This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/436d5917-f698-304c-8338-7083f826a771.roa
File: 436d5917-f698-304c-8338-7083f826a771.roa (raw, json)
Hash identifier: B/4NwChfQMs0eZrto0Kfr6bBdBnsGwW6vTYOHXaklJQ=
Subject key identifier: 6A:60:38:98:8A:21:48:01:40:0A:28:E6:F8:E9:B3:81:FC:BA:CF:78
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584C109B857AEB091F111371C100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/436d5917-f698-304c-8338-7083f826a771.roa
Signing time: Wed 03 Dec 2025 14:00:38 +0000
ROA not before: Wed 03 Dec 2025 14:00:38 +0000
ROA not after: Tue 03 Mar 2026 14:00:38 +0000
asID: 397223
IP address blocks: 198.133.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:10:9b:85:7a:eb:09:1f:11:13:71:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 3 14:00:38 2025 GMT
Not After : Mar 3 14:00:38 2026 GMT
Subject: CN=8156a85e-a6f3-44dc-bac5-2d0771a7a257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:1d:ce:1b:46:e7:fc:df:a1:fc:6d:4b:17:
f0:b5:e3:d8:78:5a:84:15:d8:54:9e:c8:bc:d4:2e:
dc:f6:cd:e6:50:97:c0:8a:53:53:af:96:69:b7:6b:
c6:46:d9:89:b5:3b:cd:5d:b7:5d:db:66:0c:ef:f7:
cf:f6:d5:2b:58:02:ac:38:da:a0:66:3e:35:c2:e9:
86:2e:b6:89:67:36:2d:cb:6c:ea:c5:47:aa:24:6b:
df:94:ac:d1:9e:78:a4:6a:32:8e:76:c4:56:e9:f5:
5b:4d:f5:74:8b:dd:c6:e4:f5:57:d8:da:31:a6:6e:
24:98:53:9b:c9:33:31:da:57:00:60:d6:a7:c8:a8:
f2:b7:3d:4d:dc:af:70:11:1b:a7:1e:3b:4a:a7:c9:
8a:5f:8a:91:ca:d0:32:d9:f3:61:6b:1a:1c:7a:5e:
19:86:d8:94:a9:4e:f0:a6:c4:6d:a1:df:9a:a1:75:
a2:50:13:cd:31:f5:cf:af:52:ac:30:9f:b7:cf:95:
ad:55:6b:8c:a1:9c:27:be:f0:07:c8:7c:ca:13:0f:
fc:31:1a:53:12:af:3d:9d:f2:10:f1:62:dc:e0:24:
6a:5d:fe:c4:05:46:1d:2c:33:32:4c:8e:1c:4a:36:
c5:54:45:44:7b:d6:63:55:65:78:e4:40:76:b8:7f:
27:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:60:38:98:8A:21:48:01:40:0A:28:E6:F8:E9:B3:81:FC:BA:CF:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/436d5917-f698-304c-8338-7083f826a771.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
198.133.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:d9:2f:66:84:32:d0:58:f3:e0:7d:48:9e:d5:90:06:2b:5c:
41:8a:6f:60:9f:d5:47:20:ba:bd:2b:89:00:40:3a:2d:cc:e2:
dd:86:66:e7:cd:c9:c6:6a:43:1b:b2:70:82:ad:a1:70:7c:67:
eb:eb:53:48:4e:d2:3e:8a:03:a4:fa:a7:3f:8e:25:dc:90:87:
5d:6c:46:9c:99:1a:9c:19:6d:9d:60:ef:1d:d1:8e:80:53:e8:
82:d8:83:12:2e:09:12:6e:20:0c:2f:fe:c5:c5:8b:48:92:81:
ec:43:d6:72:05:24:54:fa:6c:2d:d8:e6:db:d3:66:21:50:f5:
b1:de:76:fc:9a:69:3d:73:31:8e:06:a3:08:29:75:44:6b:a9:
39:c3:95:7f:39:c9:a9:42:9f:d9:1c:9d:c7:3b:a1:99:67:fa:
df:e4:a5:8a:fa:ac:4b:08:9f:7c:9c:c4:ab:61:8e:9b:c4:a9:
63:91:08:de:af:d2:5e:8d:d2:42:95:45:2a:b6:3e:dc:f8:9f:
39:49:ea:26:7e:ac:56:36:7c:a2:61:8d:5b:91:65:45:b0:e8:
b8:c5:b4:be:66:a0:a2:9e:7b:87:0e:de:5c:cb:0d:4e:ef:81:
00:86:bb:e2:d9:1d:23:97:d0:26:43:77:06:89:b0:bb:cc:a3:
8d:54:ef:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:02:42 2025 by rpki-client