This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/536f65fc-5cc0-30b3-a1f6-84de7c771b27.roa
File: 536f65fc-5cc0-30b3-a1f6-84de7c771b27.roa (raw, json)
Hash identifier: tNUoG33BeoiK2MEjZ+UYKBfuRF0I2MPB/M2ZNM5fUyg=
Subject key identifier: F0:66:66:AE:7F:EF:52:FB:DD:4B:4F:A7:78:16:71:EF:CF:75:72:4B
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584C42DBC16125C0A3EE9D457300
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/536f65fc-5cc0-30b3-a1f6-84de7c771b27.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 12041
IP address blocks: 199.253.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 24 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:db:c1:61:25:c0:a3:ee:9d:45:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=ec7aa4a2-0461-4ef4-8392-b44beef99709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:89:2a:0e:6d:29:7a:f2:64:ac:b1:89:36:
25:e7:ad:c9:d7:79:4c:46:35:b7:90:a0:85:fe:80:
ee:20:45:f1:f2:4d:84:c9:20:fc:83:e2:3a:b0:fd:
a4:f8:07:fe:c7:d6:97:cf:c7:ae:3e:d4:ca:95:3b:
f9:ed:3c:a3:37:e3:30:dc:d5:73:45:b1:4d:5e:00:
1f:f7:13:9b:e2:d2:0e:ec:60:32:01:3c:cc:8b:19:
27:9c:f9:3b:23:e5:8f:cd:2e:45:b5:bc:ec:a3:97:
e7:c0:c7:a0:f4:86:6a:c4:7a:f4:32:43:bf:ad:25:
0d:fe:cc:67:94:69:18:3e:9c:75:db:d7:95:89:4b:
f9:a6:6e:c9:49:df:6e:c3:9c:34:1d:4b:6c:65:df:
46:a4:6b:1e:91:fb:0a:5f:c3:a7:7b:1e:e3:59:18:
b7:58:94:dd:64:93:43:df:bf:41:56:bb:24:98:11:
14:31:99:f1:d3:b1:2f:91:b2:08:a9:42:92:3f:e0:
83:24:a0:ce:31:40:bb:bb:9e:d7:6c:04:47:de:18:
d7:4d:7c:b5:63:ea:a1:d4:7b:ce:2a:30:aa:4a:a8:
5d:6b:f1:e6:96:bc:f7:47:d7:5f:21:b7:40:b0:43:
77:6d:b8:f0:fc:22:b7:a3:a1:de:1e:b8:27:00:44:
f5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:66:66:AE:7F:EF:52:FB:DD:4B:4F:A7:78:16:71:EF:CF:75:72:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/536f65fc-5cc0-30b3-a1f6-84de7c771b27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.253.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:87:57:23:c5:de:3d:58:4f:63:92:64:1f:39:e2:f7:e1:fe:
99:59:fc:9a:19:8b:c3:bc:98:e0:f7:23:31:49:11:52:60:60:
d6:ce:3e:f1:61:71:a2:15:2e:2e:4c:1f:d3:7c:c8:5b:56:dd:
ab:fc:81:66:90:ec:8f:54:0e:34:6c:77:4c:56:72:d2:53:a3:
f0:89:80:6b:09:36:8b:e3:be:4e:5c:c5:c7:98:a8:4e:5a:fb:
d7:db:36:d8:c7:55:18:f9:9e:d3:9e:6d:7c:ab:f2:3b:2f:d3:
7a:a9:4a:42:0d:a0:48:63:9c:d6:13:aa:5b:d6:86:0d:47:60:
50:a8:7a:5d:ab:45:44:45:f9:17:2e:92:2e:93:2e:10:76:a9:
24:f6:cf:8e:8c:be:57:06:23:34:b5:66:01:dc:41:8c:a9:ee:
02:de:21:26:e2:83:7a:65:31:a5:a0:c9:4a:4b:11:56:6a:78:
43:30:a5:cc:e3:49:e0:81:e9:a6:ba:df:40:eb:c6:be:79:a2:
b1:7a:a3:4b:b1:45:4d:93:97:07:b3:1c:4f:b9:b4:d3:8d:41:
2f:4d:49:7d:f5:a6:4e:45:f3:d9:0e:d2:31:79:ae:20:26:a0:
ac:9d:2f:1c:73:5d:52:4d:63:b9:a7:3f:23:8e:d2:1f:8e:ff:
bf:44:df:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:45:51 2025 by rpki-client