This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/30611e51-d403-3da4-8335-67bfe53fc3eb.roa
File: 30611e51-d403-3da4-8335-67bfe53fc3eb.roa (raw, json)
Hash identifier: nIleKAOCUeB/CRhm5xmE9y89Pncf6FE3L773e0tCaKg=
Subject key identifier: B8:4B:0A:B3:7B:4B:73:6A:C2:EE:70:33:BF:03:E8:F3:E7:E4:43:84
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584BC96B0E2B21FC3D905EAE7900
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/30611e51-d403-3da4-8335-67bfe53fc3eb.roa
Signing time: Sat 08 Nov 2025 02:00:30 +0000
ROA not before: Sat 08 Nov 2025 02:00:30 +0000
ROA not after: Fri 06 Feb 2026 02:00:30 +0000
asID: 31898
IP address blocks: 129.154.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c9:6b:0e:2b:21:fc:3d:90:5e:ae:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Nov 8 02:00:30 2025 GMT
Not After : Feb 6 02:00:30 2026 GMT
Subject: CN=9f1ca8ad-1767-4e97-99ac-90ac785fe76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:68:f6:58:0c:73:07:7d:a3:bc:ab:e7:6e:8a:
84:13:d0:5c:79:f9:5d:3b:5b:30:f1:33:e9:58:3d:
0d:c6:91:6f:cc:81:e1:7d:8a:9f:0c:97:f2:79:fc:
96:36:da:a3:7f:71:f4:22:4a:4f:05:50:b4:b1:ff:
b2:db:96:7e:a5:ca:45:f9:9d:e9:08:bc:ba:0b:93:
47:ad:66:a9:94:37:f5:34:49:7d:83:34:0f:5f:08:
e2:ec:da:4d:bd:71:5a:4b:59:4c:d2:bc:15:84:4f:
91:93:2a:e4:15:67:57:7d:35:bf:d8:27:18:4d:5c:
1c:36:8f:c1:c0:35:f2:71:94:1b:17:ed:0e:0f:4c:
b8:54:83:8c:20:3f:07:b1:91:a5:a4:a8:72:a3:a4:
64:b6:73:3a:0c:48:5f:51:60:e8:1f:a9:af:09:c2:
85:9d:00:2e:60:3b:20:d2:ca:0b:2a:1f:b3:3f:43:
0e:fc:9b:fb:9a:28:47:f5:86:e0:9c:f0:88:14:80:
2b:c4:b2:73:5d:25:5f:9f:ee:62:5d:24:ca:8c:a2:
15:47:d8:21:b0:dc:5c:95:49:1e:94:07:49:97:cb:
24:fd:9e:dd:04:78:20:c9:4e:a9:04:1f:cb:30:74:
24:60:bd:b9:07:34:ed:2c:a4:b3:93:89:d5:85:c6:
57:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4B:0A:B3:7B:4B:73:6A:C2:EE:70:33:BF:03:E8:F3:E7:E4:43:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/30611e51-d403-3da4-8335-67bfe53fc3eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.154.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:85:d3:71:04:3f:39:99:fa:e4:46:6b:9f:bf:de:e3:1b:1b:
c7:16:59:a9:12:61:32:37:71:4c:64:f6:1c:65:70:cd:2a:6c:
3c:d8:23:7e:b8:f3:5e:66:2b:4d:e5:5a:f2:05:6b:0f:35:67:
4c:fa:46:39:41:a3:6c:b5:56:68:50:fc:f3:54:3f:29:c4:1f:
8b:95:9c:3e:50:6c:f5:18:fa:93:c0:91:cf:b3:b8:e7:94:13:
54:eb:0e:22:2f:5e:5a:1e:a4:d0:6b:6c:6b:99:51:1a:c1:95:
d7:df:2a:ec:b8:bb:2f:b9:4b:24:fe:e0:af:92:f4:22:23:25:
95:de:e0:26:09:e5:40:1e:2c:2e:49:d1:97:bc:51:51:c1:ae:
f3:f6:0d:33:8c:b8:21:68:5c:df:f7:2a:62:68:61:e5:f9:c7:
0a:23:a3:76:17:cd:4c:da:ff:e4:ed:aa:ab:d3:39:27:37:a7:
0f:63:17:fe:f3:3f:57:ce:51:5e:d9:ab:4b:a0:f1:56:75:0e:
08:cd:ae:22:f1:27:1e:00:4b:d3:e7:94:3c:31:ab:ae:4b:d3:
1d:3a:2b:34:df:4a:42:f7:68:f8:85:e8:9e:f8:5e:71:62:1d:
4e:d8:87:01:3c:a3:b3:43:83:ca:af:e1:08:3d:c2:c7:f8:0f:
41:f1:a8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:38:19 2025 by rpki-client