This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f32a8314-f1a9-3697-80fa-94db76d17fcc.roa
File: f32a8314-f1a9-3697-80fa-94db76d17fcc.roa (raw, json)
Hash identifier: k623ri7pZb0U13VrdPZNZhWoosCUkjQ7BRuVHg5V04o=
Subject key identifier: 01:47:BE:CE:86:76:03:8B:1C:D3:01:E1:D5:BA:38:C4:BD:5E:28:5A
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584C470BD785F0A2B9A1B1DD4A40
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f32a8314-f1a9-3697-80fa-94db76d17fcc.roa
Signing time: Tue 23 Dec 2025 02:00:31 +0000
ROA not before: Tue 23 Dec 2025 02:00:31 +0000
ROA not after: Mon 23 Mar 2026 01:00:31 +0000
asID: 23473
IP address blocks: 153.33.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:47:0b:d7:85:f0:a2:b9:a1:b1:dd:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Dec 23 02:00:31 2025 GMT
Not After : Mar 23 01:00:31 2026 GMT
Subject: CN=a2a0a48b-23c2-47c9-af9d-35ee86ad1875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f6:9d:4f:81:8e:19:65:e0:eb:ef:0e:9c:5b:
8b:81:e6:c2:0e:25:b3:4d:43:a9:a4:17:89:e1:72:
c8:58:18:c5:fb:c2:d9:a6:d4:22:85:15:4e:7f:6a:
a1:a8:dc:6d:0a:58:bb:34:0f:03:9e:78:91:d3:f9:
7c:01:da:13:0f:cb:6e:ef:2a:55:35:8f:4d:27:30:
98:06:18:f5:fc:52:59:75:bb:c7:22:f7:a4:40:1f:
b6:86:59:1e:c7:8a:51:0b:1d:06:81:d7:5f:9b:f6:
48:ea:b5:b7:8f:bb:01:93:8c:a8:71:e1:3b:95:74:
2a:64:2c:27:fe:03:b2:9b:6b:f9:fa:1d:0b:dc:7a:
44:e9:0f:f5:69:35:e4:c9:86:f1:f6:ab:ed:22:47:
f2:7b:8e:84:dd:6c:f8:30:80:d3:8b:c6:18:92:5a:
e0:43:72:8d:ae:bc:3e:6d:af:b3:ec:51:26:67:b0:
96:56:fb:ce:82:72:83:1e:2c:45:e9:0a:b8:54:95:
85:70:4d:ad:42:c4:e3:0e:c9:58:67:41:a7:a7:aa:
9c:93:3d:73:d2:39:94:bf:60:43:33:f7:67:9b:0a:
8e:a8:cf:c3:60:74:e8:64:5f:70:1c:0b:63:de:97:
05:3c:ff:b3:0f:57:99:9d:ed:92:19:b6:60:e8:09:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:47:BE:CE:86:76:03:8B:1C:D3:01:E1:D5:BA:38:C4:BD:5E:28:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f32a8314-f1a9-3697-80fa-94db76d17fcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
153.33.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:7e:53:93:65:f8:3b:da:22:60:fd:53:0a:a3:e2:22:67:85:
93:93:77:da:59:c8:be:93:f6:67:34:a5:90:c1:f8:98:52:b7:
45:95:43:7e:09:b4:04:74:6c:a5:7e:fa:09:df:79:d8:ed:db:
ec:31:0d:b5:80:8a:be:e6:f5:5e:d8:f6:c1:7f:49:da:e8:25:
87:e0:fd:79:d4:ef:96:ae:a2:07:a8:c7:1b:3a:bc:7f:76:ca:
d8:5e:58:cb:75:d6:55:82:9a:05:8b:46:aa:09:fc:fb:95:76:
ca:82:c6:65:d1:43:cb:fb:06:7c:d6:d5:66:88:10:a1:6a:85:
5f:5b:d7:21:8e:ae:c5:f5:a2:80:a1:85:ff:df:14:93:56:ee:
32:c6:1e:4b:98:82:51:33:af:7c:3e:48:0f:a9:d5:4d:d0:16:
5d:c4:06:56:5b:9b:cd:3c:27:1a:dc:11:69:28:16:a9:fc:ed:
84:9d:04:a7:0c:cb:87:eb:9d:01:25:0f:30:1e:4d:e8:a0:25:
bd:75:4c:e2:a6:dc:68:51:57:47:0a:56:85:dc:60:30:47:5e:
c2:11:77:d3:2c:f5:87:f3:c4:93:d1:d6:1e:4e:8b:f3:20:85:
9d:b8:02:3c:3f:b5:56:b2:ef:f4:93:af:36:ca:12:d1:6c:c5:
aa:dc:8a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:49:58 2026 by rpki-client