This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa
File: a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa (raw, json)
Hash identifier: fd81QQvBCvHg6m2Kh3NB7/UVZRlMSrJHi3OqywYd2h0=
Subject key identifier: 38:49:5A:68:A4:C8:8C:C8:46:DE:A4:FD:B1:13:02:05:09:81:B3:D9
Certificate issuer: /CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
Certificate serial: 010D0C9F4328584C29BB9A8E567DA05F03813300
Authority key identifier: 96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa
Signing time: Fri 12 Dec 2025 14:00:38 +0000
ROA not before: Fri 12 Dec 2025 14:00:38 +0000
ROA not after: Thu 12 Mar 2026 13:00:38 +0000
asID: 36850
IP address blocks: 152.19.0.0/16 maxlen: 16
152.23.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:29:bb:9a:8e:56:7d:a0:5f:03:81:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
Validity
Not Before: Dec 12 14:00:38 2025 GMT
Not After : Mar 12 13:00:38 2026 GMT
Subject: CN=8319e80b-ced4-463e-bca5-a5d94f06e0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:9a:39:72:7d:08:e5:36:c2:38:60:46:8e:
d1:d7:aa:f5:a7:7a:36:ed:ee:e7:bf:ac:f4:a7:0f:
32:32:ea:e6:67:4c:96:93:5f:d7:68:1e:5a:c7:5e:
e6:a7:60:8e:aa:24:e4:06:1f:7b:63:c6:de:f5:ec:
c1:75:37:7e:5f:dc:3c:27:de:a7:3d:8e:df:f9:27:
d2:e2:79:0b:9f:22:d5:62:2a:16:2b:0a:1a:0b:19:
db:aa:66:b6:37:b7:75:1d:e7:cf:7a:76:19:e3:25:
f3:d6:c7:9e:86:53:5b:52:e7:ba:24:e3:5d:6f:f4:
13:2b:2d:3c:3b:08:b4:b3:5b:a2:e6:1a:8e:70:06:
36:4a:53:48:50:be:e1:37:5e:18:13:4d:09:30:06:
cc:29:d0:ad:99:ab:3b:19:4f:5c:e2:54:ed:9c:8c:
aa:d8:7b:38:26:41:e9:af:53:51:2e:39:87:b3:2f:
5a:ec:f3:32:cd:3f:05:32:d6:40:11:dd:ef:67:29:
0f:75:cb:1d:88:29:2f:ed:a4:6c:06:12:83:53:86:
0d:f9:7b:93:cc:96:75:2d:fc:fc:82:a4:75:a9:00:
ee:b4:79:23:86:89:32:e3:3b:fa:5d:4d:85:0e:93:
49:ed:1b:ce:e6:02:18:2b:76:2c:5a:a0:81:61:16:
2f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:49:5A:68:A4:C8:8C:C8:46:DE:A4:FD:B1:13:02:05:09:81:B3:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl
X509v3 Authority Key Identifier:
keyid:96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.19.0.0/16
152.23.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:91:05:ef:a6:56:4f:71:6f:60:88:00:18:de:1a:95:a9:ae:
c8:2c:eb:7a:8d:5d:7f:e6:79:47:e1:0f:ab:2c:ad:4f:60:4e:
10:01:a3:f6:ee:30:f7:23:b4:20:fc:cb:ed:e0:73:b5:4f:8f:
a5:fe:af:7d:6a:19:ff:80:cb:17:b3:44:01:8a:99:0c:5b:5f:
70:6b:e8:77:26:78:ba:1e:52:f8:22:35:64:8c:00:b7:36:f8:
3d:1d:33:73:1f:fa:d8:f8:2f:6a:b8:a9:d4:32:f5:59:62:45:
dc:a9:60:d5:16:53:9c:fd:9a:46:25:f7:00:bb:8f:44:b3:40:
3d:c8:e7:9c:20:8c:fa:58:b2:44:a3:67:19:4a:03:46:e4:a9:
3c:29:c8:ee:79:ac:d1:9e:95:76:5e:06:56:21:e9:9c:99:11:
2a:6c:8e:0b:8f:a9:ed:ee:28:23:23:e2:93:27:2c:ba:ef:1f:
6d:ca:99:f8:e5:36:d4:41:18:2a:50:a0:1d:55:b5:07:91:01:
1f:b1:80:80:08:dc:21:be:0c:55:df:55:87:2a:82:1d:39:0c:
22:10:25:51:ea:a2:a4:b3:27:99:7a:3e:c9:ef:47:db:9b:7b:
a0:b7:8f:d2:8c:c0:e1:c4:12:66:97:a3:f6:3b:da:f9:e1:d4:
63:62:9b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 04:58:51 2025 by rpki-client