This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6d13220e-7641-39fe-8883-dddfcf43289f.roa
File: 6d13220e-7641-39fe-8883-dddfcf43289f.roa (raw, json)
Hash identifier: DuysEhpmVAbc+F+9MVq415XrfKsk1cxLV7LvUX3Gkfg=
Subject key identifier: 33:03:73:7B:A7:A7:6E:71:81:8A:60:AC:F4:89:EF:45:DD:DC:98:04
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584BEF1B2CECBF4D696B92789800
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6d13220e-7641-39fe-8883-dddfcf43289f.roa
Signing time: Fri 21 Nov 2025 14:00:38 +0000
ROA not before: Fri 21 Nov 2025 14:00:38 +0000
ROA not after: Thu 19 Feb 2026 14:00:38 +0000
asID: 3949
IP address blocks: 157.238.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 03 Dec 2025 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ef:1b:2c:ec:bf:4d:69:6b:92:78:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Nov 21 14:00:38 2025 GMT
Not After : Feb 19 14:00:38 2026 GMT
Subject: CN=6f32e6cb-1439-4fe4-bd11-1d8d39c87721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:9b:15:13:4a:8d:2b:26:73:b8:1c:f8:a1:
d6:c1:31:17:a7:14:9c:45:df:a8:94:28:80:a2:42:
ba:24:9e:cb:26:f5:db:e2:f3:ae:cf:87:d0:df:dc:
37:20:7a:df:90:e0:60:20:bc:7a:2c:21:c1:8a:6f:
cb:6b:33:eb:a1:2b:cc:ab:80:45:ed:39:ed:95:91:
e5:68:b0:c5:21:cb:34:00:b2:cf:e4:4d:3a:ef:9d:
a2:a2:7c:9f:c5:ac:1d:95:e7:7a:d9:2c:78:e2:01:
2e:b6:b0:b5:8a:89:28:a1:49:4e:d7:87:34:0a:49:
2d:9e:f0:39:9b:cd:cf:ca:3c:ca:af:02:76:09:85:
c5:ff:0d:77:1a:13:c7:30:a9:0e:f4:5c:59:a3:01:
cb:0d:c9:c4:03:9c:19:40:18:10:67:c9:6d:ab:27:
7d:23:f6:ec:1a:c3:c8:bf:b1:70:aa:b4:fb:7f:a6:
9a:df:4e:d7:12:13:90:11:72:d7:a2:a9:80:52:e0:
a6:32:c9:3e:fb:fd:26:a4:63:a1:7c:2d:02:6d:39:
b5:a4:6a:7d:82:7e:84:c9:9a:d0:ab:9a:28:0d:13:
64:53:48:39:c7:29:31:bd:9a:cc:ce:23:3c:a4:20:
50:6e:8e:c4:40:92:c6:1b:ce:1f:72:06:4b:00:b8:
c8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:03:73:7B:A7:A7:6E:71:81:8A:60:AC:F4:89:EF:45:DD:DC:98:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6d13220e-7641-39fe-8883-dddfcf43289f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
157.238.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:5c:ee:7a:9e:cb:1d:9d:aa:28:d6:2a:bb:9e:7d:ba:ef:35:
83:f3:54:0f:c9:a0:bb:53:90:aa:78:77:00:ab:5f:5a:20:76:
01:24:85:e7:3c:b9:24:ca:52:30:79:38:34:64:17:38:d6:dd:
f4:21:f9:23:b7:0c:34:59:7d:c8:da:92:61:83:1f:62:e2:83:
15:e4:d2:1c:dc:27:32:50:de:75:b1:b7:54:f2:58:03:15:74:
8c:e8:d6:ba:1e:ad:d5:22:23:d7:95:45:7c:2b:7c:22:5d:9f:
56:68:f0:d4:fd:38:9e:dc:69:4a:d0:38:a2:94:7d:45:b3:e7:
8d:76:86:51:77:90:2c:9f:4c:3d:fe:69:b5:37:fe:9d:11:c7:
7e:d4:42:ab:f5:46:31:26:09:12:4a:f7:1a:b4:4f:bb:ac:39:
e9:66:22:5e:a6:16:4e:f5:2d:d3:da:a9:6c:ce:31:f9:f5:7f:
52:1b:7e:3a:4a:bf:15:6d:2d:0d:0f:11:ba:ac:7b:c7:29:1f:
6c:44:e6:47:2a:b4:94:7d:a9:0d:ff:1e:16:f0:cb:5a:7f:fb:
63:bb:9a:fb:ba:e3:e3:49:04:22:51:aa:b4:6f:37:c3:c3:07:
22:44:52:5c:0f:30:2b:b5:13:79:83:a4:1c:50:09:0d:9f:06:
09:3e:19:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 2 09:04:08 2025 by rpki-client