This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3949f9e2-9cb4-3f7e-9441-980330f7bf1c.roa
File: 3949f9e2-9cb4-3f7e-9441-980330f7bf1c.roa (raw, json)
Hash identifier: m57WDyhh4SuS0shSwnHDZ5mCy6AcDFWXRLUGyCmdm5o=
Subject key identifier: BE:EE:29:1C:17:27:74:6A:89:44:25:D8:D6:4A:2E:12:A7:F1:3D:1B
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584BD1CAFB84FEE8E41F32994180
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3949f9e2-9cb4-3f7e-9441-980330f7bf1c.roa
Signing time: Tue 11 Nov 2025 02:00:30 +0000
ROA not before: Tue 11 Nov 2025 02:00:30 +0000
ROA not after: Mon 09 Feb 2026 02:00:30 +0000
asID: 14618
IP address blocks: 158.115.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Nov 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d1:ca:fb:84:fe:e8:e4:1f:32:99:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Nov 11 02:00:30 2025 GMT
Not After : Feb 9 02:00:30 2026 GMT
Subject: CN=0278fa2a-3d2a-4ab9-8502-e3de6097452a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:a9:1a:c8:80:5b:5a:4e:1b:dd:54:89:96:
15:3e:5a:6c:c8:9c:97:91:42:df:be:5f:46:80:1a:
c3:a7:75:f1:52:fe:5e:63:a3:ab:a7:9c:75:8b:96:
2b:5f:bb:78:d3:54:3c:07:e4:ca:ce:75:8e:2c:86:
75:2c:7f:13:39:3f:b1:9e:ca:b3:6c:41:46:61:63:
c1:f2:e8:da:5d:e4:ee:1b:f2:72:8f:0b:f6:e4:34:
63:24:5a:80:95:7a:48:48:e5:27:a7:aa:5f:92:c3:
e2:2d:0d:b5:d9:a8:47:cc:2d:6d:2a:16:de:f5:87:
e6:cf:46:fa:f3:93:51:48:8d:96:36:d6:29:f5:cb:
d0:48:0b:5f:7f:db:10:56:ec:2c:e8:07:41:89:70:
e1:ae:8e:9d:1f:bb:37:c2:27:e9:93:63:45:de:28:
46:80:c6:56:52:0f:97:fb:68:20:b4:57:2f:c2:73:
6b:7d:cf:78:a6:21:e4:ed:16:30:74:da:d0:ce:c1:
ee:15:27:77:6d:ac:76:0d:f3:11:36:79:51:9d:18:
c4:a1:94:87:e5:b2:d3:0c:c3:97:79:71:cb:81:03:
a5:2d:45:98:c4:3c:ed:3e:64:30:93:34:f7:a5:7b:
f0:f1:f8:08:96:40:c9:00:e0:08:3f:43:71:c4:d5:
98:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EE:29:1C:17:27:74:6A:89:44:25:D8:D6:4A:2E:12:A7:F1:3D:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3949f9e2-9cb4-3f7e-9441-980330f7bf1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:6b:9f:14:38:8c:ca:46:2e:8c:f0:b2:d0:2d:6d:8c:d7:eb:
da:34:48:41:9a:cc:63:d8:77:8f:3a:22:ed:e3:34:9b:79:76:
63:ec:fd:b1:02:9d:b4:f5:49:6c:a0:08:d8:8b:3c:6b:4c:10:
42:11:d3:e4:16:2d:50:55:b6:10:e1:a6:4a:8b:0a:cf:55:0c:
45:27:3f:a6:8d:9e:3c:f9:61:c6:11:6c:a3:2e:96:44:44:0c:
26:b1:84:d9:39:d3:d1:bf:6a:8c:33:06:c4:6b:c7:e2:b8:4d:
5f:15:cc:c9:c4:cc:cb:79:92:d2:58:30:50:13:67:6c:01:6a:
1a:00:04:34:42:c9:71:5a:a9:0b:c0:9f:c7:8f:b0:29:4d:ad:
5d:54:70:b6:f7:39:e9:74:da:7e:f1:63:5b:90:43:cc:a0:5a:
f9:18:fe:7b:f7:fb:94:b8:56:94:c9:23:56:a7:8a:aa:b1:46:
6c:94:49:a9:eb:d3:5b:92:f6:a3:64:14:bd:c2:08:c8:75:f4:
88:0d:7e:6f:7c:df:19:4a:2f:1d:86:4f:9f:b2:67:bf:15:53:
9b:15:a1:42:b0:19:94:dd:64:70:79:ca:86:db:8d:0a:e5:a2:
39:1a:89:9a:8b:20:b8:6d:26:17:d3:3e:9a:50:d1:d9:d2:e7:
f5:fe:88:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:35:06 2025 by rpki-client