This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3923c399-894c-389b-a8c4-6ee7b0a60468.roa
File: 3923c399-894c-389b-a8c4-6ee7b0a60468.roa (raw, json)
Hash identifier: thz/3G5nQoHalPQprJ7iyhGoFKfBwyjfOECHbwp7f0U=
Subject key identifier: 0C:4B:F1:2A:65:C3:C6:74:A6:5B:1B:43:1C:D1:61:D3:DD:C8:90:1E
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584C42DBFBF540997CDB7E1A0F00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3923c399-894c-389b-a8c4-6ee7b0a60468.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 12041
IP address blocks: 161.232.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:db:fb:f5:40:99:7c:db:7e:1a:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=4adca7ea-026d-43c4-bb74-ae8d9149d345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:77:10:28:d7:67:91:5e:8e:b9:65:6f:14:c5:
41:ec:aa:5b:78:06:1b:a5:7d:f4:d4:cf:d1:81:f7:
20:54:09:4e:9f:d0:8e:70:26:35:37:1f:f9:d1:aa:
47:a8:60:59:ce:f7:3c:0f:44:19:04:93:51:36:f1:
39:cf:a6:db:be:4c:e9:ff:77:81:34:1d:54:19:46:
d2:df:8d:9e:ac:56:b5:52:fe:c1:ef:15:15:90:c7:
72:67:7a:46:d0:64:4d:3c:bb:e2:07:25:2f:96:95:
64:20:ec:ed:63:df:4e:3d:c9:aa:9a:d8:ac:c8:40:
f1:4b:a5:e2:c5:a5:6a:f4:08:64:bd:ce:14:f2:b2:
0c:8b:6d:04:fc:f9:70:e9:16:e4:79:ae:71:a7:8a:
9c:74:09:f9:82:3a:03:57:07:8d:f1:18:68:89:e4:
d6:83:32:90:46:d9:0f:31:77:37:62:fb:f8:17:b7:
ca:5b:de:4a:40:0f:fa:38:a3:06:7f:91:13:7c:11:
33:5d:96:32:ce:b5:a5:17:17:b5:e0:bb:dd:53:36:
3c:de:f0:39:1b:a2:97:e3:c8:0d:77:1a:c5:0a:79:
47:8b:9f:a1:64:27:e2:ac:6e:e6:38:f9:54:cb:b2:
62:15:93:73:3c:34:05:c3:dd:c0:c6:af:98:21:08:
ea:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4B:F1:2A:65:C3:C6:74:A6:5B:1B:43:1C:D1:61:D3:DD:C8:90:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3923c399-894c-389b-a8c4-6ee7b0a60468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
161.232.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:9c:59:57:52:a6:e4:fd:45:56:c9:fb:39:84:c8:e2:87:1e:
aa:d3:ea:58:95:7c:8d:b3:20:33:75:0b:75:bb:4e:2d:6e:56:
79:ab:36:12:ff:62:ca:02:d9:63:74:3c:48:2b:b3:da:81:4e:
b8:c6:b3:e6:4a:0e:fe:ae:d3:c6:68:67:d6:48:34:75:fb:ba:
17:f2:4b:3f:be:dd:2c:a9:28:19:38:e7:3e:5c:36:93:ab:bf:
0e:9d:e5:a5:f2:6e:09:76:c4:78:fc:e0:a6:dc:75:ce:a9:1f:
98:a6:fb:d8:b7:b9:59:11:22:12:24:f8:df:3f:a9:76:e5:34:
2a:0a:01:1f:ad:12:51:d7:2d:2d:69:ad:8c:7a:4d:d0:8b:83:
40:02:0e:84:d9:a1:18:4e:ce:c5:15:63:77:9d:38:65:da:61:
16:d9:f2:ca:e1:0e:2a:d7:4c:fe:87:da:84:a3:7b:0e:4f:7f:
49:ef:fe:58:e1:27:2d:fc:32:3e:ea:46:2f:4c:e7:35:fe:4f:
4a:1d:99:4b:8e:38:eb:c2:52:7b:1e:72:df:85:07:b8:25:d0:
c3:13:e3:0a:b6:03:24:fa:7f:b2:c1:82:96:41:08:cd:e5:64:
b0:14:32:f4:a0:f5:9a:73:74:a3:92:b1:2b:56:aa:db:fe:1d:
64:15:54:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC2/v1QJl8234aDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk
NGFkY2E3ZWEtMDI2ZC00M2M0LWJiNzQtYWU4ZDkxNDlkMzQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXcQKNdnkV6OuWVvFMVB7KpbeAYbpX301M/R
gfcgVAlOn9COcCY1Nx/50apHqGBZzvc8D0QZBJNRNvE5z6bbvkzp/3eBNB1UGUbS
342erFa1Uv7B7xUVkMdyZ3pG0GRNPLviByUvlpVkIOztY99OPcmqmtisyEDxS6Xi
xaVq9Ahkvc4U8rIMi20E/Plw6Rbkea5xp4qcdAn5gjoDVweN8RhoieTWgzKQRtkP
MXc3Yvv4F7fKW95KQA/6OKMGf5ETfBEzXZYyzrWlFxe14LvdUzY83vA5G6KX48gN
dxrFCnlHi5+hZCfirG7mOPlUy7JiFZNzPDQFw93Axq+YIQjqkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAxL8Splw8Z0plsbQxzRYdPdyJAeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzkyM2MzOTktODk0Yy0z
ODliLWE4YzQtNmVlN2IwYTYwNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoehIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHacWVdSpuT9RVbJ+zmEyOKHHqrT6liVfI2zIDN1C3W7Ti1uVnmrNhL/
YsoC2WN0PEgrs9qBTrjGs+ZKDv6u08ZoZ9ZINHX7uhfySz++3SypKBk45z5cNpOr
vw6d5aXybgl2xHj84Kbcdc6pH5im+9i3uVkRIhIk+N8/qXblNCoKAR+tElHXLS1p
rYx6TdCLg0ACDoTZoRhOzsUVY3edOGXaYRbZ8srhDirXTP6H2oSjew5Pf0nv/ljh
Jy38Mj7qRi9M5zX+T0odmUuOOOvCUnsect+FB7gl0MMT4wq2AyT6f7LBgpZBCM3l
ZLAUMvSg9ZpzdKOSsStWqtv+HWQVVLc=
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:14:41 2026 by rpki-client