This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffb9b481-624e-3816-bcf7-b6672f544696.roa
File: ffb9b481-624e-3816-bcf7-b6672f544696.roa (raw, json)
Hash identifier: IwKt2T3EwDh24dZowi5GvIG3W6xJ/K78md+qFr+THcQ=
Subject key identifier: 96:07:8C:AD:25:C5:72:39:84:EE:4A:D3:3F:4E:26:84:0D:70:6C:A9
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584BDA2B2E2B1960258C16DA5280
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffb9b481-624e-3816-bcf7-b6672f544696.roa
Signing time: Fri 14 Nov 2025 02:00:30 +0000
ROA not before: Fri 14 Nov 2025 02:00:30 +0000
ROA not after: Thu 12 Feb 2026 02:00:30 +0000
asID: 31898
IP address blocks: 140.91.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:da:2b:2e:2b:19:60:25:8c:16:da:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Nov 14 02:00:30 2025 GMT
Not After : Feb 12 02:00:30 2026 GMT
Subject: CN=9ecb1940-b459-44ce-882a-3c08953fbdcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b5:85:93:e7:cf:2f:0e:4a:42:35:3f:da:76:
14:6c:14:b9:60:d0:86:61:6c:f1:87:0f:f8:b4:00:
80:b3:2f:ed:65:bb:49:62:90:23:c6:1b:61:f5:3e:
62:88:bd:71:33:9c:9b:17:db:f5:b1:3d:be:c3:dc:
af:d6:86:54:09:54:6a:0d:a7:9a:ac:d7:60:43:41:
fc:de:39:9b:e2:22:7c:28:a1:25:8d:ae:f1:29:42:
ed:0e:82:4b:93:9a:09:77:3d:55:22:79:f1:c5:94:
5a:f0:14:da:73:77:40:43:38:e1:4a:ad:97:5d:7b:
a0:a7:31:fb:c3:4b:c0:09:34:e4:43:04:bf:ef:32:
29:57:d4:d0:42:4d:be:f1:ee:87:b1:af:5b:59:be:
95:f7:f8:b4:eb:a4:3c:15:72:1a:59:6a:6c:7b:b8:
ff:4e:c1:cd:95:78:3b:c2:b4:e7:95:43:c5:38:5e:
41:ff:8f:39:06:c0:a7:97:cb:c2:7e:39:f4:c9:2e:
6e:5a:ff:32:a7:66:eb:1a:a2:d6:57:98:50:b6:c1:
d4:70:0c:50:03:8c:2c:f0:ed:48:ec:57:c8:78:cb:
90:70:9d:d3:49:d4:94:00:31:df:43:dd:57:d3:54:
81:6f:4d:d3:f5:36:99:ec:78:db:1f:b4:fc:b2:39:
53:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:07:8C:AD:25:C5:72:39:84:EE:4A:D3:3F:4E:26:84:0D:70:6C:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffb9b481-624e-3816-bcf7-b6672f544696.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
140.91.84.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:a7:c3:82:37:03:56:ee:26:93:2e:b2:20:70:6d:54:54:11:
bc:f5:c3:06:a2:38:85:07:7b:3f:63:06:0a:af:94:21:8c:95:
2b:f0:88:03:63:1e:39:85:74:1e:4c:16:05:b0:70:ef:97:b1:
c4:d9:3b:fc:19:1d:32:d4:94:b5:66:74:6a:01:a3:8c:2e:b7:
af:87:f3:5a:11:fb:81:f0:57:25:27:e6:cd:c6:d5:95:39:ba:
5d:38:a1:85:a6:3d:fd:40:5c:eb:bc:e2:fb:86:d8:15:b2:c8:
29:84:c1:29:2a:ed:b8:61:41:df:13:ba:57:6e:34:66:01:5f:
55:1b:e4:3a:04:ff:0c:b5:4e:3e:72:18:b1:9b:ca:df:51:cb:
43:d6:93:d3:7d:c7:85:68:8e:d8:39:bc:3a:13:9a:c2:50:90:
5e:fd:2f:f4:07:63:51:d4:dc:35:ad:bc:7c:29:b3:7d:97:0a:
18:67:c6:51:77:cf:80:a9:ae:0c:de:ad:46:75:57:e1:cb:2e:
4f:93:3f:b7:c0:01:8e:15:89:52:7e:fc:db:a6:94:c1:3c:e5:
a5:65:17:87:f8:f8:4d:eb:71:9b:ed:e0:19:fa:b1:9d:f1:01:
f7:8a:f6:c0:8f:3d:a8:d5:1f:f2:13:75:cb:a1:28:26:a3:d3:
21:33:e5:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvaKy4rGWAljBbaUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MTExNDAyMDAzMFoXDTI2MDIxMjAyMDAzMFowLzEtMCsGA1UEAxMk
OWVjYjE5NDAtYjQ1OS00NGNlLTg4MmEtM2MwODk1M2ZiZGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLWFk+fPLw5KQjU/2nYUbBS5YNCGYWzxhw/4
tACAsy/tZbtJYpAjxhth9T5iiL1xM5ybF9v1sT2+w9yv1oZUCVRqDaearNdgQ0H8
3jmb4iJ8KKElja7xKULtDoJLk5oJdz1VInnxxZRa8BTac3dAQzjhSq2XXXugpzH7
w0vACTTkQwS/7zIpV9TQQk2+8e6Hsa9bWb6V9/i066Q8FXIaWWpse7j/TsHNlXg7
wrTnlUPFOF5B/485BsCnl8vCfjn0yS5uWv8yp2brGqLWV5hQtsHUcAxQA4ws8O1I
7FfIeMuQcJ3TSdSUADHfQ91X01SBb03T9TaZ7HjbH7T8sjlTtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJYHjK0lxXI5hO5K0z9OJoQNcGypMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmZiOWI0ODEtNjI0ZS0z
ODE2LWJjZjctYjY2NzJmNTQ0Njk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFtUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFunw4I3A1buJpMusiBwbVRUEbz1wwaiOIUHez9jBgqvlCGMlSvwiANj
HjmFdB5MFgWwcO+XscTZO/wZHTLUlLVmdGoBo4wut6+H81oR+4HwVyUn5s3G1ZU5
ul04oYWmPf1AXOu84vuG2BWyyCmEwSkq7bhhQd8TulduNGYBX1Ub5DoE/wy1Tj5y
GLGbyt9Ry0PWk9N9x4Vojtg5vDoTmsJQkF79L/QHY1HU3DWtvHwps32XChhnxlF3
z4CprgzerUZ1V+HLLk+TP7fAAY4ViVJ+/NumlME85aVlF4f4+E3rcZvt4Bn6sZ3x
AfeK9sCPPajVH/ITdcuhKCaj0yEz5fQ=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:37:42 2025 by rpki-client