This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dc144d4b-4954-3ba2-bb99-9fc533cc20f6.roa
File: dc144d4b-4954-3ba2-bb99-9fc533cc20f6.roa (raw, json)
Hash identifier: p/RF2DOxeue8DWHGFatrmdC3Wl5/0EOaUUhNEzqD6fw=
Subject key identifier: 35:8A:E5:CC:2A:73:FA:73:F4:C4:EF:8E:F0:F1:C2:A7:65:6E:88:66
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584C4F6BCBEC711F7A295A629D08
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dc144d4b-4954-3ba2-bb99-9fc533cc20f6.roa
Signing time: Fri 26 Dec 2025 02:00:32 +0000
ROA not before: Fri 26 Dec 2025 02:00:32 +0000
ROA not after: Thu 26 Mar 2026 01:00:32 +0000
asID: 23473
IP address blocks: 153.33.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4f:6b:cb:ec:71:1f:7a:29:5a:62:9d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Dec 26 02:00:32 2025 GMT
Not After : Mar 26 01:00:32 2026 GMT
Subject: CN=170b76b2-5cdb-4b45-a6cf-ea4e3cc198c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a6:b1:0b:ab:f7:aa:0e:b2:9f:d1:e1:7a:c9:
6f:8a:ea:85:c6:3e:0e:52:f2:06:2f:8e:bf:60:e4:
46:e8:ea:a9:67:f4:37:29:d0:13:b4:c8:54:59:40:
b8:b4:9b:a4:5d:dc:2b:b5:25:8a:78:da:93:52:35:
0a:24:e5:f3:4f:b0:04:a0:e7:f9:93:7f:5d:c2:a8:
b9:d7:7a:fa:5c:5b:40:36:89:27:99:09:ed:18:9e:
8b:e5:65:ae:1b:47:39:d9:e0:b7:3f:35:b7:81:55:
bf:02:0f:c4:6e:a1:8d:92:78:3e:23:50:9c:fc:c7:
83:e9:bd:16:49:31:8a:18:0e:ba:19:1f:f8:41:a9:
2a:53:85:3e:10:e9:a0:6e:ad:5d:b5:16:35:66:b4:
c2:80:60:25:84:a0:5f:96:f8:a8:38:b1:01:41:66:
18:c9:0c:40:57:eb:23:d4:ec:48:bc:d2:a7:fe:f0:
40:11:12:29:c8:6a:03:28:2f:4c:57:43:41:f3:cb:
0e:c1:db:89:5c:c1:f6:5c:8d:18:67:bb:84:94:97:
50:71:f8:35:42:74:3a:45:54:09:45:83:d7:9e:aa:
22:93:df:58:09:1b:c6:d1:23:6c:c5:9d:ea:82:3a:
3b:3c:ce:96:9a:b9:54:a4:ce:84:0d:58:a0:e2:2b:
ad:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8A:E5:CC:2A:73:FA:73:F4:C4:EF:8E:F0:F1:C2:A7:65:6E:88:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dc144d4b-4954-3ba2-bb99-9fc533cc20f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
153.33.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:85:12:f2:c0:90:97:ca:e5:74:f6:3f:69:92:0d:66:5d:00:
d8:28:09:b3:a1:9d:28:17:8d:9f:f6:25:02:09:07:de:e8:a5:
92:25:47:61:49:0b:8e:a1:ca:c3:1a:2d:94:c1:88:f1:5d:9c:
81:51:ec:cb:b4:15:a2:38:14:64:2a:3d:06:ff:38:e2:7d:b0:
22:f9:50:d7:4a:01:e2:8c:2b:d2:4b:a0:3e:ce:fe:17:1c:01:
96:ed:79:84:ad:a8:f8:56:5c:60:28:bb:bf:1c:68:62:32:e4:
36:f0:fe:20:ee:e4:da:83:04:c1:c9:08:94:55:c6:e1:82:bc:
ed:6d:d2:ca:23:25:a3:39:7d:b4:c2:55:f8:c7:73:19:ad:55:
e1:eb:d4:a4:d8:c1:38:d4:81:de:be:2e:5d:a1:05:24:50:4d:
9b:41:4e:de:18:30:19:a1:de:88:92:0f:2d:e7:56:8c:ab:da:
15:f3:a5:52:4a:77:d7:64:11:0f:5f:e0:68:b5:15:14:44:93:
53:25:10:a0:7a:35:c6:11:e8:ec:a6:c1:96:e0:a1:06:40:2a:
2c:9c:b1:c6:66:96:76:51:16:be:03:d2:58:60:2c:f8:ca:87:
90:7e:8a:e8:04:b2:42:3a:df:96:5b:a3:24:48:5e:c9:59:54:
0d:e6:43:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:16:25 2026 by rpki-client