f1:73:43:42:4f:e0:
df:3b:5b:fc:d1:bb:35:5e:42:60:2e:4b:1d:35:75:
61:52:5c:5f:5b:bd:29:e7:8e:b3:06:ab:ab:7c:33:
55:e2:fe:80:3a:66:99:f5:c9:9a:ea:8f:48:27:d7:
d1:84:d3:b5:50:85:e5:14:ae:5d:e9:fd:cb:12:37:
ff:7c:89:31:03:6e:d9:85:e8:9a:67:73:17:19:2f:
9d:1c:be:2f:9c:97:35:7b:41:49:e6:6c:89:95:c5:
86:de:76:af:d7:06:0f:00:ed:5b:2f:7d:ad:88:15:
f6:68:9e:52:69:08:32:be:e7:c9:c8:32:d1:46:d9:
d8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:69:E3:49:A6:B9:C5:0D:92:35:11:AC:5D:BF:B4:D8:14:B1:6E:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/f580b67a-767d-31bd-8089-26fba68e71a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
X509v3 Authority Key Identifier:
keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
sbgp-ipAddrBlock: critical
IPv4:
152.38.158.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:18:67:63:fc:04:1a:b3:a6:48:e9:53:d9:27:6a:72:9a:93:
65:a7:9d:3d:39:08:e2:e5:ce:f1:51:de:a6:a9:4e:2b:41:87:
ab:27:44:8f:e9:55:73:53:46:1b:30:43:08:94:9d:9c:1e:fa:
6b:9f:f2:7d:a3:68:2e:cf:0e:5f:7a:55:bb:14:c5:74:f2:70:
90:a1:b8:0a:93:ef:79:56:13:97:f8:a6:8a:a8:78:ae:b5:e3:
33:ec:81:1c:41:d8:7d:7d:e1:1e:26:04:a2:33:0e:e5:37:bb:
98:f0:52:47:df:81:bc:95:a3:c3:53:4b:2a:cf:c0:a8:0c:2d:
db:4f:b8:30:69:f1:d3:99:0d:90:aa:9c:59:63:79:19:be:06:
55:1a:66:cf:09:e8:39:5c:5f:c8:bb:7b:9a:50:5d:97:2f:0e:
2d:16:0a:42:5f:78:7d:dd:50:51:f6:ff:dd:fc:83:9e:ef:b6:
b6:64:d6:7d:91:cb:bc:6a:e5:2d:fc:40:9b:b6:b6:70:27:0d:
c6:10:22:25:f6:d0:cc:c5:f0:01:3c:45:9f:70:7d:3c:06:48:
66:90:c7:01:4d:94:eb:6e:b4:7c:3a:e9:f7:b9:3f:b7:55:39:
51:be:d0:b1:d6:dd:54:4d:eb:60:a5:88:52:c9:0e:11:d5:20:
e0:1f:e4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:20:56 2025 by rpki-client