This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a09ffbca-6cf8-390d-b04b-f294f2de6714.roa
File: a09ffbca-6cf8-390d-b04b-f294f2de6714.roa (raw, json)
Hash identifier: 8qAHn1cCPK9uvzcOsidFNTeyyQiLl4zciddGhj+g+QQ=
Subject key identifier: 8A:E9:43:1F:FF:B4:FE:5D:C5:B8:06:71:FD:8A:52:10:E8:B7:9F:E3
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584BDFC094CCCC5D7CA8D06B8580
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a09ffbca-6cf8-390d-b04b-f294f2de6714.roa
Signing time: Sun 16 Nov 2025 02:00:31 +0000
ROA not before: Sun 16 Nov 2025 02:00:31 +0000
ROA not after: Sat 14 Feb 2026 02:00:31 +0000
asID: 31898
IP address blocks: 162.88.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:df:c0:94:cc:cc:5d:7c:a8:d0:6b:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Nov 16 02:00:31 2025 GMT
Not After : Feb 14 02:00:31 2026 GMT
Subject: CN=7ddf38d5-09ac-4f27-a38e-0f03fa0481c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bd:4a:ce:1f:8c:61:77:91:46:8c:87:88:2f:
30:99:28:a3:75:8d:cc:17:30:0b:a2:8c:1f:a5:ba:
2d:08:03:e2:85:d1:5d:88:a2:fd:74:0c:64:74:c4:
ed:ba:5c:6f:c3:bc:a5:74:eb:bc:07:d2:68:c2:26:
c2:13:7e:74:11:13:19:c3:65:8e:17:c6:a9:84:aa:
57:43:a8:19:d4:30:b1:10:38:03:a9:8b:de:73:a4:
12:01:55:6c:86:6b:3c:d8:eb:49:d8:5d:24:e5:1d:
93:99:d1:35:73:b5:57:dd:72:74:75:58:ad:af:0d:
ab:92:00:09:83:f7:73:32:ca:67:d0:01:ad:74:f3:
cd:db:bb:f7:66:52:be:38:fb:b5:51:6d:e6:b2:88:
e2:ad:c4:99:1d:e9:84:d8:4b:44:2c:41:d6:59:e3:
14:ba:d1:2d:e8:7c:ac:af:86:39:f2:28:97:14:bb:
dd:c5:bf:8a:61:0e:40:e1:21:58:6b:2c:f1:87:ab:
ed:34:50:81:28:1c:e4:c0:ba:93:73:e2:8b:a4:a4:
36:6b:2b:a4:83:46:73:73:63:f5:39:e1:eb:b0:b7:
0d:df:ee:85:79:27:37:09:53:83:06:6b:bb:45:39:
c4:d0:0f:b8:ca:6a:64:22:d1:83:74:e0:c6:76:a6:
e2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E9:43:1F:FF:B4:FE:5D:C5:B8:06:71:FD:8A:52:10:E8:B7:9F:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a09ffbca-6cf8-390d-b04b-f294f2de6714.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
162.88.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:ae:bb:aa:a3:e5:76:1e:b6:64:62:14:8f:0e:83:21:77:2f:
46:0c:01:b9:9a:18:45:20:2f:78:01:ec:4d:1e:b5:37:78:7b:
3a:3e:f3:91:fe:92:bb:58:b8:98:d5:fe:13:fe:fb:cc:6e:58:
2b:c1:4e:83:0e:57:28:13:a0:36:67:55:62:5d:f3:2f:bd:50:
0e:21:f0:52:de:d7:9a:96:1f:48:a4:47:78:39:f7:df:95:41:
ea:7c:27:d5:cd:21:d6:70:7a:cb:ef:8f:25:e9:8c:5b:d2:b8:
86:b7:4b:96:98:2d:74:2c:05:a4:56:7a:63:58:cc:76:63:28:
4b:97:6e:eb:14:24:c8:48:e3:8c:d2:7e:b3:26:a1:89:65:55:
4d:e2:b0:d2:56:46:0c:06:aa:a2:c6:bd:e5:2e:40:48:ab:9c:
bf:ad:d5:e4:0c:ce:b4:ce:fa:9f:83:d2:8b:d0:43:41:5d:be:
1d:ef:6f:dd:28:38:92:9e:53:45:93:f6:f7:40:9a:f8:33:38:
51:35:42:93:eb:de:85:a5:87:39:36:f6:97:31:23:87:b0:39:
a5:6a:90:db:05:d8:ed:c1:9b:d4:05:d1:6f:63:30:e7:3e:c6:
b3:12:1b:e3:fe:7f:96:d9:ac:25:80:c6:ae:97:5e:df:9b:24:
e0:e1:45:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvfwJTMzF18qNBrhYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MTExNjAyMDAzMVoXDTI2MDIxNDAyMDAzMVowLzEtMCsGA1UEAxMk
N2RkZjM4ZDUtMDlhYy00ZjI3LWEzOGUtMGYwM2ZhMDQ4MWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi71Kzh+MYXeRRoyHiC8wmSijdY3MFzALoowf
pbotCAPihdFdiKL9dAxkdMTtulxvw7yldOu8B9JowibCE350ERMZw2WOF8aphKpX
Q6gZ1DCxEDgDqYvec6QSAVVshms82OtJ2F0k5R2TmdE1c7VX3XJ0dVitrw2rkgAJ
g/dzMspn0AGtdPPN27v3ZlK+OPu1UW3msojircSZHemE2EtELEHWWeMUutEt6Hys
r4Y58iiXFLvdxb+KYQ5A4SFYayzxh6vtNFCBKBzkwLqTc+KLpKQ2ayukg0Zzc2P1
OeHrsLcN3+6FeSc3CVODBmu7RTnE0A+4ympkItGDdODGdqbiBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIrpQx//tP5dxbgGcf2KUhDot5/jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTA5ZmZiY2EtNmNmOC0z
OTBkLWIwNGItZjI5NGYyZGU2NzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAolgEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGyuu6qj5XYetmRiFI8OgyF3L0YMAbmaGEUgL3gB7E0etTd4ezo+85H+
krtYuJjV/hP++8xuWCvBToMOVygToDZnVWJd8y+9UA4h8FLe15qWH0ikR3g599+V
Qep8J9XNIdZwesvvjyXpjFvSuIa3S5aYLXQsBaRWemNYzHZjKEuXbusUJMhI44zS
frMmoYllVU3isNJWRgwGqqLGveUuQEirnL+t1eQMzrTO+p+D0ovQQ0Fdvh3vb90o
OJKeU0WT9vdAmvgzOFE1QpPr3oWlhzk29pcxI4ewOaVqkNsF2O3Bm9QF0W9jMOc+
xrMSG+P+f5bZrCWAxq6XXt+bJODhRT4=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:39:05 2025 by rpki-client