This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a938623e-6b7a-3f97-80a5-af568107b609.roa
File: a938623e-6b7a-3f97-80a5-af568107b609.roa (raw, json)
Hash identifier: m5Bapis87CxYdYAHLL7woFbmTJaqHL81QgVkwKF/4Bs=
Subject key identifier: 59:1C:DA:59:E5:5E:90:56:D0:30:0A:14:93:D2:1A:18:C5:30:EB:0B
Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial: 010D0C9F4328584C0B0642E2ADF5DCC37B9F8010
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a938623e-6b7a-3f97-80a5-af568107b609.roa
Signing time: Mon 01 Dec 2025 14:00:39 +0000
ROA not before: Mon 01 Dec 2025 14:00:39 +0000
ROA not after: Sun 01 Mar 2026 14:00:39 +0000
asID: 35039
IP address blocks: 157.133.160.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:0b:06:42:e2:ad:f5:dc:c3:7b:9f:80:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
Validity
Not Before: Dec 1 14:00:39 2025 GMT
Not After : Mar 1 14:00:39 2026 GMT
Subject: CN=aea0d9fe-b66c-4c34-82a9-cda0061566ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b4:8e:da:ca:4b:90:3e:b3:54:3a:a7:76:68:
63:60:b0:28:df:2d:96:f1:75:90:7d:18:47:d0:5c:
3d:d3:eb:2e:fb:e5:e9:c8:f7:a9:d9:75:38:dd:85:
3b:71:3d:a4:42:a5:54:27:97:d3:0c:2d:ba:7e:91:
64:26:c3:07:51:9c:b0:d0:b4:1d:f5:c8:db:e1:ba:
6e:03:d7:29:b9:a3:1d:c6:47:f1:ca:bc:bd:d1:ac:
be:7e:87:d6:b1:be:c8:f0:04:94:a7:bb:4a:a1:8b:
42:53:82:4a:20:ea:97:20:12:75:cb:09:60:96:bf:
f8:ba:c2:b3:9a:19:fd:f8:ee:81:81:6c:55:43:4a:
36:65:f0:46:72:35:7a:9a:68:9b:e9:e1:8b:80:97:
c0:21:2c:21:6f:33:4d:c7:b4:d6:5b:29:55:7b:1e:
72:30:35:20:22:05:f1:8f:ad:4a:14:c9:a7:40:27:
d3:0c:18:70:b8:39:f1:e5:a0:5f:b7:72:fe:0d:f0:
b5:85:25:83:24:05:b6:8e:58:b2:22:cc:2f:e1:e8:
0d:f4:7f:42:bb:dc:e0:65:86:2d:10:85:6a:85:d6:
55:5f:72:5c:ea:c1:63:af:90:17:6f:6b:c8:9f:7b:
85:9a:46:dd:fc:1a:dd:21:84:cc:91:2e:f2:b2:61:
07:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1C:DA:59:E5:5E:90:56:D0:30:0A:14:93:D2:1A:18:C5:30:EB:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a938623e-6b7a-3f97-80a5-af568107b609.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
X509v3 Authority Key Identifier:
keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
sbgp-ipAddrBlock: critical
IPv4:
157.133.160.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:75:ea:9b:d5:e9:89:a7:48:de:1c:39:df:a8:17:5e:94:3f:
3d:ec:ee:df:98:03:a7:b1:6a:4a:53:c0:d9:43:39:cc:be:5f:
a5:91:08:df:82:ec:86:8a:f0:e6:80:42:c9:a3:79:a5:f2:b2:
a5:9d:e5:52:f4:67:9f:60:68:2c:ec:68:7b:75:34:a5:e3:4c:
bb:f6:a7:ea:9c:9a:68:0b:4a:2c:ed:fc:71:1a:e3:5c:1b:bc:
d4:a5:ab:37:14:a2:e4:c0:b8:36:72:45:5a:ea:66:ef:a8:99:
64:46:e6:90:31:20:cb:57:2e:1f:42:3a:ad:e7:02:46:90:33:
b9:14:f8:9c:15:81:f4:72:cd:3f:9a:85:f4:34:ff:93:bc:74:
17:6f:31:55:8c:1d:28:b8:91:04:c1:e9:8f:de:89:91:29:ef:
64:6c:bc:e3:f3:fb:c6:ac:d0:ea:f2:b9:94:8b:ba:2a:88:89:
b0:37:86:10:66:4f:c9:e4:a9:9a:06:d9:69:6e:53:47:c0:b7:
6e:f9:98:be:61:af:9c:f0:5d:aa:2f:ed:f6:9a:51:56:19:b7:
d7:3f:c5:a1:67:89:e8:0a:f6:a5:f8:57:2d:8a:39:a9:29:94:
18:53:51:8f:ad:6e:b7:df:d0:c3:86:87:ce:09:9e:91:c9:2a:
fc:d7:d3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:45:21 2025 by rpki-client