This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf70ac0a-b3c2-3a6a-8b19-946d778e2cbb.roa
File: bf70ac0a-b3c2-3a6a-8b19-946d778e2cbb.roa (raw, json)
Hash identifier: /xUnrPuHOq7vMb6sF52Np+8WwkbQhFbRI7CnmibEf78=
Subject key identifier: 9B:DB:C0:5B:F9:76:40:F7:04:4A:0B:2E:1B:7B:51:21:8E:0B:02:77
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584C3BE16299693EC587920DC440
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf70ac0a-b3c2-3a6a-8b19-946d778e2cbb.roa
Signing time: Fri 19 Dec 2025 02:00:31 +0000
ROA not before: Fri 19 Dec 2025 02:00:31 +0000
ROA not after: Thu 19 Mar 2026 01:00:31 +0000
asID: 397241
IP address blocks: 156.154.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 26 Dec 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:3b:e1:62:99:69:3e:c5:87:92:0d:c4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 19 02:00:31 2025 GMT
Not After : Mar 19 01:00:31 2026 GMT
Subject: CN=92c3c244-d968-413e-b144-9d741d4b5ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:fa:f3:d0:61:02:68:f8:0a:cb:13:f6:2f:
0b:b4:23:b1:7c:14:a7:bb:46:bb:7a:43:08:61:24:
c8:e5:e4:9d:c2:49:1f:fc:2e:c4:85:32:cd:cb:c7:
40:da:3e:2e:17:6e:a1:5c:7f:f0:b0:73:92:23:df:
27:47:b2:ca:7a:06:69:88:16:dc:48:d5:ea:f2:64:
e0:be:3d:fa:9b:b2:ec:ca:3a:bd:53:ae:a4:cc:39:
85:a7:f5:4b:88:fc:63:d6:6f:4b:86:43:72:ab:e8:
7d:a2:73:7f:12:7b:f8:b7:1d:da:18:b0:9d:4b:63:
59:10:9f:07:f0:aa:f7:b0:0b:2a:6c:f3:34:19:2d:
2f:22:2d:72:6a:a0:dc:d8:9c:11:2b:b3:8c:65:a5:
48:2a:93:58:e7:59:d7:0a:8b:8b:53:1f:f5:24:f7:
8f:75:89:21:43:18:af:7e:16:b1:99:eb:d6:c0:16:
21:4e:1e:57:42:1e:3e:2f:b7:db:30:a5:e6:4d:02:
5d:fb:48:b4:0c:29:ad:ba:04:08:be:59:f5:e6:a4:
5a:2c:b6:b7:84:bd:09:9a:f6:b6:73:56:36:f8:24:
71:6e:03:1e:f5:53:b2:5e:27:c4:33:0f:e1:61:10:
4f:fa:fd:33:83:94:82:1a:e9:b6:af:35:ec:4b:05:
d1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DB:C0:5B:F9:76:40:F7:04:4A:0B:2E:1B:7B:51:21:8E:0B:02:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf70ac0a-b3c2-3a6a-8b19-946d778e2cbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:ca:25:63:f3:22:31:63:4d:ec:64:da:cb:52:97:0d:74:be:
6b:7c:5f:3b:7b:a7:02:8e:df:4f:63:c5:50:96:6e:38:1c:d7:
43:d4:3e:3a:57:d9:93:6a:db:0e:8b:8b:bb:61:ce:83:a7:7c:
14:31:fe:ab:c2:02:a7:4f:88:a4:9e:8c:b9:f7:10:11:91:06:
d5:7f:d9:8c:48:81:72:c4:f3:a9:5d:da:f8:14:92:6a:b1:44:
63:e9:5a:01:9b:a3:06:34:cf:ee:2d:44:27:6f:12:10:69:fc:
3a:e7:15:63:46:64:0c:57:bf:15:11:1b:ca:03:c6:10:41:e6:
c2:01:a2:70:6c:7f:ca:13:c2:3b:4a:d4:f6:87:34:01:88:d6:
a0:42:a3:bf:4d:f8:48:4c:28:a3:92:3b:ba:5e:29:7b:50:87:
5e:48:fd:86:c3:73:56:98:81:52:02:ae:3d:e6:be:ed:df:eb:
6a:08:2f:a7:d0:19:c1:20:05:c4:52:d2:84:c8:f7:f5:d7:0b:
5c:20:a1:86:72:66:a2:80:ce:4b:99:a1:27:a2:e2:a7:5c:41:
c5:b6:f1:3e:e7:33:59:ad:b4:92:25:e5:d9:cc:4e:a2:3b:57:
3d:1e:49:58:5f:02:eb:58:f2:7d:e6:1f:2e:7c:30:44:6d:e1:
78:7c:13:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 23:27:42 2025 by rpki-client