This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/157a669d-49e7-3703-b00d-b654c64ec4a1.roa
File: 157a669d-49e7-3703-b00d-b654c64ec4a1.roa (raw, json)
Hash identifier: 6hes3unpE2EEBCRgfF1jruEp+SIL0ihTIhisbXSe8os=
Subject key identifier: FF:0B:0A:6D:14:47:31:27:03:AD:7A:78:F8:92:95:BE:5B:08:BA:2E
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584BDCF5ED488C3125B4BA92C380
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/157a669d-49e7-3703-b00d-b654c64ec4a1.roa
Signing time: Sat 15 Nov 2025 02:00:32 +0000
ROA not before: Sat 15 Nov 2025 02:00:32 +0000
ROA not after: Fri 13 Feb 2026 02:00:32 +0000
asID: 31898
IP address blocks: 192.22.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:dc:f5:ed:48:8c:31:25:b4:ba:92:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Nov 15 02:00:32 2025 GMT
Not After : Feb 13 02:00:32 2026 GMT
Subject: CN=ee485444-9146-471a-9b89-a4db4087df10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f1:f4:60:70:43:aa:41:af:10:9d:c8:da:aa:
13:8b:c7:8d:29:a6:7a:25:52:6d:4b:35:3b:10:2e:
76:5b:f5:b2:36:92:e4:d8:b1:ac:a2:2c:dc:47:84:
af:24:7d:f2:84:23:5b:40:fe:04:c1:3c:c8:a6:45:
33:b9:75:c0:22:72:6f:7d:aa:28:89:91:93:3e:23:
65:82:c9:9a:df:30:14:ad:2f:fd:15:59:31:c9:61:
26:53:cf:d0:8b:d1:c9:74:5f:e6:0d:88:c5:ea:75:
30:b7:9f:3a:30:ff:2c:12:48:75:3f:63:b2:dd:1c:
cd:9f:fb:14:ca:3b:d1:87:fc:83:99:3f:cd:b4:d0:
1c:78:59:f7:3b:5f:51:9c:4a:e0:ed:0c:cc:e7:cf:
a2:22:1d:65:91:61:c7:48:5b:ad:95:86:da:38:3f:
c8:59:dc:e2:8c:d2:b5:88:34:1e:59:76:de:bd:c0:
12:eb:13:76:3d:dd:ca:34:a3:73:19:0f:ff:96:b4:
f9:fc:34:d4:4b:5f:e4:22:cd:c1:a4:da:b0:38:60:
bf:93:f7:64:4b:7e:96:6e:a8:7f:bf:c7:42:51:8f:
2b:97:17:37:57:11:f7:43:08:57:75:40:c0:4c:50:
7c:66:d7:a4:66:87:fd:b2:c0:be:be:84:a6:c0:f5:
bc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0B:0A:6D:14:47:31:27:03:AD:7A:78:F8:92:95:BE:5B:08:BA:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/157a669d-49e7-3703-b00d-b654c64ec4a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
192.22.104.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:58:70:5e:c3:79:85:ed:a7:58:2f:dd:ac:11:93:c4:bd:d2:
ba:ac:0a:33:d8:e0:e4:d2:04:20:67:94:7b:4e:21:a7:62:8d:
3f:6f:00:54:94:79:7d:e3:c8:c0:b4:5d:c7:45:3f:3d:7b:6e:
be:bc:a3:6a:c9:9b:63:a2:69:56:4a:07:00:23:87:97:d7:69:
d4:b2:35:52:0c:b3:1d:ef:0a:8e:7b:cb:52:d8:0b:1b:15:52:
78:ca:e5:1b:29:ea:3a:1c:1a:c7:94:9f:5d:96:1d:4e:7d:c7:
59:be:ea:64:d8:25:52:40:22:04:2e:73:23:1c:5b:26:e0:32:
14:62:72:ad:a5:fa:70:27:63:46:d0:27:dc:fa:83:e7:43:25:
fc:ce:99:7d:65:eb:aa:3c:df:ea:fb:af:a0:44:23:ad:6a:1e:
a9:a1:37:3a:e5:b9:14:55:ab:d1:a9:bd:7e:58:6c:ab:b7:32:
53:c9:fb:e8:c0:c6:9d:f3:22:6d:03:f4:bf:0f:f6:dd:34:ba:
cd:92:25:4f:08:6b:9d:30:4c:4f:3d:34:08:01:ed:54:5a:ce:
f7:2e:a2:60:d5:d1:52:8e:9e:bb:64:1a:0f:bf:7f:f5:8a:a2:
91:73:7d:fa:8c:b1:4e:ca:6f:6b:b4:e4:3d:53:ea:12:3c:cb:
48:00:74:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:22:03 2025 by rpki-client