This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b3988b6e-7241-3e35-85d1-e068444f9dc1.roa
File: b3988b6e-7241-3e35-85d1-e068444f9dc1.roa (raw, json)
Hash identifier: Hhjp/9nKoxdUxu3LRlsYJ2lDHcIXlosQKJoh/tG2Ywg=
Subject key identifier: 33:61:49:90:02:43:A5:BF:14:4D:81:CE:7C:B4:62:3E:4D:8C:EE:DA
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584BCC35BB98EFE495817C500C00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b3988b6e-7241-3e35-85d1-e068444f9dc1.roa
Signing time: Sun 09 Nov 2025 02:00:31 +0000
ROA not before: Sun 09 Nov 2025 02:00:31 +0000
ROA not after: Sat 07 Feb 2026 02:00:31 +0000
asID: 31898
IP address blocks: 168.138.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:cc:35:bb:98:ef:e4:95:81:7c:50:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Nov 9 02:00:31 2025 GMT
Not After : Feb 7 02:00:31 2026 GMT
Subject: CN=3753ccfc-72c0-4fc7-b6df-bb3fba568884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:1f:1a:95:e8:b6:30:7c:7a:ab:f0:53:5f:
99:46:1c:d2:77:5f:ba:15:a3:9b:91:18:98:5f:af:
16:e4:55:01:5b:93:61:79:19:8e:26:c0:6a:d3:54:
eb:84:77:15:c1:4c:48:6d:d3:53:e2:d4:ed:7e:0c:
99:ea:c7:e4:a0:de:ef:94:6b:7b:22:f8:78:b7:34:
50:49:05:21:cd:38:0a:c6:a1:3b:80:16:06:62:9d:
56:86:d7:7f:e8:51:a5:76:75:47:69:60:b9:f7:fa:
8b:04:15:ae:ea:5e:85:d1:b6:8b:a9:ef:58:d1:14:
1b:b0:3f:21:36:9c:f2:ae:d8:2c:2b:17:1e:19:63:
a6:39:24:91:3c:65:76:e6:97:bd:b2:5c:d0:87:9c:
5d:c0:99:f8:1d:f2:53:41:47:72:21:f0:84:4f:0c:
d8:34:09:6e:63:ad:72:cd:62:61:73:82:23:55:e2:
fb:50:e5:f9:86:2e:ce:ce:cc:f6:81:82:aa:87:f9:
e7:a3:26:4f:f1:48:8c:a7:2c:fc:c0:92:c7:6a:0b:
67:09:9a:96:84:bc:10:71:b1:44:90:9f:2d:8e:f0:
c9:a1:14:cf:aa:25:42:13:dd:63:1c:9f:5d:4e:4f:
01:33:68:4c:71:cb:15:8b:35:45:d6:bf:9a:b7:9f:
9f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:61:49:90:02:43:A5:BF:14:4D:81:CE:7C:B4:62:3E:4D:8C:EE:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b3988b6e-7241-3e35-85d1-e068444f9dc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
168.138.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:70:b8:c6:8c:a7:37:4a:2d:60:ed:98:14:8e:92:36:eb:5e:
09:4a:bd:94:07:ce:92:53:d8:52:84:a9:2f:10:7e:66:d1:09:
2e:43:fd:3e:93:40:52:f9:8e:b7:19:7c:64:98:3c:b1:9f:ff:
f9:28:07:c5:61:48:5d:c1:da:45:93:dd:ff:c9:03:79:14:80:
fb:5c:ce:58:7d:3a:18:c9:61:d1:f6:ed:0e:ad:fc:d7:d4:af:
1f:68:a6:e8:03:e1:3e:04:72:74:a6:1e:44:9a:c0:93:c0:fd:
49:43:69:e3:7e:da:a7:4d:03:20:21:07:80:7c:1f:dc:72:85:
dc:40:0f:2f:f4:66:6d:89:4d:80:27:6f:e8:cd:24:e0:9b:6a:
93:2c:6f:fc:a4:f9:66:dd:79:45:01:17:02:20:5f:14:3a:d3:
0f:bc:e1:8d:81:5b:ec:21:0b:70:8f:a3:7d:6d:bf:d5:c2:0f:
ee:f9:9b:ef:f7:e5:09:89:91:7e:d8:95:fb:e6:c6:40:12:6d:
ac:44:01:08:c0:8f:3a:1e:9c:12:27:b2:92:3a:89:cf:9f:27:
3a:b8:85:a4:a3:23:32:9e:ae:32:40:e5:24:01:51:aa:05:16:
b7:b5:ff:74:32:43:fd:0b:ee:a6:a8:22:a5:36:6e:02:80:19:
5d:0b:6b:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvMNbuY7+SVgXxQDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MTEwOTAyMDAzMVoXDTI2MDIwNzAyMDAzMVowLzEtMCsGA1UEAxMk
Mzc1M2NjZmMtNzJjMC00ZmM3LWI2ZGYtYmIzZmJhNTY4ODg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzAfGpXotjB8eqvwU1+ZRhzSd1+6FaObkRiY
X68W5FUBW5NheRmOJsBq01TrhHcVwUxIbdNT4tTtfgyZ6sfkoN7vlGt7Ivh4tzRQ
SQUhzTgKxqE7gBYGYp1Whtd/6FGldnVHaWC59/qLBBWu6l6F0baLqe9Y0RQbsD8h
NpzyrtgsKxceGWOmOSSRPGV25pe9slzQh5xdwJn4HfJTQUdyIfCETwzYNAluY61y
zWJhc4IjVeL7UOX5hi7Ozsz2gYKqh/nnoyZP8UiMpyz8wJLHagtnCZqWhLwQcbFE
kJ8tjvDJoRTPqiVCE91jHJ9dTk8BM2hMccsVizVF1r+at5+fQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDNhSZACQ6W/FE2Bzny0Yj5NjO7aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjM5ODhiNmUtNzI0MS0z
ZTM1LTg1ZDEtZTA2ODQ0NGY5ZGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqIqgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG9wuMaMpzdKLWDtmBSOkjbrXglKvZQHzpJT2FKEqS8QfmbRCS5D/T6T
QFL5jrcZfGSYPLGf//koB8VhSF3B2kWT3f/JA3kUgPtczlh9OhjJYdH27Q6t/NfU
rx9opugD4T4EcnSmHkSawJPA/UlDaeN+2qdNAyAhB4B8H9xyhdxADy/0Zm2JTYAn
b+jNJOCbapMsb/yk+WbdeUUBFwIgXxQ60w+84Y2BW+whC3CPo31tv9XCD+75m+/3
5QmJkX7YlfvmxkASbaxEAQjAjzoenBInspI6ic+fJzq4haSjIzKerjJA5SQBUaoF
Fre1/3QyQ/0L7qaoIqU2bgKAGV0La6I=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:17:00 2025 by rpki-client