This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa
File: 891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa (raw, json)
Hash identifier: 7ukUvoaoRZFVVgrm9VTEMlI0AMG6JT6vj2TRR2yfgrU=
Subject key identifier: 6D:FF:D4:DA:FF:9A:62:DA:EE:39:FE:4D:9D:8C:80:05:00:64:7D:CC
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F4328584C321B9F9C7D90F04EB99EA180
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa
Signing time: Mon 15 Dec 2025 14:00:38 +0000
ROA not before: Mon 15 Dec 2025 14:00:38 +0000
ROA not after: Sun 15 Mar 2026 13:00:38 +0000
asID: 21949
IP address blocks: 199.45.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:32:1b:9f:9c:7d:90:f0:4e:b9:9e:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Dec 15 14:00:38 2025 GMT
Not After : Mar 15 13:00:38 2026 GMT
Subject: CN=dc8b1809-ea82-4dc0-959b-9d4363a4e4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:e8:b2:ec:1d:f3:26:c8:07:7d:73:6d:62:
8a:89:30:a5:cd:16:3b:48:e5:ae:b7:b0:7a:26:de:
7f:08:de:d7:72:18:22:96:f6:66:c2:58:e4:88:9b:
f7:72:2c:ab:e7:e5:a9:45:fe:13:d3:94:52:95:e9:
51:bf:4c:71:6c:52:40:ed:0b:b1:f3:ff:f7:95:3f:
ac:3e:8b:dc:89:28:dc:51:23:16:d3:8d:dd:8b:4e:
0d:07:6c:25:53:73:4e:67:6a:c6:b8:a0:b7:1c:c4:
91:94:8b:3b:df:7f:03:7f:e7:32:0c:6a:79:da:5f:
be:f6:77:8a:d6:19:ec:64:2f:a2:8b:f4:f0:f1:93:
f6:29:c3:3d:f7:9f:d8:d5:3e:38:70:3d:ba:26:ed:
b9:57:51:50:5b:dd:d9:de:50:23:e4:b7:52:aa:dd:
ec:1a:02:44:11:80:a3:d8:cc:2f:e6:65:26:70:53:
90:51:98:6a:b6:64:cc:19:5a:07:b5:eb:17:3a:28:
05:9b:6c:83:73:36:91:8a:51:3f:a9:91:f2:d2:6c:
b4:f6:34:17:b7:ae:c0:b2:49:59:14:4f:d1:85:c8:
71:fb:03:e7:7f:37:1f:e5:99:12:a1:cb:db:b4:44:
29:c3:93:f6:d0:30:cc:47:90:0f:92:23:88:49:e5:
fd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FF:D4:DA:FF:9A:62:DA:EE:39:FE:4D:9D:8C:80:05:00:64:7D:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.45.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:93:14:95:2f:1b:c9:c2:aa:cf:31:a6:5d:50:07:0d:87:ff:
05:dd:55:3b:c2:bc:06:6f:d2:0a:76:0f:92:42:a0:47:e8:47:
4c:67:18:fa:45:7e:a3:5f:07:2f:59:f6:df:03:c3:64:d4:38:
cf:e1:1c:0c:a8:11:a4:bb:e3:e4:ab:1b:f9:2d:e1:62:14:ea:
f1:90:12:37:67:20:dd:ae:9a:22:0d:1d:76:a4:90:67:db:1c:
be:81:24:b2:df:b1:8f:14:8c:0b:e8:10:43:7e:e5:c5:cc:f7:
90:76:57:d5:48:12:42:5e:e5:86:d5:5c:48:68:42:63:b2:30:
0f:93:a3:ea:5c:a8:6d:90:4c:cf:e2:5a:0a:42:4a:20:b5:59:
80:2b:f0:3d:f5:d4:80:45:4b:ab:90:e5:91:4e:1b:d9:62:b0:
24:57:7f:47:a2:1f:ca:89:cc:24:ba:1a:01:af:54:8e:ba:0f:
fe:f5:d2:0c:2b:90:53:21:bb:cd:0c:d2:5d:e1:78:8d:9d:ef:
aa:8f:d9:2b:22:60:26:52:6d:77:2e:3e:9c:d5:e1:53:b6:ef:
96:58:03:29:87:d8:fc:67:3f:fb:17:3b:76:f4:18:55:48:5c:
ab:a7:05:11:18:46:5a:a6:eb:60:36:30:02:57:72:b9:2b:86:
1d:89:83:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwyG5+cfZDwTrmeoYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx
YzViMB4XDTI1MTIxNTE0MDAzOFoXDTI2MDMxNTEzMDAzOFowLzEtMCsGA1UEAxMk
ZGM4YjE4MDktZWE4Mi00ZGMwLTk1OWItOWQ0MzYzYTRlNGE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsjosuwd8ybIB31zbWKKiTClzRY7SOWut7B6
Jt5/CN7XchgilvZmwljkiJv3ciyr5+WpRf4T05RSlelRv0xxbFJA7Qux8//3lT+s
PovciSjcUSMW043di04NB2wlU3NOZ2rGuKC3HMSRlIs7338Df+cyDGp52l++9neK
1hnsZC+ii/Tw8ZP2KcM995/Y1T44cD26Ju25V1FQW93Z3lAj5LdSqt3sGgJEEYCj
2Mwv5mUmcFOQUZhqtmTMGVoHtesXOigFm2yDczaRilE/qZHy0my09jQXt67AsklZ
FE/Rhchx+wPnfzcf5ZkSocvbtEQpw5P20DDMR5APkiOISeX97wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG3/1Nr/mmLa7jn+TZ2MgAUAZH3MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx
NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvODkxNzAwYzEtYjNmNi0z
MDk5LTlmNWYtNzhiYTBiMjdkMzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx
MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk
MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk
MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxy2QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADaTFJUvG8nCqs8xpl1QBw2H/wXdVTvCvAZv0gp2D5JCoEfoR0xnGPpF
fqNfBy9Z9t8Dw2TUOM/hHAyoEaS74+SrG/kt4WIU6vGQEjdnIN2umiINHXakkGfb
HL6BJLLfsY8UjAvoEEN+5cXM95B2V9VIEkJe5YbVXEhoQmOyMA+To+pcqG2QTM/i
WgpCSiC1WYAr8D311IBFS6uQ5ZFOG9lisCRXf0eiH8qJzCS6GgGvVI66D/710gwr
kFMhu80M0l3heI2d76qP2SsiYCZSbXcuPpzV4VO275ZYAymH2PxnP/sXO3b0GFVI
XKunBREYRlqm62A2MAJXcrkrhh2Jg1A=
-----END CERTIFICATE-----
Generated at Thu Dec 18 08:52:16 2025 by rpki-client