This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f72e9bdf-6373-3cd7-b728-8da6b3a9a1d2.roa
File: f72e9bdf-6373-3cd7-b728-8da6b3a9a1d2.roa (raw, json)
Hash identifier: f0GEfQZeurr9HziYXQUo2EUFGyX8+OTbxLLIdWKEgIU=
Subject key identifier: EA:F8:3F:85:86:4A:27:8F:3C:0D:23:A2:85:1E:F2:B9:BF:FF:2E:40
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584C42DC003AB40937D4DE1BA900
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f72e9bdf-6373-3cd7-b728-8da6b3a9a1d2.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 12041
IP address blocks: 199.249.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 25 Dec 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:dc:00:3a:b4:09:37:d4:de:1b:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=570a4258-3797-419f-b899-d4d28b8a7d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:03:d0:06:a5:8d:3b:f4:0a:b7:16:21:c6:e9:
92:a9:79:f1:9e:63:f2:83:a9:a0:d4:5c:87:fe:dd:
a6:42:3b:a6:f5:26:6f:01:8c:c1:54:31:63:87:76:
0c:71:d1:ef:b9:1b:27:c6:b8:54:b5:65:b8:4d:d7:
1d:ab:5d:85:97:88:6f:37:24:59:18:15:a0:22:4f:
fb:46:fd:49:1e:cd:8f:ec:f8:17:ff:d3:49:8d:1c:
01:a0:63:d1:8c:3e:c6:8d:24:ad:a7:64:56:ef:0a:
11:e9:83:b3:8c:9e:24:29:f6:66:89:4a:5b:5a:3e:
07:55:5e:73:ed:3c:9d:d2:d3:86:4a:70:88:cc:45:
6d:ad:81:b5:53:2e:ba:c3:5b:03:55:d5:da:b4:ff:
ae:80:b2:bb:d2:37:d0:50:15:3e:21:2b:a0:ad:f1:
44:58:00:8b:06:d5:8f:e2:84:90:81:c6:f3:b1:a7:
06:5c:12:f8:92:55:5c:3a:d1:81:d2:73:1f:1c:4d:
99:43:51:1f:2b:2e:c5:de:fb:48:e0:49:f1:1e:04:
00:78:db:54:cc:a6:29:27:da:98:1b:26:54:76:1a:
f6:d6:d1:ff:fe:9f:7c:28:74:e7:40:ca:8a:c7:3f:
ea:11:4f:97:bf:38:7e:cb:86:4b:92:a1:53:1d:91:
d7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F8:3F:85:86:4A:27:8F:3C:0D:23:A2:85:1E:F2:B9:BF:FF:2E:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f72e9bdf-6373-3cd7-b728-8da6b3a9a1d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.249.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:8e:9e:78:ed:c5:2c:78:9c:b4:44:be:ca:2d:52:e3:7c:be:
25:61:d8:81:d9:71:1e:19:3a:be:45:8e:e4:d5:f7:d2:31:53:
5d:eb:3a:80:1c:ee:2b:8d:78:64:24:b5:a7:d9:2b:97:07:f6:
e6:22:7f:19:29:24:75:1f:80:76:d3:b3:23:46:77:55:70:2f:
e3:c4:3b:d3:c3:7d:fb:a3:44:e9:e4:62:40:28:99:ba:c6:b3:
05:41:09:97:81:af:dd:98:e8:68:95:a7:5c:a7:b5:0b:96:0c:
54:7c:03:df:d6:f1:b4:76:bf:89:bb:71:05:02:d7:c4:4d:99:
60:d3:c6:1a:ab:b0:d5:b0:ea:5f:e4:a0:d5:d9:bf:73:e5:4e:
80:bb:cc:43:a2:c6:1f:8a:90:de:5c:f5:0c:25:45:2b:28:7b:
4a:36:64:72:59:26:7d:ac:f7:70:29:58:94:45:8d:99:25:de:
c8:f7:5d:04:d8:f2:cc:61:64:22:3e:f2:3d:7a:d9:29:0f:64:
eb:bd:f2:c1:99:8d:e9:be:70:6b:b4:3c:69:12:da:88:9a:d5:
4b:8e:e7:06:e1:ef:d8:a2:5e:ad:5a:df:9b:67:d5:0e:6c:4e:
78:40:bb:b3:ec:74:7c:88:7f:f8:91:82:ff:25:b4:08:41:5e:
c0:16:0d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 10:31:17 2025 by rpki-client