This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/a3c7b443-32de-3f4c-955d-1b3a7f625428.roa
File: a3c7b443-32de-3f4c-955d-1b3a7f625428.roa (raw, json)
Hash identifier: DaK/xh69zrfYuz54hJDmcIut8QjtD+X43LxjfmWt5Lo=
Subject key identifier: CD:30:43:2B:88:2B:3D:6C:C3:E2:01:52:C8:F3:0D:C2:53:07:15:0E
Certificate issuer: /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial: 010D0C9F4328584C1A60D6C10625B8516D5A3580
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/a3c7b443-32de-3f4c-955d-1b3a7f625428.roa
Signing time: Sun 07 Dec 2025 02:00:30 +0000
ROA not before: Sun 07 Dec 2025 02:00:30 +0000
ROA not after: Sat 07 Mar 2026 02:00:30 +0000
asID: 198949
IP address blocks: 156.70.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:1a:60:d6:c1:06:25:b8:51:6d:5a:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
Validity
Not Before: Dec 7 02:00:30 2025 GMT
Not After : Mar 7 02:00:30 2026 GMT
Subject: CN=284b45fc-ddea-4295-b6fd-ee7d1b98bbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:4a:e0:fc:7d:5d:33:6b:5d:c7:e4:32:50:
1f:21:37:65:4b:ea:a4:6c:7c:5c:b4:cf:9d:8f:89:
31:9c:25:30:50:35:51:f4:c5:b7:41:67:e0:24:d6:
b0:33:2b:78:23:4b:1a:4d:2f:0a:71:bc:1e:a1:52:
0e:e0:33:15:67:7f:71:08:10:ed:64:d6:b3:66:4a:
d0:f5:4c:f5:22:41:43:81:37:d0:29:71:51:01:1e:
9b:5d:6d:36:25:bf:38:e8:ee:42:8f:03:1a:d5:b3:
d0:c5:7a:86:46:3e:4a:a2:7a:b6:0e:92:b5:e5:84:
cd:5c:e2:19:63:f0:23:ac:e8:f1:08:ef:90:33:c6:
ef:67:19:94:15:f7:87:cf:a3:8e:d0:c3:f2:6e:30:
9e:7b:d1:c9:09:2a:d2:9c:ad:57:01:48:44:4f:05:
af:21:11:26:97:b3:e0:c5:51:f7:97:5a:7a:7d:f9:
c2:c3:f6:fd:04:6b:53:40:15:7a:82:52:ae:59:a7:
26:28:51:31:02:c5:a1:c3:e2:0d:3f:d1:82:f8:c2:
66:e7:da:35:87:8d:90:23:28:ec:f1:d6:63:2c:80:
9b:ec:7c:2b:2c:02:c8:10:79:92:3b:ca:89:64:f3:
e5:af:b8:9b:f2:eb:28:1c:12:dc:88:50:b1:29:f0:
ce:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:30:43:2B:88:2B:3D:6C:C3:E2:01:52:C8:F3:0D:C2:53:07:15:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/a3c7b443-32de-3f4c-955d-1b3a7f625428.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
X509v3 Authority Key Identifier:
keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
sbgp-ipAddrBlock: critical
IPv4:
156.70.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:54:9e:bd:1b:c6:c4:71:37:fe:82:c2:6d:b8:39:d1:8d:fa:
bd:ad:a2:98:42:a7:39:22:6d:9b:9a:1a:60:d5:98:4c:7f:e5:
02:93:3c:01:e9:3a:4d:5e:ed:ec:22:d4:fd:75:f1:01:f9:4c:
02:d8:a0:af:bb:ac:85:c6:a8:59:91:51:d2:9f:b6:ff:ca:48:
12:e1:49:30:e6:32:f3:cf:99:f9:54:3a:b1:11:d1:d3:32:1b:
b9:6f:b9:c6:59:6a:33:8a:17:3d:65:2b:a9:db:f9:10:bc:57:
10:d9:bf:c2:dd:16:e7:4a:9b:b6:09:2b:a2:c0:50:7f:c1:5d:
61:3c:a1:6a:c5:cd:5f:4b:27:a4:3c:b5:40:06:0c:47:1d:8a:
96:ff:b9:47:7d:2b:e5:ab:97:53:5e:23:59:34:b5:96:a2:d6:
8e:02:3c:23:82:c9:e0:6b:d9:53:f1:f1:bd:34:6d:3b:0c:2a:
24:1b:0b:b8:81:24:69:60:75:f1:1a:ef:22:b5:d2:42:50:86:
b4:6e:42:fc:d4:0e:9a:4e:55:a9:4e:00:ce:4c:8f:e7:33:e2:
3b:bf:f9:dc:fa:84:b1:07:08:b4:e6:b0:14:c9:99:ba:43:60:
04:2a:12:48:1c:25:76:8b:aa:ad:06:db:dc:8f:c2:8b:c2:4f:
22:c9:11:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:51:31 2025 by rpki-client