This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/345bda5b-c8e2-3ed9-a8ff-239bcb371819.roa
File: 345bda5b-c8e2-3ed9-a8ff-239bcb371819.roa (raw, json)
Hash identifier: jD2TcqfSGx+pjXmwJXpi6v6561q/Wc9f/+0hpXR8q60=
Subject key identifier: E5:C8:8B:C4:AF:D2:88:CD:64:A5:2B:A0:B0:93:4E:8A:9B:9E:3A:70
Certificate issuer: /CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291
Certificate serial: 010D0C9F4328584C45A827C95108E57863A30D00
Authority key identifier: C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/345bda5b-c8e2-3ed9-a8ff-239bcb371819.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 400136
IP address blocks: 98.143.148.0/22 maxlen: 24
98.143.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a8:27:c9:51:08:e5:78:63:a3:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=0946cce4-c7bb-49b8-8c93-86418a3f7773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:51:a0:e1:68:fe:0a:15:63:c3:55:8b:06:56:
82:0a:c7:8d:75:76:8d:4a:bb:46:47:ef:0b:03:b3:
b8:4f:46:af:93:53:9f:b6:69:df:08:d5:53:4f:8d:
1a:3e:47:d0:a3:29:16:e5:9d:57:b6:70:39:da:53:
cc:10:6c:88:4e:86:e7:fd:59:40:b1:da:79:df:d0:
80:b0:99:c9:f7:60:a0:e4:cd:61:41:f4:7c:f7:ad:
c1:88:9b:df:1b:0f:50:59:79:00:9b:ac:9d:f3:8d:
3f:57:20:3b:0c:11:4d:2e:05:0a:9f:9e:5e:af:9d:
cf:13:b3:79:ab:f3:a7:75:c4:65:f7:e3:ae:5d:94:
df:4b:56:38:e0:f9:f4:7d:59:8e:af:04:cf:fb:bc:
31:08:e3:45:30:fc:70:fc:95:d1:a0:7a:aa:b3:80:
2e:11:55:a9:ea:76:f4:a9:5c:27:10:1b:b0:9d:e7:
91:2e:7d:9b:a0:ea:03:e2:7c:a0:6a:9f:cb:ca:3a:
5d:d2:5a:18:90:18:1d:a4:cb:9a:e2:8a:78:b8:a1:
8b:b5:a8:29:df:02:8f:31:e7:61:1d:73:10:da:4e:
41:66:ea:b9:23:2a:bb:64:65:b7:a6:bd:f8:a1:81:
56:bb:30:b6:8a:a4:e7:d8:50:f8:87:a4:d0:03:59:
c6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C8:8B:C4:AF:D2:88:CD:64:A5:2B:A0:B0:93:4E:8A:9B:9E:3A:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/345bda5b-c8e2-3ed9-a8ff-239bcb371819.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl
X509v3 Authority Key Identifier:
keyid:C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer
sbgp-ipAddrBlock: critical
IPv4:
98.143.148.0-98.143.155.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:d5:b0:c8:8e:2a:73:67:12:cf:04:3c:62:8f:65:a5:7b:89:
51:e3:49:5f:59:f6:36:af:8c:3e:dc:7d:df:00:28:f0:f5:69:
05:a6:81:28:f5:54:fd:40:69:cd:35:c3:aa:98:15:e2:d4:cf:
6b:f4:31:6e:43:1f:c3:3e:50:be:a5:dd:20:88:73:e1:db:71:
53:95:ac:78:4e:a6:74:e0:f8:8d:f6:48:0c:aa:23:2b:12:6c:
7f:d4:c6:35:22:e5:c9:df:e4:10:45:23:40:d2:75:25:fd:df:
7e:43:9e:92:b0:47:20:30:a4:b2:a6:6b:80:1e:0e:5e:b5:f7:
85:34:a2:27:88:78:2e:d5:41:a1:c1:4d:a0:b7:b7:5e:fe:3c:
a2:a7:9e:6c:a9:e5:87:31:8f:83:ee:ef:3a:50:35:eb:93:a3:
0d:71:d5:3e:9b:37:f4:5b:10:d0:2b:ad:49:ab:e0:d2:13:4f:
db:9c:5f:74:1f:94:52:e0:37:24:6c:67:63:8e:5f:b9:0b:5c:
d0:92:89:65:10:2c:84:49:26:2f:c2:12:4d:99:9b:54:76:76:
cd:bd:48:1e:95:b0:c7:25:93:52:fa:41:26:78:bd:e7:a5:14:
4c:a7:28:d8:6c:69:3f:ce:46:9a:8d:c4:08:63:94:01:64:e0:
01:fc:57:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 23:06:53 2026 by rpki-client