This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3849f735-42e5-3876-8aee-af094c92edbc.roa
File: 3849f735-42e5-3876-8aee-af094c92edbc.roa (raw, json)
Hash identifier: LhR8RhNpOV8JjmQTiJ/IXBny9yAHcG059Uxc/UaKH1w=
Subject key identifier: 10:12:74:B7:E9:3B:11:D4:BB:83:C8:E0:C3:F6:99:5A:76:DE:3E:9B
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584BCF0069B7FE4782283668B800
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3849f735-42e5-3876-8aee-af094c92edbc.roa
Signing time: Mon 10 Nov 2025 02:00:31 +0000
ROA not before: Mon 10 Nov 2025 02:00:31 +0000
ROA not after: Sun 08 Feb 2026 02:00:31 +0000
asID: 31898
IP address blocks: 129.159.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:cf:00:69:b7:fe:47:82:28:36:68:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Nov 10 02:00:31 2025 GMT
Not After : Feb 8 02:00:31 2026 GMT
Subject: CN=66ad6253-f278-4039-be22-6114ea65dfe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:31:88:d8:76:01:77:79:a1:48:1a:17:cf:
20:a5:20:c7:ac:17:f6:bd:96:69:cc:5e:8c:57:20:
6d:9a:b3:47:e8:53:d3:40:e5:34:f4:66:ce:22:48:
15:eb:de:cd:9a:83:45:1f:07:c1:21:49:be:d4:e4:
a6:1b:d0:c4:3c:c7:1f:ef:87:e3:24:b4:45:25:73:
2c:31:f0:68:cf:bf:74:43:d1:36:b1:cd:90:26:6f:
45:73:b0:99:a2:c0:0e:af:21:55:9d:0e:72:4d:06:
99:a6:75:f3:ce:d6:71:a5:23:72:68:7d:fc:ac:6e:
1f:a2:f1:2d:cf:f1:63:7c:a3:28:74:57:50:81:c5:
e3:85:38:a4:bc:25:ab:e7:4f:0e:71:e5:18:0d:b8:
53:ab:e2:7e:64:8e:ca:c2:b1:56:9c:92:fa:38:2c:
3c:90:99:63:5f:97:ed:7a:82:f3:58:c5:0f:4a:e2:
10:7a:e5:55:17:0f:78:e5:7d:e3:55:55:ed:ce:03:
8d:07:09:fe:6c:48:9c:b8:70:37:73:2e:25:cb:46:
b4:43:0f:14:23:82:64:73:1b:cb:b0:77:32:5f:1f:
ea:e9:69:15:54:4d:45:73:44:b8:9f:f5:d8:74:30:
5c:d3:43:d7:f5:c1:56:63:fc:e4:5a:e0:7a:b6:d4:
38:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:12:74:B7:E9:3B:11:D4:BB:83:C8:E0:C3:F6:99:5A:76:DE:3E:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3849f735-42e5-3876-8aee-af094c92edbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.159.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:2f:fe:4c:bf:c6:ad:d9:6b:78:a0:62:29:b3:d5:aa:08:84:
b3:04:66:d0:9e:b6:c3:e4:26:4b:54:5f:47:b0:f5:b9:87:0c:
bb:3b:fe:b1:ca:07:e9:30:dd:01:79:dd:bb:61:16:70:83:42:
5c:b4:5d:4d:e9:a4:43:ef:38:77:4b:ca:74:3a:07:8e:7b:1e:
3d:4d:36:11:5b:01:12:66:23:2e:91:26:67:bf:7b:a3:98:fe:
21:62:62:98:4c:70:f2:d7:be:96:57:26:57:1e:75:14:bf:ab:
c1:dd:f3:da:c7:bd:83:2b:e4:f9:20:c1:be:2c:01:67:2c:36:
73:96:90:10:2f:8e:bc:b2:56:ab:9a:cb:3b:6c:a6:1a:ce:2e:
d1:b1:01:26:20:93:8d:13:b9:4a:0d:68:35:a4:2e:88:dd:b3:
da:4a:57:37:a5:4b:c4:f5:60:2b:c2:2f:88:32:da:e2:55:91:
b6:ca:e4:6f:4f:e8:bc:6b:7e:c2:88:d0:3d:19:b6:9e:bf:6e:
e3:79:57:85:b9:85:68:fb:6c:96:97:ef:df:82:ae:8c:be:e1:
b3:c0:81:7b:52:d5:3c:62:c8:f1:51:57:cb:58:7d:2b:8f:b5:
0d:5b:d7:e6:8b:76:89:2a:49:4a:e7:99:20:44:46:6e:12:b0:
b2:6d:2c:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvPAGm3/keCKDZouAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk
NjZhZDYyNTMtZjI3OC00MDM5LWJlMjItNjExNGVhNjVkZmU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqIxiNh2AXd5oUgaF88gpSDHrBf2vZZpzF6M
VyBtmrNH6FPTQOU09GbOIkgV697NmoNFHwfBIUm+1OSmG9DEPMcf74fjJLRFJXMs
MfBoz790Q9E2sc2QJm9Fc7CZosAOryFVnQ5yTQaZpnXzztZxpSNyaH38rG4fovEt
z/FjfKModFdQgcXjhTikvCWr508OceUYDbhTq+J+ZI7KwrFWnJL6OCw8kJljX5ft
eoLzWMUPSuIQeuVVFw945X3jVVXtzgONBwn+bEicuHA3cy4ly0a0Qw8UI4JkcxvL
sHcyXx/q6WkVVE1Fc0S4n/XYdDBc00PX9cFWY/zkWuB6ttQ4ewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBASdLfpOxHUu4PI4MP2mVp23j6bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzg0OWY3MzUtNDJlNS0z
ODc2LThhZWUtYWYwOTRjOTJlZGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZ/AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABov/ky/xq3Za3igYimz1aoIhLMEZtCetsPkJktUX0ew9bmHDLs7/rHK
B+kw3QF53bthFnCDQly0XU3ppEPvOHdLynQ6B457Hj1NNhFbARJmIy6RJme/e6OY
/iFiYphMcPLXvpZXJlcedRS/q8Hd89rHvYMr5Pkgwb4sAWcsNnOWkBAvjryyVqua
yztsphrOLtGxASYgk40TuUoNaDWkLojds9pKVzelS8T1YCvCL4gy2uJVkbbK5G9P
6LxrfsKI0D0Ztp6/buN5V4W5hWj7bJaX79+Croy+4bPAgXtS1TxiyPFRV8tYfSuP
tQ1b1+aLdokqSUrnmSBERm4SsLJtLHY=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:38:05 2025 by rpki-client