This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21bcff30-ec67-301d-b7da-0357e4b9725c.roa
File: 21bcff30-ec67-301d-b7da-0357e4b9725c.roa (raw, json)
Hash identifier: gddp6XwcmvZM+MY9VVSin0US9DvQZEC19yRx5XAlDTs=
Subject key identifier: 10:F9:5B:F7:18:AD:B1:9C:75:31:B8:8C:A7:0E:B3:B9:4F:8E:6A:CD
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584BC96B0EFE8F92CFBF8DF7D800
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21bcff30-ec67-301d-b7da-0357e4b9725c.roa
Signing time: Sat 08 Nov 2025 02:00:30 +0000
ROA not before: Sat 08 Nov 2025 02:00:30 +0000
ROA not after: Fri 06 Feb 2026 02:00:30 +0000
asID: 31898
IP address blocks: 159.13.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c9:6b:0e:fe:8f:92:cf:bf:8d:f7:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Nov 8 02:00:30 2025 GMT
Not After : Feb 6 02:00:30 2026 GMT
Subject: CN=519caa96-90a3-4457-87b1-6d0c94884fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:97:c0:87:1b:e2:bc:3f:0d:3d:c1:48:22:d4:
58:d3:e4:43:4b:fb:1a:50:1c:f1:0f:db:a8:ad:2e:
93:0a:e5:76:81:db:60:da:20:00:e4:93:5a:15:53:
3d:c3:32:84:b4:7b:05:9b:b2:b4:fd:80:b6:42:b6:
d6:3f:57:55:8e:12:74:f1:ed:20:5d:11:8d:a0:2e:
77:93:d7:d6:19:67:69:e4:99:e0:cf:8c:00:5b:6c:
d0:09:06:f8:04:a8:eb:92:f8:7b:f4:dd:5d:48:e1:
1f:e1:2b:48:99:d2:5f:38:a6:93:51:59:a3:dc:12:
14:d0:88:ea:88:71:f9:dc:f6:2f:2f:36:bd:f0:25:
27:24:84:48:d6:1e:70:8e:74:4c:2b:b6:6e:8e:bd:
67:c6:19:eb:38:aa:a0:fe:81:7a:59:e4:ac:49:ce:
61:17:37:70:22:8e:13:fd:1b:a3:8d:55:36:85:a9:
a2:8c:3a:2c:fe:35:88:a7:85:46:9f:f3:74:a9:3d:
92:0a:8f:cc:ea:40:27:2d:ae:07:6f:56:23:d4:46:
7e:79:39:86:80:cb:12:51:c4:ed:4d:c9:03:8c:a1:
52:19:23:79:be:b6:f3:95:b4:8e:8b:d0:54:35:da:
95:00:c1:7e:2e:ba:a6:ee:7d:52:18:d5:d5:3c:2d:
1c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F9:5B:F7:18:AD:B1:9C:75:31:B8:8C:A7:0E:B3:B9:4F:8E:6A:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21bcff30-ec67-301d-b7da-0357e4b9725c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
159.13.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:71:9f:ca:7b:18:64:49:5e:30:29:34:90:dc:fe:20:99:fa:
7f:94:30:bd:a3:1e:03:72:c8:91:1e:5d:2a:53:49:50:e9:c7:
80:1c:4b:aa:a5:44:63:04:c6:53:74:32:ea:7d:1b:b3:0e:ea:
65:2f:39:1b:d5:9e:95:85:78:82:ad:84:ac:72:c3:73:f1:4f:
73:34:2f:34:71:be:f2:e9:16:69:f4:f2:f4:1c:48:32:69:53:
45:d1:ab:82:81:15:b4:d4:b8:49:1a:bf:d8:29:ec:e9:47:65:
d0:52:49:10:21:8d:88:04:ae:1a:bb:16:96:bc:93:62:1a:4b:
2c:94:5f:d0:fa:8a:e5:2d:9c:38:52:df:5e:ac:39:a1:4b:e6:
b5:68:4b:a6:f8:96:b0:1a:b0:9a:d0:17:83:7d:4c:63:79:36:
d4:97:85:45:5a:ff:ef:7e:10:d8:cf:78:af:55:7d:c9:4d:ec:
70:f0:96:78:54:6c:98:d4:9b:17:52:ac:89:3f:5b:d7:18:47:
ef:a9:42:c6:3d:00:f4:20:36:e7:3b:d0:15:8e:7a:bd:01:22:
92:95:c2:47:b1:65:d4:62:05:40:a2:0c:d8:96:d3:45:3a:ed:
18:c7:28:dc:90:ad:33:7b:69:a7:46:84:be:8c:0b:1a:ea:27:
ea:de:b5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:16:36 2025 by rpki-client