This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa
File: cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa (raw, json)
Hash identifier: sesiByNz6PXjKUp1NAwmBtdaw0vVZmux1gb0ffDeqWg=
Subject key identifier: 21:BE:E0:8D:64:1A:FE:24:24:EE:24:66:0F:51:B1:C2:B0:A6:DF:7C
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584C44410488EE1BD768866C7E00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa
Signing time: Mon 22 Dec 2025 02:00:32 +0000
ROA not before: Mon 22 Dec 2025 02:00:32 +0000
ROA not after: Sun 22 Mar 2026 01:00:32 +0000
asID: 207266
IP address blocks: 199.249.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 25 Dec 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:44:41:04:88:ee:1b:d7:68:86:6c:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Dec 22 02:00:32 2025 GMT
Not After : Mar 22 01:00:32 2026 GMT
Subject: CN=9b38a94c-7db0-49ce-88ac-d736b2b6ecc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a1:a6:f8:48:4c:cb:b0:03:04:63:6b:fc:a8:
ed:b9:03:83:d4:d9:06:d6:aa:f6:5e:44:36:47:db:
91:70:da:1b:5e:57:79:14:0e:66:e8:07:a2:60:11:
cc:65:b6:51:9f:fd:60:b6:aa:2b:9f:85:4e:8c:ac:
91:5a:85:ec:e3:1a:7c:e5:0a:04:35:0e:06:95:1e:
2c:46:c8:31:26:f2:8d:cc:af:8a:10:d7:b7:60:c9:
59:a1:42:a3:b7:d8:6e:95:5a:91:dd:c3:52:44:0e:
8a:e2:3b:dc:77:28:77:11:bf:35:eb:49:44:79:8a:
33:6a:fc:f1:5b:34:6d:9f:1f:72:a3:55:0a:dd:23:
37:8d:d7:23:4a:df:24:67:87:bf:b6:d7:3a:aa:7a:
7e:1a:cd:94:6f:75:9b:9c:4b:67:22:d9:45:53:8d:
c4:db:2e:6d:fe:22:e2:33:a7:66:6b:08:5a:0b:74:
f5:a8:c9:40:ac:fa:f6:e1:28:78:97:c2:6c:c1:ff:
82:1f:45:41:31:54:48:4b:23:82:77:55:c3:7e:b6:
57:bf:f2:a2:a2:3e:9a:b0:3e:12:5c:82:64:ce:fa:
cf:d3:6b:38:e9:25:41:a8:81:1c:6d:a4:ba:da:ed:
8b:c6:15:71:df:3e:44:c0:01:0b:8c:08:40:48:e0:
43:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BE:E0:8D:64:1A:FE:24:24:EE:24:66:0F:51:B1:C2:B0:A6:DF:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.249.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:10:b8:e3:0f:e9:42:29:60:48:ef:a1:31:cb:f0:79:9d:78:
e8:07:f1:4b:f8:e9:fd:aa:45:95:5f:99:98:a1:8c:41:6c:b6:
1f:a2:e2:19:a4:5d:34:7c:f0:21:0f:ab:68:71:0c:8e:e3:7d:
e9:e8:b8:31:75:5e:6f:91:e9:9a:dd:2e:69:95:e2:70:a5:3d:
1c:f6:f9:9c:52:4e:5d:6f:ff:03:d0:20:fc:8a:2d:b0:56:24:
ca:a6:a3:fa:9a:22:c6:3c:82:7b:4b:69:b0:73:47:bd:d4:b5:
87:5f:bf:1c:0e:f6:9b:6f:70:7f:ed:e1:90:c0:06:36:59:87:
d3:59:6d:5b:dc:ea:81:13:56:81:3e:1e:bc:57:ca:7d:81:54:
5d:43:ae:74:b8:ea:d6:f4:11:4b:6a:92:9b:5d:d1:5e:a1:2c:
9c:a1:7a:2b:c4:31:68:9d:73:8f:47:fc:82:9b:ff:e8:88:41:
24:e2:56:7d:e8:27:ae:73:22:2c:e2:32:ce:a7:4d:39:6f:bd:
68:e6:f6:38:50:01:f0:12:cd:2e:72:6a:22:1f:ba:d0:e6:dd:
8d:7b:29:ba:6c:2f:8b:cc:63:cb:3b:82:29:96:e6:55:10:9b:
98:a3:03:dc:61:25:c8:d2:f2:6f:d2:36:d4:96:3c:31:51:3a:
e6:5c:c7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 10:30:41 2025 by rpki-client