This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/904aa8fc-7cd9-35c1-827c-8f3c022df480.roa
File: 904aa8fc-7cd9-35c1-827c-8f3c022df480.roa (raw, json)
Hash identifier: K9Wc3N8LPSlFVwj7yaNY+TH43gH1uxbYsZzHNRruQ2g=
Subject key identifier: E3:34:F0:8B:98:E6:6B:E9:C9:15:B7:B5:06:74:0B:BD:98:C4:DE:C8
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584C57CBC4DF6CB11AA2F85E0780
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/904aa8fc-7cd9-35c1-827c-8f3c022df480.roa
Signing time: Mon 29 Dec 2025 02:00:30 +0000
ROA not before: Mon 29 Dec 2025 02:00:30 +0000
ROA not after: Sun 29 Mar 2026 01:00:30 +0000
asID: 23473
IP address blocks: 153.33.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:57:cb:c4:df:6c:b1:1a:a2:f8:5e:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Dec 29 02:00:30 2025 GMT
Not After : Mar 29 01:00:30 2026 GMT
Subject: CN=e5f5921a-60db-4e6d-9482-c52eb36aca19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:b3:68:d2:8f:a2:c1:6a:35:00:90:9d:4f:
17:15:01:23:6e:87:ce:a1:1d:02:ba:4d:d0:26:c2:
06:02:17:36:fc:ce:8f:8a:46:26:97:27:1e:a5:6d:
e6:cb:46:a3:3e:80:37:45:17:42:12:20:7b:74:31:
13:1d:de:72:d2:62:06:cb:d3:c9:e7:36:db:b1:e0:
b6:46:8e:b2:34:f7:c0:e6:16:34:08:b3:4a:ae:cb:
16:a4:1a:4b:1f:b0:2c:33:c9:d7:09:36:08:0e:3c:
ac:c8:6a:c7:6f:96:43:50:f9:4f:0a:02:0e:e1:39:
ab:f6:b5:dd:89:d1:11:1a:c2:28:ae:44:1e:40:9a:
a1:42:4e:de:c9:aa:dc:ba:e2:0e:88:62:3f:a8:68:
6f:2d:a3:7f:c7:c3:94:b3:fe:ed:b0:95:a5:b0:46:
25:fd:a3:d4:b2:98:9b:d9:fa:34:99:06:f1:45:23:
32:d4:80:62:47:4f:f0:d1:60:11:17:29:fa:e4:45:
ea:da:30:fd:5a:ae:0c:e7:2d:d3:fb:4b:da:01:9c:
e5:8e:66:f0:44:88:98:61:72:79:cb:0f:73:9b:e2:
b7:86:7d:a3:33:65:1e:69:f1:a9:db:51:be:2e:4c:
f1:24:65:92:16:6a:58:96:e2:88:78:fb:6d:2e:41:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:34:F0:8B:98:E6:6B:E9:C9:15:B7:B5:06:74:0B:BD:98:C4:DE:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/904aa8fc-7cd9-35c1-827c-8f3c022df480.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
153.33.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:bc:bb:a9:87:35:56:99:17:29:b6:7e:40:89:20:3d:8d:4f:
bc:10:10:12:26:f9:c3:03:06:91:29:df:ae:95:a5:61:fe:35:
5c:d3:30:cc:a6:b7:28:9f:64:88:16:3d:b4:fe:c9:3e:85:83:
3c:fc:93:62:69:d9:9b:8d:86:58:6c:52:8a:a4:1a:49:4b:44:
22:de:63:63:ce:51:c7:ce:e5:ec:cf:5e:e7:eb:c3:77:91:d6:
f1:30:22:01:62:05:95:af:86:04:3c:b1:c8:d8:a8:38:be:7f:
95:d7:96:cd:d4:f0:c9:b6:ec:bb:ce:38:9b:23:8f:58:ab:da:
81:e0:a5:69:98:39:36:70:67:e1:f8:a1:e0:95:e9:6e:bd:39:
42:3e:b2:96:83:05:a9:3d:a9:f7:42:93:e9:63:e0:33:f9:23:
30:22:48:8e:a4:4e:a3:7e:8e:cd:65:10:06:ad:15:81:99:36:
98:8b:73:0b:62:67:5e:cb:7a:5c:5a:eb:72:42:ef:58:c5:cd:
7a:fc:a2:5f:5b:df:a5:82:dc:13:b0:1e:93:64:ad:d7:32:79:
51:b3:0c:9b:bb:52:64:c0:8e:fb:f4:58:45:6c:3b:2b:de:ee:
85:64:60:e5:0e:f4:6f:09:15:36:83:52:aa:78:d9:03:53:d0:
39:a2:09:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:16:17 2026 by rpki-client