This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d08f403e-ed94-3b66-9997-e619f6160283.roa
File: d08f403e-ed94-3b66-9997-e619f6160283.roa (raw, json)
Hash identifier: DQEuZALc0ZlaNlBHBdpY3dn9eX2ZzWQd/H3aMPMj9I4=
Subject key identifier: 10:99:29:FA:44:D5:C7:F8:A6:D6:70:87:6D:EF:02:FE:C4:15:91:1D
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584C22C0EAF3B63849CF3DCA47E0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d08f403e-ed94-3b66-9997-e619f6160283.roa
Signing time: Wed 10 Dec 2025 02:00:31 +0000
ROA not before: Wed 10 Dec 2025 02:00:31 +0000
ROA not after: Tue 10 Mar 2026 01:00:31 +0000
asID: 15169
IP address blocks: 192.178.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:22:c0:ea:f3:b6:38:49:cf:3d:ca:47:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Dec 10 02:00:31 2025 GMT
Not After : Mar 10 01:00:31 2026 GMT
Subject: CN=8cc9efc2-df60-48ac-9aac-0aa800030d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:54:ab:59:94:8e:d1:86:c3:15:76:0e:2e:4d:
28:8b:2e:18:34:30:4f:cb:6e:96:10:26:c2:2a:35:
7b:98:9e:64:72:78:fd:3c:a7:53:af:49:16:c8:96:
62:fd:fe:34:15:37:0a:56:25:25:b3:33:6b:e6:80:
17:52:3c:fb:b4:ce:29:35:06:fe:6f:de:19:46:8b:
a9:c6:71:96:9c:80:88:e5:ff:44:85:2b:76:0d:d4:
27:90:88:a5:b6:67:c1:9a:08:f1:73:4a:a8:da:6b:
22:82:41:f0:5e:c4:ad:6b:de:28:51:d6:ac:d5:da:
55:8d:e8:38:70:52:98:35:81:e0:46:2a:ea:83:b7:
1e:b6:81:fa:2e:92:ca:6a:32:c5:7d:7b:54:39:85:
80:74:95:56:c8:ac:57:93:3a:80:4e:25:bf:9b:37:
13:c4:b9:fe:ed:8a:63:4c:68:e1:30:2d:d5:40:fb:
a1:b9:39:5a:54:91:d6:b5:f8:04:c1:c9:d4:93:1c:
ea:32:6a:8f:a1:88:77:69:40:78:d7:f9:9b:fa:4f:
7e:b2:71:ce:8b:92:c3:fa:8a:49:d6:3c:c5:55:14:
1f:b2:d9:57:c2:ac:74:d0:e6:d1:9c:7b:73:ce:5e:
3b:27:84:41:d2:f9:21:40:94:4d:6b:05:84:97:3b:
fb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:99:29:FA:44:D5:C7:F8:A6:D6:70:87:6D:EF:02:FE:C4:15:91:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d08f403e-ed94-3b66-9997-e619f6160283.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.178.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:a7:0b:e0:3b:d1:52:d6:f9:00:64:2b:53:36:09:4a:cb:1a:
34:b6:85:b5:77:74:8c:34:06:82:8c:4b:1a:4e:85:86:55:93:
1f:fe:a8:cf:c1:f0:70:6b:19:73:3e:50:ab:ca:33:77:e7:38:
ca:b6:af:7b:2b:13:b5:b4:7c:19:e6:52:4f:ff:86:b7:1f:ee:
61:a4:24:40:44:71:a6:ac:4c:15:db:bb:7f:36:d0:3c:d9:b2:
0c:a9:8d:e3:8f:61:e9:cc:bb:18:62:4f:f8:7d:3f:55:a9:a0:
a7:55:8b:14:43:c0:67:79:4a:52:0a:65:83:22:63:be:8c:db:
c9:e4:28:13:e7:c5:e7:5d:a0:45:46:b7:42:75:7f:15:30:69:
46:a0:d3:d3:0f:d3:0c:38:da:e5:0c:98:27:86:a7:cd:e6:a7:
6d:58:4e:bf:b6:a7:c1:db:74:4d:2c:72:03:90:c8:0d:35:f1:
39:97:ea:29:07:44:06:8d:fd:33:11:7e:53:98:81:ea:8e:d8:
6e:76:d5:af:cb:1c:11:d4:31:d4:d9:76:bd:c8:38:1c:48:19:
a8:d3:b3:a8:3e:dc:18:0e:dc:07:9c:1d:44:1c:0c:8c:8d:52:
e2:f0:2e:1f:66:e4:02:31:23:6f:b2:d3:eb:5b:c5:c8:b9:ba:
d7:50:95:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:25:54 2025 by rpki-client