This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8f04580e-a8a3-3a7d-8004-8ae450796340.roa
File: 8f04580e-a8a3-3a7d-8004-8ae450796340.roa (raw, json)
Hash identifier: bNX25UZoDv7fWHfEyzMTg6IOal55wSSRaBfXBamUhhI=
Subject key identifier: 3A:36:71:20:8D:AA:69:E4:B4:54:39:7B:AC:CF:4F:4A:17:DF:57:52
Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial: 010D0C9F4328584C3C564FF54A22D1623FD07680
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8f04580e-a8a3-3a7d-8004-8ae450796340.roa
Signing time: Fri 19 Dec 2025 05:57:03 +0000
ROA not before: Fri 19 Dec 2025 05:57:03 +0000
ROA not after: Thu 19 Mar 2026 04:57:03 +0000
asID: 54994
IP address blocks: 153.43.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:3c:56:4f:f5:4a:22:d1:62:3f:d0:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Validity
Not Before: Dec 19 05:57:03 2025 GMT
Not After : Mar 19 04:57:03 2026 GMT
Subject: CN=d62c73b5-c85d-44f5-b980-1b89e6b09683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f4:9a:9a:91:72:80:10:a4:77:85:c1:3a:91:
ae:3e:de:8f:0f:12:ea:59:9d:aa:c5:49:dd:f6:9e:
8a:4c:a5:3f:65:af:df:4b:35:d5:86:5f:e4:02:4b:
a2:e2:39:9f:1c:2b:39:41:68:b9:6e:16:7a:c3:6a:
47:84:86:c8:db:c4:ff:8a:4d:c9:f2:c8:49:d7:4c:
ba:af:16:bd:f6:38:6a:15:6c:ff:b1:d2:66:6a:06:
f0:0d:b8:b4:d5:16:8f:b9:5a:4a:17:ca:60:13:bb:
c9:a8:2a:d9:49:5b:25:25:30:9a:13:94:d0:57:15:
c9:f6:30:05:68:8b:7c:c4:35:db:eb:77:71:bb:42:
f8:17:4e:18:9b:e4:5e:29:98:e6:1a:93:73:16:fa:
5a:91:6a:53:70:14:31:4a:5f:ee:39:81:ba:92:f4:
b0:16:ae:b8:3d:ea:1d:21:7d:92:c1:cc:46:2c:4e:
ce:19:26:81:20:4e:4b:21:59:ff:6d:ea:68:32:02:
8e:d3:e1:e3:96:3a:d1:e2:6b:1f:58:c4:26:74:7a:
81:d5:1e:de:5a:0b:cd:1a:82:47:54:59:92:1d:e8:
bc:c8:e7:92:83:79:4e:c9:0b:f4:22:3b:e9:ef:61:
21:eb:23:47:05:d3:14:91:c2:41:99:c1:f3:79:2e:
e5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:36:71:20:8D:AA:69:E4:B4:54:39:7B:AC:CF:4F:4A:17:DF:57:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8f04580e-a8a3-3a7d-8004-8ae450796340.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
X509v3 Authority Key Identifier:
keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
sbgp-ipAddrBlock: critical
IPv4:
153.43.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:f4:ec:f0:e6:03:84:ed:34:c2:64:fa:bd:8a:a4:dd:26:8f:
f5:50:4d:4b:73:bb:f9:5f:c6:4e:21:bb:95:96:5a:b4:06:3f:
52:ec:6c:6a:37:d1:a0:95:25:7f:ea:c5:55:86:4d:bf:18:ea:
1a:6f:8c:f9:b4:a7:f4:21:99:b8:57:05:3f:7a:3f:cd:fe:65:
19:ec:a6:f1:64:e3:86:a9:58:2e:72:7c:9e:b4:27:dd:45:c1:
df:11:f8:9e:0b:32:0f:7b:03:78:85:a0:cc:53:90:d3:d4:71:
05:5f:29:13:a0:0a:41:88:39:00:4e:74:9d:f9:88:d7:34:30:
a9:8a:b3:6c:a3:4f:9a:b0:85:5b:31:2f:46:16:93:8a:93:91:
bb:3c:6d:c6:21:71:02:90:69:89:09:23:4b:cf:d5:7c:40:06:
eb:d6:09:60:79:fd:d6:fc:e4:b4:7a:bd:9f:9c:dc:46:61:52:
c5:01:d1:46:a0:61:ac:55:7f:74:bf:d6:92:5a:0a:da:6d:5a:
dd:3c:26:a9:7e:7a:6f:d8:ac:1e:e6:ff:52:19:eb:51:a1:a4:
8f:9c:6f:63:88:99:f1:20:9e:33:fa:f3:9f:73:db:37:18:15:
49:58:09:de:e2:b7:f7:b6:cd:49:4f:73:03:47:83:92:01:e9:
44:53:11:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:47:08 2025 by rpki-client