This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3c3cd875-a49d-3b3a-8889-97fad3afd8cd.roa
File: 3c3cd875-a49d-3b3a-8889-97fad3afd8cd.roa (raw, json)
Hash identifier: p2xRANcxLGfDxhIUHQXPag6QeHXXVSqTGCwX4o66tgM=
Subject key identifier: CF:B4:96:04:51:B6:50:C9:14:05:6A:98:A9:2A:56:3C:8D:03:CA:04
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584BC96B0F106FBA31B0CC971300
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3c3cd875-a49d-3b3a-8889-97fad3afd8cd.roa
Signing time: Sat 08 Nov 2025 02:00:30 +0000
ROA not before: Sat 08 Nov 2025 02:00:30 +0000
ROA not after: Fri 06 Feb 2026 02:00:30 +0000
asID: 31898
IP address blocks: 161.33.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c9:6b:0f:10:6f:ba:31:b0:cc:97:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Nov 8 02:00:30 2025 GMT
Not After : Feb 6 02:00:30 2026 GMT
Subject: CN=4807b879-47d4-44e8-85a8-34fc833c5cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9e:83:a4:cd:c0:65:17:83:3a:9f:69:82:ad:
80:6f:1a:79:20:ae:18:92:a0:c0:8d:de:21:f4:dc:
f2:5d:c5:5c:c1:87:04:7c:04:41:63:b7:1a:46:ee:
18:7a:25:84:da:4b:b7:f8:bc:79:b6:a9:0e:9d:df:
8c:df:22:9b:77:2a:e0:71:24:f6:eb:ce:19:58:b5:
85:93:15:c8:8d:96:69:8d:63:30:1b:5c:06:70:27:
48:83:49:7c:7c:45:40:3f:1b:0c:bd:7a:96:3a:7b:
0e:c3:73:0b:ca:0e:ee:83:d0:7c:bc:5a:0d:1e:17:
b2:26:35:de:77:4a:75:2c:4f:69:0d:ee:1e:fc:f5:
5a:ee:84:19:66:f7:29:c1:48:5e:2c:fe:43:46:f3:
50:62:78:6d:09:34:f5:9c:4c:ae:e4:91:8f:7e:20:
c1:86:bd:fc:91:d2:f8:ce:8d:1d:8e:a5:2f:27:d0:
5b:0b:08:80:51:a6:11:5d:00:c6:4c:b3:cd:32:08:
14:32:da:67:a0:a6:0f:45:47:63:d2:ef:9d:49:a3:
93:05:50:ad:ba:d1:77:60:32:89:f6:46:85:22:c7:
15:12:3d:33:20:53:de:3b:5c:26:99:c5:ec:51:16:
e4:b3:47:ac:1b:06:e9:dd:0b:f7:d0:38:a8:78:92:
2a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B4:96:04:51:B6:50:C9:14:05:6A:98:A9:2A:56:3C:8D:03:CA:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3c3cd875-a49d-3b3a-8889-97fad3afd8cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
161.33.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:57:b6:ff:93:1a:a2:f2:30:99:ff:86:ca:3a:8c:1a:96:5d:
1f:e1:d5:17:8c:98:5c:9b:88:3b:0b:dc:64:bb:bb:f1:c4:f0:
a5:ef:1c:17:27:2f:87:ea:9e:28:23:f4:56:0d:80:c7:1e:85:
b6:f1:a8:8d:b9:32:1e:b3:e4:0b:46:3b:a4:3a:45:31:45:20:
c2:8e:cb:d9:49:d7:f8:35:b8:a9:ae:d6:ac:a3:fa:35:f8:df:
53:3b:17:d6:d6:bb:a4:06:5c:81:9b:c0:9b:c8:7c:68:c4:8d:
30:02:0b:4e:a1:cb:50:20:d0:c5:24:e1:91:9a:e2:51:bf:09:
d3:69:77:a0:4a:7d:f7:22:75:2f:1c:2e:23:65:0e:4f:0f:5c:
58:65:c0:d7:92:0e:f6:5f:27:d5:7b:82:52:1b:3d:04:2d:c5:
91:ab:d3:2c:c1:d5:a7:61:bd:0b:cf:3b:c0:7f:4d:6d:cb:30:
91:60:8d:e0:58:8d:be:39:66:ac:cf:be:7d:df:f7:87:94:6d:
44:79:62:e3:0f:ca:03:78:9f:b0:1e:97:e6:23:10:70:0e:06:
0e:db:19:9d:00:aa:57:dc:b0:f6:f2:79:d7:a7:86:3a:6b:11:
39:1c:85:44:b4:f4:0d:e7:f6:c3:55:34:fb:26:27:61:e7:0e:
5e:11:bc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:26:29 2025 by rpki-client