This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21c0517f-9487-3a11-9f93-dc69b7379b5d.roa
File: 21c0517f-9487-3a11-9f93-dc69b7379b5d.roa (raw, json)
Hash identifier: qDSK9c2Yn8ZzYwa0MTAFihBIilgMHB2yymeSfZdx+sA=
Subject key identifier: 51:50:C9:D4:FB:6E:9C:B4:16:C7:F4:D2:D9:9C:53:40:21:34:B2:82
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584C3BE162785721BA27CB073020
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21c0517f-9487-3a11-9f93-dc69b7379b5d.roa
Signing time: Fri 19 Dec 2025 02:00:31 +0000
ROA not before: Fri 19 Dec 2025 02:00:31 +0000
ROA not after: Thu 19 Mar 2026 01:00:31 +0000
asID: 397239
IP address blocks: 156.154.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:3b:e1:62:78:57:21:ba:27:cb:07:30:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 19 02:00:31 2025 GMT
Not After : Mar 19 01:00:31 2026 GMT
Subject: CN=57baf19d-e512-4da4-8a74-4c7fec7cc7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ae:67:8b:89:db:8c:77:22:58:af:33:52:fb:
18:f4:cc:ea:b0:5a:a6:5d:46:3d:e0:26:0f:a8:2a:
c6:94:77:95:49:df:0c:9c:e9:5b:fb:cd:67:79:79:
21:cf:ab:db:be:da:63:48:e7:e5:b4:4c:0e:d2:cd:
47:b8:29:9d:78:a5:53:ef:b2:9c:81:be:27:c9:65:
62:4c:dd:c1:b4:1b:11:27:51:b5:b5:21:6a:ef:27:
45:c4:c7:e7:7f:a6:22:db:7c:38:5e:f7:88:f1:b5:
de:5d:f4:0d:c8:00:ce:25:40:1d:02:23:71:68:a7:
87:7a:3e:31:a4:2c:2c:c6:23:59:39:26:44:5a:1a:
75:35:ba:9b:18:42:21:58:a3:da:bc:f8:3b:5a:d9:
a4:cd:28:61:cb:99:ab:cf:6a:d2:35:f5:28:df:b3:
92:e5:d3:b4:e7:8f:92:1f:ea:cc:16:10:64:c8:b7:
6f:db:d3:bc:ba:0a:fc:8c:9b:dc:06:e8:f7:bf:0a:
e0:dd:a1:4f:68:27:14:02:ff:b7:95:65:1b:cb:d1:
c9:a5:b7:ae:7c:69:42:a7:6d:5c:ca:66:a7:4a:75:
9d:b0:58:63:76:7a:0f:05:50:d5:23:70:de:ab:ed:
d8:b4:9b:e0:6f:9b:c9:17:f2:df:3e:b8:b5:87:af:
73:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:50:C9:D4:FB:6E:9C:B4:16:C7:F4:D2:D9:9C:53:40:21:34:B2:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21c0517f-9487-3a11-9f93-dc69b7379b5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:45:9c:0f:79:2f:be:e9:5c:64:c1:3e:1a:a7:92:67:5e:73:
78:b9:db:ed:5a:a7:ca:f5:f4:ea:f7:c5:2f:0a:38:e5:41:bd:
c9:b8:3d:f3:d2:71:6f:37:19:bf:c1:27:17:02:c1:2b:99:b6:
58:66:67:28:72:4a:d0:d6:6c:aa:b1:e9:ee:29:e2:30:77:d5:
2b:7a:01:b6:b4:6c:7f:83:7c:4b:1a:79:39:b7:45:24:da:24:
1b:49:26:b7:cc:0b:d1:a1:69:05:b2:13:c8:93:a6:c8:77:7d:
7d:0d:0a:fa:b4:03:76:cb:e6:19:f4:63:50:c7:47:47:46:0d:
e8:27:8d:05:6d:38:33:b9:62:51:39:2b:62:3a:eb:b8:dc:9d:
47:5c:29:70:ff:bd:c2:14:cd:01:51:89:51:76:ec:ee:41:6f:
07:69:2a:a2:35:e1:14:3e:7e:fa:cb:6b:4f:2b:ed:10:16:0c:
98:59:24:ef:a1:1f:1c:f3:ea:d8:91:de:b9:ef:e8:1e:ad:c6:
d6:20:e5:49:d6:01:67:7b:af:a8:7d:64:9f:62:93:53:be:46:
73:84:81:97:c4:17:e2:9e:ef:ff:29:04:de:9c:16:48:d6:43:
5c:25:13:f2:25:9a:ab:61:c8:90:37:af:65:e5:2c:bc:c7:b9:
96:ed:e9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:21:40 2025 by rpki-client