This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/dacb8d64-0467-305d-8bc3-2c5336579a32.roa
File: dacb8d64-0467-305d-8bc3-2c5336579a32.roa (raw, json)
Hash identifier: Q0TBTlsXjpSEY/E5zp9Vr2xxaXgck/Hk+fdtZllidHM=
Subject key identifier: 66:0F:1A:51:0A:5B:C6:A4:A7:9B:51:B8:DD:18:30:6F:8F:59:BF:EC
Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial: 010D0C9F4328584C4CA11804EB331063351F5600
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/dacb8d64-0467-305d-8bc3-2c5336579a32.roa
Signing time: Thu 25 Dec 2025 02:00:31 +0000
ROA not before: Thu 25 Dec 2025 02:00:31 +0000
ROA not after: Wed 25 Mar 2026 01:00:31 +0000
asID: 29016
IP address blocks: 159.182.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Jan 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4c:a1:18:04:eb:33:10:63:35:1f:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Validity
Not Before: Dec 25 02:00:31 2025 GMT
Not After : Mar 25 01:00:31 2026 GMT
Subject: CN=9f37bc39-760a-44bc-abc9-2602e9faf5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7c:c8:ad:5e:52:f6:ca:08:9f:cc:3d:f3:17:
1b:ee:06:25:a5:8a:31:04:28:ca:d3:6d:31:78:55:
42:2a:55:40:38:a5:6d:12:1c:30:78:b0:f7:b8:8a:
aa:3f:55:5e:68:0e:a5:9c:46:bf:de:bb:4a:d7:25:
14:7d:05:ba:7a:37:08:bb:9f:f1:36:b5:19:0a:af:
1e:b5:69:5b:3e:b9:d4:e3:da:51:e0:06:97:22:49:
6a:ef:3d:47:59:3b:08:06:32:20:4e:8e:97:82:c0:
cf:0b:6d:ad:28:c5:07:52:a2:c2:c4:dc:e4:94:c0:
da:92:29:cc:19:df:68:d0:d0:08:18:44:5f:80:45:
5c:cd:d6:cf:e8:c0:bb:df:c4:7e:2a:c0:ee:d6:33:
b6:ef:de:3e:3f:e5:89:f1:e8:b2:b0:9d:a1:49:a3:
94:00:a0:6a:18:e9:a0:46:06:3f:ea:49:b4:53:5c:
49:e5:a6:fe:64:f2:4b:f0:41:a7:41:db:0b:70:9d:
12:b0:c1:04:6a:b0:54:71:2c:55:d4:fa:e0:f1:96:
02:64:26:fc:e5:37:b8:d3:6d:e8:c4:6f:b9:4c:33:
1a:50:92:33:de:b3:21:fe:14:d9:04:50:65:e6:9e:
0d:5b:4b:3a:97:3d:e3:21:6f:aa:be:8d:ce:30:16:
17:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0F:1A:51:0A:5B:C6:A4:A7:9B:51:B8:DD:18:30:6F:8F:59:BF:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/dacb8d64-0467-305d-8bc3-2c5336579a32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl
X509v3 Authority Key Identifier:
keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
sbgp-ipAddrBlock: critical
IPv4:
159.182.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:63:37:35:62:87:60:aa:58:32:bc:8b:77:fb:c5:8b:1f:61:
e2:b4:ba:38:2e:07:14:57:80:76:85:a2:9c:c7:54:6f:e0:c1:
60:73:1e:fb:38:c2:71:fe:ce:b2:0b:70:ac:72:b6:ce:21:52:
f9:0f:43:f4:a2:d9:0e:93:71:76:64:a4:59:c0:f7:47:fb:99:
02:97:79:b5:2f:79:0b:f6:33:58:b3:00:48:25:52:e5:91:9a:
66:45:f2:47:0c:a1:2a:6f:08:05:c7:4a:d4:91:e2:1f:b1:8b:
bf:d0:a1:34:7a:f8:a9:bf:c5:f6:00:a6:9b:88:1d:93:4f:bf:
bc:ba:72:e0:56:59:e2:03:f0:d1:3c:32:68:8b:77:bc:58:a8:
22:e3:68:eb:59:6f:79:69:10:55:49:61:86:13:76:d8:39:7f:
4f:a2:d2:8b:53:dd:2a:a2:46:91:92:66:30:a8:20:b8:83:b6:
29:72:63:54:58:84:26:30:45:90:c2:26:de:61:a2:29:06:b6:
72:b0:c6:02:d7:9a:73:ae:26:0a:0e:a4:3d:4d:4f:b6:3f:01:
d6:e0:e2:2e:65:47:6e:59:1e:10:bb:47:55:78:59:6e:8d:3b:
13:ee:88:a0:8f:55:90:f8:09:c1:1f:ca:1b:74:35:9c:52:66:
41:bf:7c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 05:01:33 2026 by rpki-client