This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/29f672b8-6e59-3c0a-a545-e843d8b8c265.roa
File: 29f672b8-6e59-3c0a-a545-e843d8b8c265.roa (raw, json)
Hash identifier: kkL8Aphk1wNec5fmWwg4qBNk8E5ocSstG1YefxbCalw=
Subject key identifier: C3:FD:05:1C:A5:4C:76:F6:35:2A:5E:14:77:74:2E:FE:94:BE:48:3C
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584C44410FBB877F2F51303D2300
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/29f672b8-6e59-3c0a-a545-e843d8b8c265.roa
Signing time: Mon 22 Dec 2025 02:00:32 +0000
ROA not before: Mon 22 Dec 2025 02:00:32 +0000
ROA not after: Sun 22 Mar 2026 01:00:32 +0000
asID: 207266
IP address blocks: 199.249.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:44:41:0f:bb:87:7f:2f:51:30:3d:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Dec 22 02:00:32 2025 GMT
Not After : Mar 22 01:00:32 2026 GMT
Subject: CN=78805904-d6d4-4fa1-828a-aaec1fccf408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b7:99:7b:c4:41:0d:d2:58:52:7d:0a:f1:33:
32:d1:e1:ad:fb:c5:4e:aa:77:de:90:ea:02:b2:90:
f1:5e:51:18:83:e7:09:82:be:17:22:f0:ca:ce:af:
c7:0b:de:87:f2:1f:97:61:86:cb:6b:e5:55:20:85:
87:09:97:a1:88:9b:90:4b:f2:a5:66:64:18:cb:43:
59:38:02:fd:07:a7:30:a6:d8:84:0e:47:ac:6b:44:
8b:ff:0d:37:25:38:7a:39:b9:51:aa:97:3d:3e:df:
9b:76:02:ba:8e:89:88:92:a8:8c:b7:ff:22:53:17:
c2:36:49:cc:50:6e:e3:9a:18:58:fa:d2:c8:d0:46:
cb:b8:cd:df:eb:f7:25:09:88:1b:2c:7d:8b:ff:41:
4b:f2:b6:f6:2d:a9:aa:0e:ff:2d:43:99:21:6c:98:
7b:e9:36:3e:55:f1:09:52:d1:4c:ca:97:d5:ce:07:
00:b1:1f:c5:48:62:6b:04:cb:a2:72:6c:e6:28:a3:
47:98:bc:1c:a7:75:91:4a:2b:42:20:23:fd:64:83:
18:e4:1d:9a:f6:39:eb:dc:6c:34:0c:84:79:81:fb:
4e:11:ab:59:c4:ab:a1:e3:d3:fc:8a:26:f1:d5:6c:
ce:57:b0:b3:2e:c7:b2:2e:da:ff:55:74:84:92:2b:
4e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FD:05:1C:A5:4C:76:F6:35:2A:5E:14:77:74:2E:FE:94:BE:48:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/29f672b8-6e59-3c0a-a545-e843d8b8c265.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.249.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:76:cb:64:9e:a0:01:64:4d:0f:96:52:9a:5a:9e:b1:4e:a7:
e0:b2:52:53:bc:71:1f:00:54:ed:19:03:02:af:78:af:79:9c:
4c:f2:a2:fa:dd:79:9b:2c:a0:d2:e5:88:76:16:ab:2e:b8:c3:
66:2e:a3:cb:c5:cc:fb:fc:6f:d6:74:5b:7e:8c:42:70:a5:3e:
0c:3e:0d:bd:f4:96:44:bf:f1:ed:68:69:2b:f7:6a:80:01:c9:
1c:89:27:c3:b2:7b:a0:e9:34:95:a6:8e:c8:0f:7e:1f:7b:29:
3a:12:26:ae:7a:8c:8b:07:0d:eb:a5:e4:a6:16:19:99:de:67:
34:44:ec:23:a5:54:0c:59:e4:77:bc:37:b9:c7:d4:56:c7:eb:
e6:9b:61:10:56:52:41:44:00:e1:56:e4:88:5c:5d:fc:73:c8:
2e:c4:91:d0:f7:23:1a:bf:4e:44:ec:d8:e2:c4:ca:6b:1d:5d:
d7:60:22:3a:c1:d7:c9:06:53:a9:43:d9:fd:e3:a2:d5:ba:92:
23:4d:60:90:67:f8:c2:1d:df:5e:aa:91:21:f9:ca:dc:96:6c:
00:5f:ef:95:a5:7e:f8:74:af:1c:db:18:d3:6a:e0:dc:47:5c:
8c:86:fe:62:05:32:f5:68:6a:cf:2b:cb:52:0b:ac:b5:37:67:
a6:b2:7d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:34:40 2026 by rpki-client