This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa
File: 131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa (raw, json)
Hash identifier: rd16ArXJXejfFWeZMxNPHfPbO66T4VfxWYPw2fOoIRY=
Subject key identifier: 06:DF:B8:E8:F0:C1:08:E9:94:7B:81:B1:81:D7:DE:85:84:AA:B8:FC
Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial: 010D0C9F4328584BEAEB55347DF031591ED77300
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa
Signing time: Thu 20 Nov 2025 02:00:30 +0000
ROA not before: Thu 20 Nov 2025 02:00:30 +0000
ROA not after: Wed 18 Feb 2026 02:00:30 +0000
asID: 63293
IP address blocks: 157.240.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ea:eb:55:34:7d:f0:31:59:1e:d7:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
Validity
Not Before: Nov 20 02:00:30 2025 GMT
Not After : Feb 18 02:00:30 2026 GMT
Subject: CN=bb98378d-8634-4fe3-9c74-182486aba50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a0:6f:6d:09:87:80:79:4b:dc:2f:96:9c:8f:
f7:42:f3:a1:c8:ff:fa:3c:f3:bb:51:1b:f0:80:6d:
3b:42:93:05:92:22:92:07:2a:53:83:dd:39:eb:0f:
ae:16:47:68:7e:f4:c1:68:64:60:ba:67:50:cf:13:
52:9e:de:e2:4a:0c:e3:6c:9a:6d:c6:1a:c0:81:0d:
55:fc:c2:27:c1:61:48:b2:1e:20:4b:36:3c:23:99:
8c:8a:ff:88:67:b1:46:34:53:20:fe:af:b2:83:78:
7f:cd:c2:8a:ca:ef:54:da:43:64:c0:77:96:99:65:
52:b1:8e:b7:3c:71:1a:b2:5c:9c:24:c1:29:f3:12:
78:2d:95:98:b6:e5:07:97:4e:52:30:8a:c3:66:24:
f6:c9:fd:ce:b5:6f:3f:19:4f:0e:aa:e0:5d:af:56:
0d:e2:60:ad:21:be:82:89:a0:fd:e8:c4:5b:ed:93:
db:5e:1a:6d:f1:90:ef:05:f0:13:2f:cf:71:03:41:
56:08:83:51:f1:80:23:e4:77:bc:0a:b8:90:88:5f:
42:f5:80:34:57:89:d5:02:00:2b:ec:18:cd:8a:17:
8f:ba:45:0f:2a:1a:e9:a2:fb:fe:db:c5:14:6f:55:
ee:95:74:84:0b:c7:aa:86:5b:0e:3d:ef:f1:c0:2c:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DF:B8:E8:F0:C1:08:E9:94:7B:81:B1:81:D7:DE:85:84:AA:B8:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
X509v3 Authority Key Identifier:
keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
sbgp-ipAddrBlock: critical
IPv4:
157.240.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:27:b0:24:98:91:03:4b:7c:45:15:93:61:29:3a:05:d3:fc:
69:c6:33:86:34:47:dc:96:70:65:d9:96:b3:9e:ca:9b:31:83:
48:ca:9d:a2:3d:5e:85:16:a2:e7:77:65:15:71:49:da:b6:41:
b0:33:6d:7e:e2:32:b7:40:35:96:78:0f:0f:6b:69:c5:c7:61:
b5:17:b0:93:86:e9:25:f0:3a:df:f1:08:86:1a:9d:2b:9f:94:
e8:7a:74:12:78:93:6b:db:39:2b:e9:e8:01:bd:08:e9:2d:ce:
ec:cb:82:55:21:f2:08:3b:9f:3c:9d:5e:a2:b6:c3:29:e7:7b:
f2:39:38:cf:40:98:7e:4a:4c:ab:2a:79:bf:50:77:c5:35:8d:
aa:fd:18:ab:b8:68:07:5b:75:6c:c0:62:e4:e3:0c:6f:dd:8c:
cd:02:2d:08:dd:f6:4f:2a:68:18:9a:ca:75:8f:60:e3:35:07:
f1:45:ba:62:56:b7:75:b0:55:24:03:0c:78:8f:7f:ba:85:49:
ba:0c:ef:91:04:a8:4c:c0:25:eb:c7:7b:c5:0f:ac:27:e3:9a:
53:3a:a6:cc:e2:fb:68:d8:0d:52:28:b6:bb:78:ff:d0:05:c0:
b2:c9:d4:e1:f8:e4:8a:7d:db:67:50:09:12:c3:e9:05:54:8a:
d3:72:e3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:26:11 2025 by rpki-client