This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5993029d-62c3-33fc-ac77-5f35a7139b93.roa
File: 5993029d-62c3-33fc-ac77-5f35a7139b93.roa (raw, json)
Hash identifier: pxnZCGmVxoLY+zO+21THSCUjO2NtDRAqItfT8mdRduY=
Subject key identifier: 6A:3B:E1:D4:A9:AC:F6:05:62:C9:AC:EF:75:58:F8:76:F0:5B:48:9B
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584BCD9F2D2B5B911F70A721BF20
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5993029d-62c3-33fc-ac77-5f35a7139b93.roa
Signing time: Sun 09 Nov 2025 14:00:38 +0000
ROA not before: Sun 09 Nov 2025 14:00:38 +0000
ROA not after: Sat 07 Feb 2026 14:00:38 +0000
asID: 31898
IP address blocks: 136.248.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:cd:9f:2d:2b:5b:91:1f:70:a7:21:bf:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Nov 9 14:00:38 2025 GMT
Not After : Feb 7 14:00:38 2026 GMT
Subject: CN=d6b9e58d-344a-4315-ac11-ca229f593e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:67:e3:10:43:5a:4f:7e:31:d0:4b:b9:bd:
0c:f8:ac:c8:bd:f2:50:b0:29:03:32:fa:23:f1:7e:
ba:b5:0d:05:ff:47:bc:c1:b3:78:00:34:5f:4c:83:
d5:a8:dc:79:f9:27:0e:7f:ef:8a:5b:ff:48:82:68:
65:9b:3f:fc:b9:5e:31:25:7b:1a:e7:a6:66:31:23:
0d:5d:1d:9b:65:34:20:b2:b0:7b:64:51:40:79:d4:
85:fa:56:55:72:44:07:31:f4:6d:47:49:7d:e2:54:
3f:13:f8:75:ef:2f:ef:3b:3f:10:c9:b3:34:2a:ff:
cc:da:20:76:c2:d2:f5:ef:12:c3:d0:d0:6f:07:21:
7b:47:4f:ef:60:c4:aa:01:cb:0d:1f:83:70:a1:e2:
ce:2f:e9:dc:5d:eb:45:c1:6c:bc:e5:83:b1:17:f1:
b3:e4:f1:47:22:b6:6d:c8:eb:5a:61:e4:63:58:8d:
7e:c0:0f:ba:7c:d8:80:37:8c:6c:30:39:a8:fc:24:
e9:c9:f3:84:20:92:e4:04:59:c4:bc:33:63:14:cb:
27:7e:79:43:c0:2b:87:be:0d:66:68:90:3e:1e:e5:
a0:a4:86:7e:f7:7d:e5:5f:33:f1:f4:e2:d7:58:fc:
fa:70:45:61:06:9c:2d:16:8c:03:3a:2b:af:ae:5f:
e2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3B:E1:D4:A9:AC:F6:05:62:C9:AC:EF:75:58:F8:76:F0:5B:48:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5993029d-62c3-33fc-ac77-5f35a7139b93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
136.248.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:98:a8:2c:47:9d:d6:26:d9:86:9f:33:da:0f:b3:d6:63:d3:
76:d3:66:b4:6c:d7:9f:27:c5:f9:6f:dc:6e:72:92:d7:11:7c:
d2:98:79:6e:02:07:b1:75:99:3d:e8:15:07:ec:8a:6a:3e:ad:
36:f7:92:c7:8a:3b:79:1f:e5:f7:ec:2d:75:49:c1:52:f1:a6:
a7:fb:86:6c:9d:7a:14:12:01:f5:33:1d:77:5a:0b:6e:4d:7d:
2d:94:37:a0:ba:3c:da:e3:4d:58:0b:bc:7d:71:53:75:0e:fd:
8d:06:2f:58:d4:09:10:49:2b:5c:68:cb:22:d1:75:b0:4c:3b:
9d:c7:f5:6e:8b:0e:83:2c:0e:ac:8c:64:42:3e:a9:f3:6b:92:
55:31:1e:29:c2:f5:45:7a:0b:32:85:91:08:47:61:16:db:de:
c2:c5:fb:c8:26:25:0a:5e:e9:65:0c:c9:a0:dc:74:b1:f3:12:
f4:0e:33:66:85:f0:26:f3:5c:e1:90:c6:74:64:25:45:67:7f:
5b:c5:30:84:a2:dd:a7:6b:d7:35:a3:5c:bd:a7:4b:e2:69:a2:
b0:11:ad:fa:bf:51:29:23:f9:1e:36:b5:d5:1f:9a:66:f4:be:
0d:44:e3:94:af:15:70:83:0e:0c:5b:88:af:98:8b:f4:c3:44:
48:2e:ea:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNny0rW5EfcKchvyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk
ZDZiOWU1OGQtMzQ0YS00MzE1LWFjMTEtY2EyMjlmNTkzZTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuadn4xBDWk9+MdBLub0M+KzIvfJQsCkDMvoj
8X66tQ0F/0e8wbN4ADRfTIPVqNx5+ScOf++KW/9Igmhlmz/8uV4xJXsa56ZmMSMN
XR2bZTQgsrB7ZFFAedSF+lZVckQHMfRtR0l94lQ/E/h17y/vOz8QybM0Kv/M2iB2
wtL17xLD0NBvByF7R0/vYMSqAcsNH4NwoeLOL+ncXetFwWy85YOxF/Gz5PFHIrZt
yOtaYeRjWI1+wA+6fNiAN4xsMDmo/CTpyfOEIJLkBFnEvDNjFMsnfnlDwCuHvg1m
aJA+HuWgpIZ+933lXzPx9OLXWPz6cEVhBpwtFowDOiuvrl/i+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGo74dSprPYFYsms73VY+HbwW0ibMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTk5MzAyOWQtNjJjMy0z
M2ZjLWFjNzctNWYzNWE3MTM5YjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiPhAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGqYqCxHndYm2YafM9oPs9Zj03bTZrRs158nxflv3G5yktcRfNKYeW4C
B7F1mT3oFQfsimo+rTb3kseKO3kf5ffsLXVJwVLxpqf7hmydehQSAfUzHXdaC25N
fS2UN6C6PNrjTVgLvH1xU3UO/Y0GL1jUCRBJK1xoyyLRdbBMO53H9W6LDoMsDqyM
ZEI+qfNrklUxHinC9UV6CzKFkQhHYRbb3sLF+8gmJQpe6WUMyaDcdLHzEvQOM2aF
8CbzXOGQxnRkJUVnf1vFMISi3adr1zWjXL2nS+JporARrfq/USkj+R42tdUfmmb0
vg1E45SvFXCDDgxbiK+Yi/TDREgu6uA=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:41:51 2025 by rpki-client