This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/be5afb24-ad07-3150-835e-21c7285740e8.roa
File: be5afb24-ad07-3150-835e-21c7285740e8.roa (raw, json)
Hash identifier: /RYPsV/mMYFpbt1+xPGeeA1UDQOzmUKupsWevbUXqKo=
Subject key identifier: B5:D6:CF:CD:66:E5:B5:F7:31:9E:35:A1:4D:56:25:AA:97:A8:65:F5
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584BCD9F30729174A866E5AE4780
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/be5afb24-ad07-3150-835e-21c7285740e8.roa
Signing time: Sun 09 Nov 2025 14:00:38 +0000
ROA not before: Sun 09 Nov 2025 14:00:38 +0000
ROA not after: Sat 07 Feb 2026 14:00:38 +0000
asID: 31898
IP address blocks: 149.130.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:cd:9f:30:72:91:74:a8:66:e5:ae:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Nov 9 14:00:38 2025 GMT
Not After : Feb 7 14:00:38 2026 GMT
Subject: CN=5e071ecf-aeb0-4c0b-a377-225187e95afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:09:15:e0:01:97:36:b3:9b:db:fd:1e:78:e4:
6d:fd:99:6f:83:9a:48:b7:8f:ff:8f:d7:84:da:47:
9e:5a:24:71:33:51:ed:c6:30:0e:af:19:d5:bb:fb:
7b:7b:a1:7d:b8:0b:6b:d8:94:36:45:b4:f2:0a:25:
7e:be:bb:61:b2:fc:e3:4f:b9:ee:0c:db:9a:32:8c:
18:8f:de:4e:00:28:b6:e1:44:32:b6:08:de:84:21:
4c:cf:14:66:7d:fd:4d:8c:67:2c:d0:79:27:ce:2e:
2c:d5:5b:31:59:87:1c:68:45:ea:af:b4:bf:e4:e1:
0d:9c:0f:35:5f:1e:5c:1a:fb:ea:b1:27:41:6c:dc:
97:9a:1a:d2:58:72:63:3a:46:d6:21:be:8c:53:c2:
e5:b2:0b:04:1a:1d:ab:81:93:e3:f8:5f:fc:49:5d:
ad:fe:09:35:cb:d0:2a:e5:c8:15:c5:24:25:8b:35:
78:ac:67:a6:6d:69:2d:81:80:0f:92:a4:41:00:90:
39:7b:df:8f:b6:89:44:87:da:c2:08:37:96:20:8b:
b9:58:de:95:17:08:88:4b:d8:a6:bb:75:fa:98:cd:
7d:cf:b0:4d:a5:53:0d:f6:df:e1:1d:3c:03:64:ab:
b9:71:4d:07:01:63:0c:ea:28:44:ca:a7:e5:4e:43:
0a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D6:CF:CD:66:E5:B5:F7:31:9E:35:A1:4D:56:25:AA:97:A8:65:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/be5afb24-ad07-3150-835e-21c7285740e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
149.130.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:10:bc:15:b5:7c:65:e2:8a:48:f8:76:76:15:b3:13:86:9c:
6e:f5:41:41:3f:cf:82:a3:82:20:76:ef:64:27:b4:fe:53:57:
8a:8f:8f:6c:76:05:40:d6:34:eb:ad:9b:92:b4:b8:47:c1:00:
a6:83:d8:ee:eb:0d:5a:f5:0b:e7:8e:f6:15:42:ae:e6:23:80:
0a:01:62:bc:5c:75:15:0a:2f:0f:ee:f6:16:4b:b5:22:84:95:
81:52:8a:56:22:9b:0d:1a:91:cb:a0:ab:2f:12:59:76:07:b4:
f6:b6:a5:51:cf:2d:55:e6:ec:8d:9c:f2:59:74:a2:08:06:a7:
f3:90:1a:41:3c:bd:48:d9:73:c8:e4:5b:ef:63:e8:d4:0f:e6:
54:d7:89:1a:76:2c:e9:0f:73:c6:77:84:7e:06:24:4a:41:6a:
d2:13:7f:60:be:5f:7e:77:68:ae:38:bc:23:1e:41:24:70:9c:
1f:71:df:f9:b8:c8:00:fe:dc:7e:08:d7:46:1f:2a:78:e8:72:
b5:a6:d1:90:0b:80:57:9e:99:83:72:9b:41:0c:3a:dc:5a:4f:
cd:fb:86:7f:94:8f:57:a3:95:3c:83:69:26:21:68:92:d1:99:
8b:04:47:0d:8d:cb:70:8e:07:a0:01:33:2b:63:34:12:a4:8b:
e4:5e:52:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:20:08 2025 by rpki-client