This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/9f9901be-486a-39f7-82b9-2db378019951.roa
File: 9f9901be-486a-39f7-82b9-2db378019951.roa (raw, json)
Hash identifier: rB6dpUxomJL5aDjnhFt+bJjog1zlQdvH1/arivR9Jh8=
Subject key identifier: 78:D7:EF:10:A1:4C:67:9A:7C:D0:CE:11:D8:D3:EC:E3:7E:50:29:0A
Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial: 010D0C9F4328584C49D673F67E7D4024A55EB580
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/9f9901be-486a-39f7-82b9-2db378019951.roa
Signing time: Wed 24 Dec 2025 02:00:31 +0000
ROA not before: Wed 24 Dec 2025 02:00:31 +0000
ROA not after: Tue 24 Mar 2026 01:00:31 +0000
asID: 63293
IP address blocks: 129.134.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:49:d6:73:f6:7e:7d:40:24:a5:5e:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
Validity
Not Before: Dec 24 02:00:31 2025 GMT
Not After : Mar 24 01:00:31 2026 GMT
Subject: CN=67c0a12f-eb04-442c-af1d-9dfb28d25da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:ef:4a:c1:fb:56:2b:9f:6f:a6:fd:f7:dd:
b8:ba:b9:80:20:e5:13:bf:3b:2d:72:d0:75:a9:e5:
0b:e6:e4:68:64:a3:e7:31:15:37:e0:7e:d7:6d:d9:
67:43:b0:7e:f5:a3:03:fc:3a:d5:ac:17:b8:5e:8a:
52:89:95:e6:49:56:c0:73:71:a5:76:a8:88:8e:b7:
9c:97:1d:f7:26:c6:9e:5d:36:b8:34:5e:6e:80:35:
7a:a4:07:93:f8:57:5e:60:38:f0:1e:0a:b8:8a:83:
56:c0:e5:3c:ca:ab:54:b4:95:b2:fe:7b:21:52:0b:
e3:3f:cc:22:e9:b4:6c:a0:11:cf:60:15:91:ac:bf:
f2:bc:04:2f:4c:c6:c9:2c:ad:02:c9:1c:85:46:b3:
9a:5a:cb:70:d9:d9:9e:ae:ed:e3:03:42:a6:fb:3c:
9e:9c:ec:21:3c:c3:ad:c3:b9:3e:b6:a5:bb:5f:fe:
1f:81:7f:c6:35:aa:9d:fc:8c:45:fc:1a:9b:1b:22:
d0:8f:58:6e:5e:0c:36:f9:da:cf:cb:53:80:2e:db:
56:4b:88:de:11:06:ad:af:63:5f:9c:c4:50:d5:fa:
6a:e5:97:51:a8:c8:8d:f9:b5:ba:84:2d:b4:b1:f1:
9c:1d:ac:a0:91:ae:7f:28:9b:59:ab:8b:8c:08:61:
f4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D7:EF:10:A1:4C:67:9A:7C:D0:CE:11:D8:D3:EC:E3:7E:50:29:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/9f9901be-486a-39f7-82b9-2db378019951.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
X509v3 Authority Key Identifier:
keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
sbgp-ipAddrBlock: critical
IPv4:
129.134.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:46:75:d7:a5:3c:a2:e7:ec:3f:f4:05:2c:4b:57:7a:1d:66:
a0:d3:0d:20:b0:10:83:6d:36:82:e8:20:c2:97:2c:2c:a7:1e:
3b:6e:0b:0a:38:21:d3:7f:5b:fe:e3:c8:3c:2e:93:ee:08:a8:
54:60:87:24:66:80:6d:fa:ce:7f:62:9c:93:c8:7a:a8:d2:dd:
95:30:d2:6f:cb:b9:9b:28:c8:0e:1d:31:75:c0:91:f9:a4:f7:
f5:0b:10:71:db:c0:ae:9d:06:47:df:95:7e:83:61:f3:de:ce:
10:f2:87:c6:85:53:79:a6:22:56:64:72:d6:fc:fe:c0:bc:bc:
6a:5f:a4:f1:a1:8b:49:ec:93:ce:5d:6a:33:8b:49:37:e8:ba:
05:78:b6:97:0c:4c:4a:80:16:9c:51:75:f5:cf:e2:62:b7:5d:
85:a5:2d:1a:14:5f:a4:28:55:65:cc:bc:8f:e8:dd:e1:69:ce:
f2:b3:7a:de:3c:33:8e:b2:be:9a:4c:35:d1:1d:a1:a9:5e:ff:
7a:de:27:d3:af:c7:d8:e3:27:a5:a2:77:6b:0e:37:42:61:ca:
f2:e9:0a:39:1c:62:2c:4a:eb:8b:b7:b1:98:56:76:19:1c:62:
f2:d1:1d:30:ef:5b:03:60:c4:cb:72:9d:ab:b3:36:35:78:4c:
a0:40:9e:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExJ1nP2fn1AJKVetYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4
MjIyMB4XDTI1MTIyNDAyMDAzMVoXDTI2MDMyNDAxMDAzMVowLzEtMCsGA1UEAxMk
NjdjMGExMmYtZWIwNC00NDJjLWFmMWQtOWRmYjI4ZDI1ZGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6HvSsH7Viufb6b99924urmAIOUTvzstctB1
qeUL5uRoZKPnMRU34H7XbdlnQ7B+9aMD/DrVrBe4XopSiZXmSVbAc3GldqiIjrec
lx33JsaeXTa4NF5ugDV6pAeT+FdeYDjwHgq4ioNWwOU8yqtUtJWy/nshUgvjP8wi
6bRsoBHPYBWRrL/yvAQvTMbJLK0CyRyFRrOaWstw2dmeru3jA0Km+zyenOwhPMOt
w7k+tqW7X/4fgX/GNaqd/IxF/BqbGyLQj1huXgw2+drPy1OALttWS4jeEQatr2Nf
nMRQ1fpq5ZdRqMiN+bW6hC20sfGcHaygka5/KJtZq4uMCGH0qwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHjX7xChTGeafNDOEdjT7ON+UCkKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0
MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvOWY5OTAxYmUtNDg2YS0z
OWY3LTgyYjktMmRiMzc4MDE5OTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0
NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh
ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0
MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgYbEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF1GddelPKLn7D/0BSxLV3odZqDTDSCwEINtNoLoIMKXLCynHjtuCwo4
IdN/W/7jyDwuk+4IqFRghyRmgG36zn9inJPIeqjS3ZUw0m/LuZsoyA4dMXXAkfmk
9/ULEHHbwK6dBkfflX6DYfPezhDyh8aFU3mmIlZkctb8/sC8vGpfpPGhi0nsk85d
ajOLSTfougV4tpcMTEqAFpxRdfXP4mK3XYWlLRoUX6QoVWXMvI/o3eFpzvKzet48
M46yvppMNdEdoale/3reJ9Ovx9jjJ6Wid2sON0JhyvLpCjkcYixK64u3sZhWdhkc
YvLRHTDvWwNgxMtynauzNjV4TKBAnjQ=
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:40:53 2026 by rpki-client