This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/432319f3-7f03-347c-974f-cfba9c424236.roa
File: 432319f3-7f03-347c-974f-cfba9c424236.roa (raw, json)
Hash identifier: DnwYdZRdyHEo9A+rRrwG4zUBplqH0KZel92M0dLN7iQ=
Subject key identifier: 24:A8:C8:FB:0E:93:F0:5F:C6:07:67:6F:A8:10:3B:12:7A:94:1B:CC
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F4328584C24B553BB706B3BEC39A672C0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/432319f3-7f03-347c-974f-cfba9c424236.roa
Signing time: Wed 10 Dec 2025 18:49:05 +0000
ROA not before: Wed 10 Dec 2025 18:49:05 +0000
ROA not after: Tue 10 Mar 2026 17:49:05 +0000
asID: 394089
IP address blocks: 153.72.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:24:b5:53:bb:70:6b:3b:ec:39:a6:72:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Dec 10 18:49:05 2025 GMT
Not After : Mar 10 17:49:05 2026 GMT
Subject: CN=f32bffe1-5e23-422b-bbeb-f38032b73d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:4c:a4:f2:2f:23:89:97:05:c3:a2:4b:8e:
48:a3:ec:0e:d0:2b:a3:98:a6:ef:f6:49:f7:45:8b:
b7:70:bf:a4:e5:da:72:51:af:7d:4d:c2:6a:c8:16:
6c:c7:8d:0e:54:77:39:eb:80:98:e4:46:50:1d:df:
69:48:c5:1d:d9:e1:34:6c:62:58:94:89:3a:7f:15:
72:00:a2:a9:4d:29:c2:8b:63:1b:66:11:35:a1:68:
48:5d:73:e6:cf:28:2e:51:7e:c3:4f:de:80:04:da:
d5:8b:a1:e1:21:06:8d:b0:c2:dc:b6:50:8c:a6:ca:
30:b9:88:98:ff:9c:0b:c4:56:e8:f8:69:fc:21:39:
fa:4c:ae:75:56:e2:3a:bc:03:22:1b:44:b8:f4:be:
ab:37:03:b6:5d:41:bc:25:36:85:ec:db:64:fc:c8:
7f:3b:5a:af:57:9f:96:11:4f:19:f2:bc:0b:fa:84:
20:fb:f1:e1:f6:89:29:e3:5e:4c:82:f6:4e:58:5a:
12:a6:dc:5e:22:f3:0c:f5:fe:a0:19:0f:82:8e:be:
91:65:93:60:a2:bf:77:60:28:ca:8e:c4:65:91:ea:
49:72:e4:89:8d:51:a8:40:1f:f0:67:74:4b:66:69:
7a:80:6d:c7:48:4d:c9:65:7e:a8:8b:9c:38:9f:af:
ad:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A8:C8:FB:0E:93:F0:5F:C6:07:67:6F:A8:10:3B:12:7A:94:1B:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/432319f3-7f03-347c-974f-cfba9c424236.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
153.72.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:e6:2a:0b:4a:8e:be:f4:05:72:10:b4:a1:00:1e:96:72:54:
b7:fe:d9:37:c0:e3:a3:50:c0:4b:7a:24:d8:7f:43:6d:2d:ba:
27:5b:22:6b:46:f1:f7:23:c3:42:9b:91:d4:d0:a8:5d:3d:35:
d1:a2:ab:b4:38:60:68:73:ae:1f:31:61:86:57:e0:0f:9d:b7:
dc:62:a1:16:21:de:80:e2:5c:db:b8:dd:66:25:23:a0:85:ca:
97:23:5e:fd:17:c2:07:5b:b9:f2:b5:6d:63:27:84:d4:d8:3a:
92:c4:63:19:a4:e4:7e:a1:1e:31:ce:de:f2:f8:b9:7a:8f:9a:
3c:f0:fc:39:ec:2a:cb:3a:68:15:b5:fe:00:45:6f:7c:f3:4b:
c1:f2:13:70:b5:3c:f7:2d:0c:4a:d1:62:db:1b:8b:5c:a2:46:
7f:8c:73:ef:42:75:17:56:fa:4d:aa:99:e2:a5:50:23:6c:6f:
a7:8a:52:66:9b:f5:18:1f:20:2c:c6:6d:c6:77:0f:c2:1b:ba:
3f:46:ac:03:0b:aa:47:13:1b:12:e2:d4:19:68:34:c2:a6:3b:
4a:6a:ef:3d:53:1d:1d:c0:aa:fa:90:97:6c:33:e5:b3:bd:40:
0a:9c:d1:c7:b6:2d:32:19:72:ae:a7:72:23:21:a0:c9:45:b5:
60:14:c7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 04:36:29 2025 by rpki-client