This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3aba5f8d-788d-36a8-aa9c-8bc2b6476fc4.roa
File: 3aba5f8d-788d-36a8-aa9c-8bc2b6476fc4.roa (raw, json)
Hash identifier: C2DXbtdpmysgBKNA8BVSStaTafxGEGCOZNJeqRJ2zfo=
Subject key identifier: 46:28:F3:33:69:F3:DF:21:48:23:08:4F:D5:C5:BE:90:74:DB:2B:7D
Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial: 010D0C9F4328584C3EABAF450413E4448C971A80
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3aba5f8d-788d-36a8-aa9c-8bc2b6476fc4.roa
Signing time: Sat 20 Dec 2025 02:00:31 +0000
ROA not before: Sat 20 Dec 2025 02:00:31 +0000
ROA not after: Fri 20 Mar 2026 01:00:31 +0000
asID: 10794
IP address blocks: 171.159.120.0/21 maxlen: 21
171.159.120.0/24 maxlen: 24
171.159.121.0/24 maxlen: 24
171.159.122.0/24 maxlen: 24
171.159.123.0/24 maxlen: 24
171.159.124.0/24 maxlen: 24
171.159.125.0/24 maxlen: 24
171.159.126.0/24 maxlen: 24
171.159.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 23 Dec 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:3e:ab:af:45:04:13:e4:44:8c:97:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Validity
Not Before: Dec 20 02:00:31 2025 GMT
Not After : Mar 20 01:00:31 2026 GMT
Subject: CN=267b551a-75fe-4c37-9e54-a791c5faf2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:36:0e:93:d8:58:a0:1e:a9:b3:66:d7:a9:7b:
cd:aa:1f:28:3d:b9:63:1c:6f:f7:08:23:8a:70:2d:
2e:10:d8:07:1e:f0:ac:71:6a:7a:f6:97:bd:3d:cf:
a7:39:ac:6c:98:dd:45:03:27:1d:72:6e:6a:cd:67:
2a:19:aa:9e:db:ef:a1:5e:5c:7d:94:c3:aa:4f:d1:
e2:5b:0c:f1:3f:c6:c3:9e:f9:32:1c:75:f3:fb:1a:
97:40:21:71:ad:88:58:56:87:e6:23:c7:c5:3c:5b:
d9:1f:6f:4d:9b:f7:f7:f0:f2:32:68:2a:3d:39:f0:
7d:43:00:20:dc:ef:04:94:df:26:71:03:d4:52:26:
5b:31:c5:d1:84:dd:81:4b:6b:20:5a:9f:26:13:f8:
50:a5:bc:a0:a8:36:48:15:ca:f6:f4:c6:fc:80:9e:
91:ca:2b:a9:d7:23:4c:4c:62:72:0b:eb:47:7f:9d:
67:eb:78:73:ee:1a:a5:7a:43:1f:ea:a5:e9:e4:1c:
90:e1:10:7c:45:9c:1c:b7:40:66:39:22:72:5b:f2:
79:c9:05:97:45:8d:19:87:59:37:0c:b8:5e:48:68:
9c:42:34:a3:12:f3:7f:0f:77:3a:3f:f8:99:86:27:
9e:bc:c3:d9:80:a5:28:49:c6:8f:9f:cc:a1:40:0c:
ce:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:28:F3:33:69:F3:DF:21:48:23:08:4F:D5:C5:BE:90:74:DB:2B:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3aba5f8d-788d-36a8-aa9c-8bc2b6476fc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
X509v3 Authority Key Identifier:
keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
sbgp-ipAddrBlock: critical
IPv4:
171.159.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:75:b8:55:77:38:fa:23:75:18:32:c1:36:4e:ba:23:81:49:
bc:c6:f1:37:4f:b4:1d:3f:98:2a:57:d0:5f:1c:85:5f:50:ca:
ec:33:22:f2:43:72:20:a3:f7:75:62:27:82:e1:b0:4c:6a:eb:
d7:73:9c:c9:a5:8f:f7:4a:f9:89:b7:13:46:f7:48:44:d2:c6:
2b:04:29:6e:47:f1:ad:01:c5:0f:11:d0:46:5b:16:6f:96:f2:
63:0c:14:98:a6:81:2f:d6:25:12:5e:19:22:f5:af:f8:7f:ce:
75:62:5d:a0:39:2b:01:7b:bd:fa:49:02:c0:71:40:e3:34:80:
54:7b:36:f3:4c:98:82:8e:77:03:c4:39:cf:d6:c1:b6:1c:f7:
20:7c:1b:5d:43:b6:5b:d9:7f:65:b1:55:03:48:e2:af:56:c4:
9a:6f:f3:49:f7:c2:50:22:7a:4b:36:54:5e:9d:72:50:49:23:
c6:86:62:2d:d4:74:a4:32:7b:2d:a2:e9:a6:13:77:2d:51:a3:
0c:ba:36:af:ed:dc:a9:04:af:a8:38:c6:9b:99:b7:56:a2:ef:
36:f5:bc:8e:6d:e8:c7:3c:d2:78:7d:2b:07:a2:91:9a:7d:00:
a3:3d:a6:68:d1:96:75:42:85:b8:a8:e4:13:92:44:06:5d:d5:
c5:a8:de:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw+q69FBBPkRIyXGoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI1MTIyMDAyMDAzMVoXDTI2MDMyMDAxMDAzMVowLzEtMCsGA1UEAxMk
MjY3YjU1MWEtNzVmZS00YzM3LTllNTQtYTc5MWM1ZmFmMmIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDYOk9hYoB6ps2bXqXvNqh8oPbljHG/3CCOK
cC0uENgHHvCscWp69pe9Pc+nOaxsmN1FAycdcm5qzWcqGaqe2++hXlx9lMOqT9Hi
WwzxP8bDnvkyHHXz+xqXQCFxrYhYVofmI8fFPFvZH29Nm/f38PIyaCo9OfB9QwAg
3O8ElN8mcQPUUiZbMcXRhN2BS2sgWp8mE/hQpbygqDZIFcr29Mb8gJ6Ryiup1yNM
TGJyC+tHf51n63hz7hqlekMf6qXp5ByQ4RB8RZwct0BmOSJyW/J5yQWXRY0Zh1k3
DLheSGicQjSjEvN/D3c6P/iZhieevMPZgKUoScaPn8yhQAzOAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEYo8zNp898hSCMIT9XFvpB02yt9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvM2FiYTVmOGQtNzg4ZC0z
NmE4LWFhOWMtOGJjMmI2NDc2ZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDq594MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF11uFV3OPojdRgywTZOuiOBSbzG8TdPtB0/mCpX0F8chV9QyuwzIvJD
ciCj93ViJ4LhsExq69dznMmlj/dK+Ym3E0b3SETSxisEKW5H8a0BxQ8R0EZbFm+W
8mMMFJimgS/WJRJeGSL1r/h/znViXaA5KwF7vfpJAsBxQOM0gFR7NvNMmIKOdwPE
Oc/WwbYc9yB8G11DtlvZf2WxVQNI4q9WxJpv80n3wlAieks2VF6dclBJI8aGYi3U
dKQyey2i6aYTdy1Rowy6Nq/t3KkEr6g4xpuZt1ai7zb1vI5t6Mc80nh9KweikZp9
AKM9pmjRlnVChbio5BOSRAZd1cWo3ms=
-----END CERTIFICATE-----
Generated at Mon Dec 22 08:47:55 2025 by rpki-client