This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/6134d21e-8982-3a39-a51f-8ad22c3de95a.roa
File: 6134d21e-8982-3a39-a51f-8ad22c3de95a.roa (raw, json)
Hash identifier: 32i8WdrXM/Zt2Kj6jh3Lt7m/cBPAgvnkwGx9C6A0y58=
Subject key identifier: 0A:66:58:3C:0E:69:5F:29:7E:C9:CD:FA:C2:24:69:A7:DF:5C:C8:B4
Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753
Certificate serial: 010D0C9F4328584BB88D0FA82894051D432A36C0
Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/6134d21e-8982-3a39-a51f-8ad22c3de95a.roa
Signing time: Sun 02 Nov 2025 01:00:31 +0000
ROA not before: Sun 02 Nov 2025 01:00:31 +0000
ROA not after: Sat 31 Jan 2026 02:00:31 +0000
asID: 22773
IP address blocks: 134.195.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b8:8d:0f:a8:28:94:05:1d:43:2a:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753
Validity
Not Before: Nov 2 01:00:31 2025 GMT
Not After : Jan 31 02:00:31 2026 GMT
Subject: CN=292b7af7-c6ca-4717-a59d-e0c2f92c1f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8b:74:09:86:3b:61:ef:7e:7f:a2:3b:c9:40:
14:9a:46:f6:ff:bf:f6:c3:b2:96:f3:bf:da:14:b1:
51:22:91:cd:77:5d:89:53:26:ab:55:91:f3:7a:07:
13:2e:af:8d:a1:ef:01:c6:5c:83:58:61:5d:b4:fa:
d3:e5:ad:9e:a8:ff:80:3a:3f:b0:0f:5a:f9:40:74:
0e:6a:1d:8f:84:dd:e2:63:ce:0c:f3:8c:2f:9d:1b:
f2:e9:0a:37:8d:75:ac:68:3e:23:9b:4b:4f:60:cf:
6c:18:a8:d6:65:be:67:98:7e:28:78:ad:79:7c:fd:
79:f9:d1:06:52:3a:89:04:15:28:93:5a:49:ae:79:
1c:c1:ce:92:df:d7:f7:78:69:64:7a:7a:59:c1:7e:
3d:6c:2a:42:4e:e7:41:d3:96:36:d6:12:2a:d4:d8:
d5:04:5d:05:94:40:48:2f:35:65:eb:09:dc:7a:d6:
ea:7a:13:1b:42:21:a7:cb:0e:07:2c:b7:78:18:83:
bf:99:7c:c2:93:7f:56:9e:eb:ba:12:c6:29:0a:67:
59:16:b0:c6:ed:9a:5f:7a:e1:d7:3a:c5:2b:73:0a:
7a:38:52:c2:56:53:34:ac:60:83:b2:95:2a:bb:a7:
91:08:db:38:66:85:e1:b8:b1:13:d7:d5:72:e0:dc:
96:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:66:58:3C:0E:69:5F:29:7E:C9:CD:FA:C2:24:69:A7:DF:5C:C8:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/6134d21e-8982-3a39-a51f-8ad22c3de95a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl
X509v3 Authority Key Identifier:
keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer
sbgp-ipAddrBlock: critical
IPv4:
134.195.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:e9:a8:56:d8:4a:a2:c4:a4:94:ee:4e:04:f4:35:f7:6b:e4:
81:13:62:f3:c7:d1:ca:1b:c1:c5:0c:73:fb:09:ff:6d:43:7e:
a3:c4:7c:cc:67:21:fb:9e:40:b4:32:92:25:af:9c:fa:2f:6b:
e7:4b:07:90:b9:04:bf:17:8b:d6:b0:dd:9f:de:6e:b0:bd:ea:
63:b6:91:c9:a6:bc:9d:cb:83:fa:af:ed:44:d7:18:7f:d8:4c:
74:eb:a0:79:a7:4e:ef:b1:e4:12:13:ab:73:bd:72:c9:93:87:
98:d1:85:0f:28:36:dd:f8:c6:be:6d:24:63:5c:30:dd:71:67:
10:8b:17:09:f2:2b:4c:b8:e3:8e:34:62:1c:6b:f4:a0:8b:67:
56:a7:b4:07:41:61:57:ff:11:d9:0e:4b:d9:a9:b2:fe:e1:ec:
5b:ec:5e:fe:2f:72:81:fb:a4:c5:88:23:96:7b:47:be:04:31:
69:50:87:81:6c:39:f4:13:12:2f:42:35:61:fd:b2:f2:58:52:
3d:bd:99:33:2e:4d:ee:50:69:c9:7c:a7:e2:2f:56:68:35:3e:
1f:42:42:e3:a4:8b:66:52:11:d6:f3:a7:dd:29:02:1e:ad:55:
9f:ee:1d:9a:6c:b5:94:9a:83:0f:86:3e:99:dd:d2:42:4f:d3:
15:53:37:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 23 06:56:34 2025 by rpki-client