This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/117a847b-5835-3cec-bd0b-1a95a5c4c6ee.roa
File: 117a847b-5835-3cec-bd0b-1a95a5c4c6ee.roa (raw, json)
Hash identifier: 21wNBC2aFordva3QBibYWq9oRzH5/ZDS5j0RW2L4j7U=
Subject key identifier: 2E:47:1B:26:73:D4:09:B8:64:58:6B:0A:36:9E:E4:B4:72:55:9D:10
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584C42DC109667ADD3AE9A5D0A40
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/117a847b-5835-3cec-bd0b-1a95a5c4c6ee.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 12041
IP address blocks: 161.232.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:dc:10:96:67:ad:d3:ae:9a:5d:0a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=6b762373-90cf-40f3-84f3-f8c34e61995a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dc:85:e2:2c:31:5e:6d:e1:eb:32:54:46:31:
7a:e4:98:bb:07:97:0f:b1:93:c9:24:3d:9a:c4:4a:
6d:87:df:2d:04:72:56:60:ad:6f:13:70:fe:59:db:
48:75:26:76:43:f1:e5:2b:11:a8:c8:ee:4b:de:fd:
9f:29:b6:fb:a6:a2:75:19:ff:b9:8c:c1:de:63:5b:
0c:e8:48:07:25:98:7b:e0:83:c1:24:4d:3f:4e:aa:
72:5a:c6:c3:b5:0c:1a:f4:5f:bb:57:ef:8d:45:19:
15:62:56:64:e0:cb:bb:39:f5:06:0e:6e:fb:15:11:
73:5d:8e:13:9b:33:aa:ca:38:25:77:6e:e7:ac:4d:
d9:d3:28:bc:b2:66:86:c0:41:7a:a1:a5:af:11:53:
e5:6e:93:d3:03:42:b7:7d:5c:f5:3a:2a:99:a7:19:
f9:c4:7c:00:16:7e:bd:3e:a8:51:01:57:72:a8:82:
33:f0:ad:7f:7f:01:2f:9e:05:f2:40:65:4c:66:32:
57:5c:51:a2:94:ff:3a:c7:d7:2e:86:af:70:49:70:
0b:f6:95:94:10:4e:61:a6:05:fe:89:54:6e:ce:0c:
73:b5:89:5f:2e:b3:95:ff:7e:65:d1:c6:64:1d:40:
07:f3:45:b4:d1:b6:47:7c:f1:29:7d:18:db:41:95:
44:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:47:1B:26:73:D4:09:B8:64:58:6B:0A:36:9E:E4:B4:72:55:9D:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/117a847b-5835-3cec-bd0b-1a95a5c4c6ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
161.232.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:9a:bc:27:3f:ec:ac:ee:fe:6a:f3:3c:0f:93:7b:08:18:01:
29:31:73:f7:4b:05:7b:e5:f0:6a:7c:b3:35:cd:14:b0:a7:26:
f2:0f:44:b4:86:73:bd:90:d4:6a:34:18:1a:b4:eb:8a:53:8f:
24:6f:fd:38:ec:c1:a4:c3:ef:49:fc:c4:49:96:43:07:12:10:
9a:51:3c:23:63:6d:f7:e9:ef:ee:45:88:7b:dc:35:33:1d:eb:
ca:1a:16:ee:e6:8f:41:3c:6c:30:ff:27:c1:1e:bf:3c:01:ea:
d4:5c:d9:87:08:62:12:f7:e5:71:c3:7b:09:27:d1:ef:77:ef:
17:11:3a:c7:7b:3c:93:d1:59:55:a0:fc:c8:4b:a8:05:9c:80:
4d:cc:66:f6:c5:78:62:07:35:2b:c0:7d:af:3b:69:7e:52:94:
f8:9c:9f:c6:26:2d:1f:6c:5f:98:5a:ea:9b:1f:ad:49:c0:7d:
3e:a4:b5:89:44:aa:40:fb:f5:1f:4a:f8:4f:7f:06:62:d1:d6:
59:3f:06:ce:86:49:9d:09:9f:cc:69:45:6a:f9:b6:dd:35:2c:
0b:b5:bb:2d:12:51:f0:66:90:14:94:8a:b8:6e:f2:37:ac:3a:
38:ae:48:51:85:05:5d:13:31:e7:fe:d8:21:1d:74:e1:4f:6c:
53:65:55:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:12:42 2026 by rpki-client