This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ff0eaabc-7b7a-376c-96d0-dc0467b4ba8c.roa
File: ff0eaabc-7b7a-376c-96d0-dc0467b4ba8c.roa (raw, json)
Hash identifier: BIm1KmpeoJk1vcL7lSnMk33fcFqGlvWEV+TCIUtYxPw=
Subject key identifier: C2:CB:F3:73:C1:B1:4B:5A:3C:A9:94:13:CC:BC:34:E3:1D:DD:7F:B5
Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial: 010D0C9F4328584C242695F5BFE0527E46E9FDE0
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ff0eaabc-7b7a-376c-96d0-dc0467b4ba8c.roa
Signing time: Wed 10 Dec 2025 14:00:38 +0000
ROA not before: Wed 10 Dec 2025 14:00:38 +0000
ROA not after: Tue 10 Mar 2026 13:00:38 +0000
asID: 10794
IP address blocks: 171.159.240.0/20 maxlen: 20
171.159.240.0/21 maxlen: 21
171.159.240.0/24 maxlen: 24
171.159.241.0/24 maxlen: 24
171.159.242.0/24 maxlen: 24
171.159.243.0/24 maxlen: 24
171.159.244.0/24 maxlen: 24
171.159.245.0/24 maxlen: 24
171.159.246.0/24 maxlen: 24
171.159.247.0/24 maxlen: 24
171.159.248.0/22 maxlen: 22
171.159.248.0/24 maxlen: 24
171.159.249.0/24 maxlen: 24
171.159.250.0/24 maxlen: 24
171.159.251.0/24 maxlen: 24
171.159.252.0/24 maxlen: 24
171.159.253.0/24 maxlen: 24
171.159.254.0/24 maxlen: 24
171.159.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 17 Dec 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:24:26:95:f5:bf:e0:52:7e:46:e9:fd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Validity
Not Before: Dec 10 14:00:38 2025 GMT
Not After : Mar 10 13:00:38 2026 GMT
Subject: CN=c520cc3b-b6e5-4837-a3db-61719fcc8f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f2:fe:46:b6:ca:83:b5:71:fc:fd:ec:5b:1e:
0a:c4:02:9b:0d:ed:3c:6e:e3:b2:d8:5e:59:7d:7f:
cf:b2:9c:f7:ab:2e:3a:bb:c3:67:90:b0:74:cd:1c:
af:63:09:1c:4f:0a:36:a9:06:18:68:c9:aa:29:ee:
48:61:dd:07:74:65:3c:eb:01:bc:87:bd:29:33:9a:
ae:45:56:99:31:51:1a:13:1d:55:ae:c6:87:ce:04:
43:f3:87:00:21:4e:1e:13:c2:8f:92:e7:d3:55:9f:
f1:67:10:a8:54:36:38:8a:b5:77:aa:2d:64:73:18:
81:a6:af:bf:84:91:42:1a:ba:bf:aa:26:db:77:f3:
be:63:00:a2:7f:51:2e:6c:be:ce:83:f9:ef:21:93:
c4:be:4d:4b:a0:dc:44:18:6d:fe:e1:84:11:92:d4:
e6:77:38:56:09:a0:66:36:19:2b:30:1a:cf:ec:c8:
01:1a:1f:8b:eb:60:3f:3b:ad:0d:2d:fb:56:49:74:
a0:94:bd:59:81:1e:8c:5f:c2:87:e3:76:b2:d6:a3:
53:b9:2a:c0:39:be:bb:3d:bd:61:e7:db:59:aa:81:
7c:71:93:9f:9e:ca:1d:7a:80:82:6d:04:6a:4e:d1:
3d:57:e4:d2:a4:09:74:bb:01:84:8a:69:12:76:c2:
93:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CB:F3:73:C1:B1:4B:5A:3C:A9:94:13:CC:BC:34:E3:1D:DD:7F:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ff0eaabc-7b7a-376c-96d0-dc0467b4ba8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
X509v3 Authority Key Identifier:
keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
sbgp-ipAddrBlock: critical
IPv4:
171.159.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:ad:07:28:95:2f:58:99:d5:6b:bd:38:5e:e9:1d:07:de:c4:
83:00:37:95:a4:10:3c:5f:0b:72:94:4a:96:d9:10:87:4c:2e:
af:23:b7:1c:3b:73:05:de:38:6f:75:e8:68:c5:fb:a1:ad:3d:
8d:1d:f0:f4:45:e3:1c:ef:78:9a:32:2e:6a:b2:97:ce:30:e2:
b2:91:1c:a2:63:74:35:0b:b4:20:f6:f1:0c:43:a1:8a:d9:e1:
a8:45:4e:44:3f:73:4c:17:4e:d7:fe:73:02:a9:b2:4a:8c:58:
fe:23:24:a1:1c:52:6b:08:68:58:c5:7f:9a:c0:85:0f:57:04:
56:15:3f:ea:c3:b7:fb:50:33:7e:87:1b:57:d4:f9:7f:e4:6b:
f8:7d:43:5a:61:87:4f:ea:45:f7:89:b2:f8:a3:86:2b:7a:2d:
cd:ca:e6:1f:0b:95:67:23:4b:99:43:a3:30:67:d8:65:47:ed:
ee:fc:d9:67:ed:d6:53:6a:4b:bf:e3:6a:a7:12:3c:8f:c7:30:
21:50:2d:94:9e:52:df:fa:2c:dc:03:d3:27:f1:b0:7a:2f:49:
98:ae:c4:a6:33:3a:43:c2:0c:a6:93:ee:26:8f:66:7d:c4:5e:
ba:4c:8d:4f:76:a5:50:85:ef:26:75:26:de:35:6a:b1:48:f8:
5b:86:dc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 13:21:26 2025 by rpki-client