This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/f53d8254-0516-3991-a742-bbfcc5001432.roa
File: f53d8254-0516-3991-a742-bbfcc5001432.roa (raw, json)
Hash identifier: K36V8yfZTFoGcOytJsseKRXgSMUpAkrkM5g7zvtkgI4=
Subject key identifier: AB:FD:9A:2A:89:4A:33:5A:F6:29:B4:82:A1:32:A8:E8:F8:6A:54:68
Certificate issuer: /CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
Certificate serial: 010D0C9F4328584C40110CA8DE2BA5080AB02840
Authority key identifier: A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/f53d8254-0516-3991-a742-bbfcc5001432.roa
Signing time: Sat 20 Dec 2025 14:00:38 +0000
ROA not before: Sat 20 Dec 2025 14:00:38 +0000
ROA not after: Fri 20 Mar 2026 13:00:38 +0000
asID: 14618
IP address blocks: 216.31.33.0/24 maxlen: 24
216.31.34.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:40:11:0c:a8:de:2b:a5:08:0a:b0:28:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
Validity
Not Before: Dec 20 14:00:38 2025 GMT
Not After : Mar 20 13:00:38 2026 GMT
Subject: CN=8804b797-9d04-47a8-a633-24dfb97231fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:07:b0:f2:06:74:d0:dc:06:00:8d:2b:e7:75:
62:9c:f1:38:2d:d1:f3:fa:d1:60:c4:74:2e:6c:45:
49:8b:d0:a7:eb:bd:c9:1b:e9:ac:80:47:e2:29:44:
65:01:82:7e:93:cb:b4:31:28:1b:ed:73:06:f7:f3:
fe:3c:d1:ff:c2:4d:7e:1e:d1:d7:a3:40:65:c8:74:
12:f7:50:35:bf:40:0f:37:87:ce:32:94:21:2a:dd:
30:70:11:58:f3:c0:6c:36:ea:c8:45:3d:31:5e:c4:
28:0e:f2:83:2b:0c:9d:38:3b:03:6a:73:4b:ea:40:
ea:7c:31:13:7a:0a:51:9b:90:9a:06:e5:83:ea:13:
d2:56:65:27:f1:43:fa:11:47:29:9a:11:e4:5a:cc:
78:07:55:e7:97:e1:aa:9e:d8:56:61:1b:a5:e8:96:
e4:91:25:73:b7:3d:d2:20:14:eb:db:90:a2:36:44:
ae:e9:02:a2:0e:be:2b:56:fd:4d:ac:07:d2:91:6d:
d9:06:48:42:be:b6:3d:f4:33:f2:3d:01:38:4b:ef:
4d:ad:31:16:1e:d4:ab:ca:df:b8:7e:0d:a3:94:a0:
3d:0c:b0:eb:b7:e5:02:c5:7e:73:58:0d:15:ba:08:
c0:71:6f:45:86:8f:2f:f0:7c:37:dc:49:53:f6:75:
e0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FD:9A:2A:89:4A:33:5A:F6:29:B4:82:A1:32:A8:E8:F8:6A:54:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/f53d8254-0516-3991-a742-bbfcc5001432.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl
X509v3 Authority Key Identifier:
keyid:A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
sbgp-ipAddrBlock: critical
IPv4:
216.31.33.0-216.31.35.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:ce:fd:95:ee:74:3d:d7:4c:19:ef:06:cc:24:23:cc:60:f1:
16:02:01:3f:33:d0:9f:4d:02:67:3d:86:b5:95:a6:7d:f3:0d:
68:a6:ee:a7:0c:7e:08:e6:eb:5d:96:2f:c7:00:30:78:ef:25:
fd:cd:da:88:e6:8b:8f:67:2a:04:d3:2c:77:8a:33:6b:f4:fd:
7e:62:6b:60:b7:31:ef:44:c4:de:17:16:83:90:59:2f:26:3d:
0c:75:ab:10:8f:59:19:3c:a8:21:db:2a:ff:5b:cc:00:c0:5a:
b7:06:19:e1:e5:0e:93:bd:f5:b8:d8:c0:32:5e:9a:10:ee:7e:
ff:b3:29:de:25:46:aa:01:b4:3e:c9:95:ac:81:f6:5b:71:ce:
5f:57:13:d0:d6:44:28:4e:54:e4:8a:9d:f5:d8:83:88:ba:86:
1c:ce:1c:01:09:8f:d9:f9:cf:37:a7:58:d6:b4:09:4b:a0:b7:
8f:a5:a4:f1:67:6e:f0:49:9e:f8:3c:4e:38:70:de:ac:34:53:
41:23:d7:e2:05:b5:ff:61:36:86:a7:0a:aa:46:5a:bf:6a:1d:
29:bc:f8:8b:ad:e0:11:a4:cd:1a:a0:f3:fb:12:ac:77:82:16:
7b:bf:44:28:7f:f8:b6:82:17:a1:ef:f3:d1:1f:1d:83:fa:69:
c4:10:02:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:57:28 2025 by rpki-client