This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c333d3c0-8247-33a6-8b3b-bb2705e38f3b.roa
File: c333d3c0-8247-33a6-8b3b-bb2705e38f3b.roa (raw, json)
Hash identifier: BgqWjFqxmyTU6VSG00ntoDCjhlDlLd+sHQ5JlVZ/bWE=
Subject key identifier: C9:60:86:80:6E:00:9C:91:0A:D7:F9:30:14:BC:F6:26:03:56:A6:1E
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584BCF006A75B3900429A3576FC0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c333d3c0-8247-33a6-8b3b-bb2705e38f3b.roa
Signing time: Mon 10 Nov 2025 02:00:31 +0000
ROA not before: Mon 10 Nov 2025 02:00:31 +0000
ROA not after: Sun 08 Feb 2026 02:00:31 +0000
asID: 31898
IP address blocks: 130.61.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:cf:00:6a:75:b3:90:04:29:a3:57:6f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Nov 10 02:00:31 2025 GMT
Not After : Feb 8 02:00:31 2026 GMT
Subject: CN=ae02f966-a121-4055-9967-5f439a6be09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:61:1a:fb:51:2a:9c:f0:3b:1f:28:67:32:e8:
b2:9d:d8:87:00:f0:94:1c:c9:01:20:98:8e:69:8d:
96:58:85:00:df:55:11:5c:b8:d1:78:76:bd:50:75:
e3:fd:67:ab:bc:3a:a1:b5:84:ee:dd:79:55:04:1b:
aa:a8:7b:99:5e:17:45:94:9b:8a:24:b2:bf:fe:3c:
8a:76:ed:15:d2:8c:29:52:bc:fa:bd:39:05:0a:8a:
be:ee:21:b5:d0:49:ea:ee:32:90:3f:a4:22:59:0c:
1b:bd:c8:87:97:2f:7c:08:0a:d5:cc:a5:75:22:82:
c9:ab:e1:65:4b:21:25:63:b5:f0:9b:7b:35:fd:32:
2d:bb:fc:a2:ea:b8:82:61:8f:cf:2b:78:ba:47:e2:
a3:9b:f1:15:58:e8:37:00:1b:67:db:1b:df:4b:b2:
cb:51:ba:5a:c0:fc:32:57:37:11:ba:1d:83:37:3b:
7f:32:55:84:40:d0:67:8d:f1:60:4d:dc:46:ed:2a:
c7:ec:4b:fe:3d:66:00:6d:8c:43:02:94:80:28:be:
ce:69:6b:8c:f2:3c:7a:0d:91:59:a6:89:f1:99:51:
6b:8a:d8:bf:02:46:f9:d9:bc:e3:db:f5:74:5a:49:
8d:d3:b1:d8:a9:09:4c:fe:31:81:dd:4e:4f:a4:85:
f6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:60:86:80:6E:00:9C:91:0A:D7:F9:30:14:BC:F6:26:03:56:A6:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c333d3c0-8247-33a6-8b3b-bb2705e38f3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
130.61.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:87:cc:1b:22:3b:11:88:4e:f8:b0:90:8e:5c:d2:24:f7:db:
89:2e:1d:1e:dd:8a:26:b8:e0:b2:4d:ef:41:ed:c7:45:78:e6:
d9:de:35:2a:f9:d6:b4:29:67:95:b6:c4:98:50:e8:aa:fd:bc:
26:5c:77:6b:07:11:01:c3:b2:3c:ad:4f:ab:fe:55:b5:37:7c:
9c:0f:d2:4e:5c:63:68:9a:b6:e6:67:ea:c2:fd:5e:8a:6c:f8:
0e:dd:d4:19:40:21:49:c3:f9:39:32:e0:57:99:d0:ee:5a:a0:
02:0f:2b:09:27:ad:96:42:8a:fc:1a:06:b3:a0:d8:c6:6b:05:
8c:99:1b:f9:e3:fe:b5:a9:de:a4:51:f8:a1:5e:dc:68:6d:23:
57:d0:5e:d1:d8:e2:5c:d1:cd:59:a5:4a:54:57:60:f7:94:0e:
8b:96:a5:b8:2d:14:e3:f3:a2:1e:0b:83:5f:c6:15:48:2a:d9:
b3:7f:9e:8d:a6:ee:47:cf:0e:0b:73:4e:14:a9:1f:8f:0c:90:
78:f1:ff:8e:ea:55:7f:3c:d1:71:d7:e0:c9:cb:8b:16:57:4b:
fd:68:23:38:a9:e7:a3:58:41:47:81:84:bc:04:c7:77:cb:d9:
d8:6f:94:01:1d:7d:48:13:3c:d1:84:8d:f5:c8:a6:5f:66:35:
c8:f8:01:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:43:33 2025 by rpki-client