This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa
File: 33af6a38-02b6-3f92-bf22-40f73c436cc1.roa (raw, json)
Hash identifier: UyiQCBk3BrjcV+B42eZloN7YEGX7bSG2osPwQpXT+3A=
Subject key identifier: 52:50:7D:50:75:0F:4D:EC:98:3F:61:CC:71:55:76:2D:F7:3B:A6:70
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F4328584C401129DBE7365B44046B4E40
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa
Signing time: Sat 20 Dec 2025 14:00:38 +0000
ROA not before: Sat 20 Dec 2025 14:00:38 +0000
ROA not after: Fri 20 Mar 2026 13:00:38 +0000
asID: 36040
IP address blocks: 136.22.136.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Jan 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:40:11:29:db:e7:36:5b:44:04:6b:4e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Dec 20 14:00:38 2025 GMT
Not After : Mar 20 13:00:38 2026 GMT
Subject: CN=ca70f04c-febe-481c-a12d-b42af0764c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e8:4a:d1:ad:4b:1f:0e:a7:8f:0b:af:e2:ce:
29:6a:f1:82:d7:59:b5:44:00:96:e6:97:39:43:d4:
1a:e5:c2:67:94:9b:b2:dd:99:d7:a1:d9:6b:d9:f4:
a9:79:2a:22:7e:ba:35:a9:34:c3:d9:3d:ea:cc:c2:
f8:75:49:c7:6e:1f:03:c1:c0:c8:19:6b:7b:66:d3:
65:47:1d:ac:27:9c:e3:92:1e:2f:07:1f:cc:80:4e:
51:d5:97:a6:c6:ec:0e:8a:78:8c:1e:21:ee:8c:21:
f6:55:57:f5:fd:8a:d2:6c:da:b2:8a:f3:83:b9:51:
fc:db:9f:03:0b:eb:57:a1:ba:7c:69:eb:fe:eb:9a:
a2:2b:b2:b8:bb:99:ac:3b:5c:b9:02:a1:57:77:f1:
e5:53:a3:2d:e9:cb:9e:6a:c7:4a:cd:7d:68:8d:45:
bf:8f:b8:59:10:e1:13:81:c2:44:7d:90:5f:2b:83:
69:d5:16:c1:06:8f:7b:34:57:bf:e6:be:d0:c3:17:
6c:5f:c6:d9:45:0e:74:47:04:fd:66:ad:8f:27:b8:
67:e3:a0:d0:65:27:82:7b:a5:d0:b6:3d:f6:c3:f1:
a0:ab:11:dc:2c:1f:4a:c7:e0:a7:b7:45:2e:bd:b5:
54:b7:7f:cd:7e:c5:75:bf:fd:4c:bf:7c:0d:46:3d:
d9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:50:7D:50:75:0F:4D:EC:98:3F:61:CC:71:55:76:2D:F7:3B:A6:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.136.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:9c:cd:3d:7c:8b:1e:7a:5e:79:20:8e:05:90:a4:a3:0c:29:
57:a1:31:f0:4f:af:12:ad:8a:eb:46:28:42:b7:d2:cf:cf:1d:
bd:05:ef:8f:d8:7a:fa:b5:25:89:b6:23:df:79:79:99:0b:27:
11:ef:70:2b:bf:b7:32:97:10:6c:40:2b:dc:11:d8:60:c9:33:
97:4b:de:5c:c7:16:2b:01:69:d8:81:ec:91:46:e0:b1:bf:ab:
63:fa:6a:cc:a8:cb:09:a1:a8:61:60:34:0b:e4:66:27:1e:28:
c9:e0:a4:b2:ce:3c:4a:2d:c7:25:71:a3:eb:67:84:6f:6e:d9:
ac:9b:9b:23:ab:b1:34:53:4b:37:65:2a:3f:3d:47:ba:4f:9f:
7f:d6:82:63:3d:b4:0d:ee:60:8a:86:f6:03:1e:4e:3d:5a:52:
c8:5e:cb:de:0c:f7:21:61:a7:ee:c6:a6:61:03:38:0a:c5:c4:
f9:55:d1:cf:99:ca:4e:30:7f:49:13:5c:02:c6:5d:92:47:e9:
38:ba:44:33:3e:82:5e:d8:e1:8b:18:63:56:6f:24:af:4f:5c:
2e:10:c8:9c:15:f0:15:2c:f1:15:d1:46:1f:89:25:61:50:18:
c2:c7:9c:4e:19:d0:63:f0:c6:c9:ed:b0:79:08:23:8e:5f:1e:
55:78:33:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 01:19:05 2026 by rpki-client