This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/a18bc8e5-3031-3334-b765-3392f5d4fe56.roa
File: a18bc8e5-3031-3334-b765-3392f5d4fe56.roa (raw, json)
Hash identifier: w38RZlnzkBGS5upDczKN0Nv967tcKJ/OKOgZP3jrxpE=
Subject key identifier: 73:0F:F5:A2:9C:64:16:DF:E4:65:B3:75:1E:58:D8:62:96:FA:D8:AA
Certificate issuer: /CN=2ce98e57-da60-49a3-b167-e6998e0d2945
Certificate serial: 010D0C9F4328584BD0B358EEA915136C5E53F800
Authority key identifier: 41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/a18bc8e5-3031-3334-b765-3392f5d4fe56.roa
Signing time: Thu 02 Oct 2025 22:40:13 +0000
ROA not before: Thu 02 Oct 2025 22:40:13 +0000
ROA not after: Wed 31 Dec 2025 23:40:13 +0000
asID: 16509
IP address blocks: 204.152.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d0:b3:58:ee:a9:15:13:6c:5e:53:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce98e57-da60-49a3-b167-e6998e0d2945
Validity
Not Before: Oct 2 22:40:13 2025 GMT
Not After : Dec 31 23:40:13 2025 GMT
Subject: CN=beec4592-82d4-42b4-b949-76c52cba318b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4f:74:3e:bb:e6:50:f5:71:52:98:f0:cc:0f:
df:3e:19:9c:db:db:53:cd:85:62:87:df:5d:64:91:
70:bc:1e:6e:59:e4:43:28:c6:d5:40:ed:42:3d:ab:
0f:4f:b7:6b:3e:09:f9:36:70:ce:71:b3:82:40:1d:
bd:ae:7e:5e:d6:1d:8a:37:56:2f:56:1f:6f:a5:ff:
2c:8c:9b:24:db:3f:cc:d2:d7:48:51:e3:59:a1:b4:
06:73:4b:f9:ae:97:5d:c5:2d:82:ad:4d:b6:85:b3:
2c:32:ff:b2:04:d7:84:7c:0a:7f:62:f9:75:7a:b7:
15:e3:79:45:de:8a:9b:dd:c5:db:83:fe:6d:ee:cb:
22:28:8b:9a:fe:69:79:bf:45:5d:00:ec:d7:68:e5:
33:00:8c:6f:af:39:f2:b0:94:de:c6:5b:01:12:b1:
be:79:a7:ab:d1:98:93:0c:f6:39:43:92:b2:d7:eb:
86:26:15:ee:2d:bc:80:08:c0:1d:d9:77:9e:71:7b:
5d:db:39:b1:e5:11:8f:52:f2:09:3a:a2:5f:2f:27:
07:08:a4:bd:b9:22:0a:13:9c:9b:64:33:85:91:6e:
77:52:b0:4a:e5:9b:e7:e3:9d:6c:2c:5c:bf:8c:5a:
19:93:50:81:d2:f7:c1:7d:cc:20:49:52:c4:ae:ed:
70:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0F:F5:A2:9C:64:16:DF:E4:65:B3:75:1E:58:D8:62:96:FA:D8:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/a18bc8e5-3031-3334-b765-3392f5d4fe56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl
X509v3 Authority Key Identifier:
keyid:41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer
sbgp-ipAddrBlock: critical
IPv4:
204.152.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:bd:c4:7a:e9:c6:d0:dd:55:8c:61:5f:e1:3f:47:8a:f1:e3:
db:3f:6a:8a:71:b4:e7:27:00:9c:95:57:78:b8:69:e1:7a:cf:
a9:54:5b:a0:c8:76:7e:bd:74:74:53:29:59:7e:2e:fc:0b:ed:
bc:dc:52:d9:ef:f8:6c:ab:5f:d0:fa:b8:bd:0f:ec:38:a6:c5:
26:f6:d0:ee:c8:25:23:57:9a:a7:ee:02:c9:78:e2:d3:d7:ff:
39:56:93:6c:79:d8:aa:a2:27:46:b5:92:be:a0:b3:d8:c9:24:
10:d9:fb:da:43:d8:cc:f1:ff:f1:62:5f:91:60:75:ae:d9:b3:
d5:6f:d7:01:9c:2c:e0:fa:19:b4:5f:dd:b5:3f:88:9d:a5:49:
6a:3a:72:15:02:80:74:85:6f:33:ff:61:e3:56:21:60:24:f1:
d8:f3:dc:34:79:f6:a0:ce:85:63:9c:e8:12:67:fc:d0:cd:7d:
ce:96:7d:53:e4:a4:e5:e5:43:25:ee:85:32:f1:6d:2d:d8:fe:
8b:35:e0:b1:fd:ca:15:b2:c0:a8:22:c5:5b:e3:cf:00:ab:13:
56:d2:73:88:d8:6e:a7:b4:f4:75:b2:47:c7:e7:3e:6a:40:e2:
b4:79:9a:d9:5a:4f:c1:fa:a4:75:c8:10:d6:15:2a:e7:15:01:
d0:41:49:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:22:05 2025 by rpki-client