This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bafe09b-782b-32ab-adf9-bb1ff65a90d6.roa File: 3bafe09b-782b-32ab-adf9-bb1ff65a90d6.roa (raw, json) Hash identifier: Xq57CgNJPTNHoeYkcPKSo+j2IC07eSkt0fHRMFwc48Y= Subject key identifier: BF:9F:93:54:14:EA:99:45:38:77:64:0C:BA:3F:84:B5:0B:72:16:F8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C4B3BE942AAEFE95453462600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bafe09b-782b-32ab-adf9-bb1ff65a90d6.roa Signing time: Wed 24 Dec 2025 14:00:40 +0000 ROA not before: Wed 24 Dec 2025 14:00:40 +0000 ROA not after: Tue 24 Mar 2026 13:00:40 +0000 asID: 396585 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4b:3b:e9:42:aa:ef:e9:54:53:46:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 24 14:00:40 2025 GMT Not After : Mar 24 13:00:40 2026 GMT Subject: CN=21f5fada-54c3-4610-bdd3-bd304ce99699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:ff:3d:ad:f8:61:68:48:e3:19:56:d9:f7: 8d:d7:ba:62:e2:30:79:e3:98:ba:5c:50:52:37:c9: ef:dc:96:c1:36:c1:b8:72:91:5d:16:05:98:94:a0: 2c:df:81:2a:d5:7e:91:7c:2c:75:ce:e4:9d:28:4d: f0:97:7c:81:e3:b8:d6:20:e3:c3:4d:68:01:8e:69: c8:38:45:52:19:6c:fc:03:64:e4:62:72:eb:f3:b6: 6e:24:e3:aa:33:65:cf:41:ec:ee:ef:fc:75:0a:e2: 07:c3:76:1e:d9:11:cd:3e:69:39:26:7b:e9:e5:7c: 65:47:40:38:e4:9b:cc:d9:9e:eb:8a:25:d0:8a:f2: d0:2f:e9:9f:aa:07:98:a1:f3:24:ce:ea:1a:ac:77: 71:16:2d:79:af:47:3d:d7:6d:e2:5a:10:32:73:52: 71:7d:24:5d:62:54:70:46:b1:01:17:4d:67:4f:80: 42:c0:7a:bd:4b:c1:20:a3:59:04:58:49:b9:dc:67: 78:e6:c7:89:47:55:30:90:0a:40:ec:da:3a:28:eb: fe:05:48:d7:73:8c:25:ff:cd:6a:18:16:45:d6:29: b7:39:41:4b:8f:1f:91:ae:7f:42:2b:e4:92:84:71: 7d:ed:34:f9:81:fc:8c:8d:91:f8:96:54:21:f9:6c: 80:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9F:93:54:14:EA:99:45:38:77:64:0C:BA:3F:84:B5:0B:72:16:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bafe09b-782b-32ab-adf9-bb1ff65a90d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e0:69:1a:86:d0:93:6d:e7:42:dc:b2:67:f1:f9:aa:21:9c: c4:22:9b:1c:42:19:d4:ef:aa:d7:2e:ab:21:9a:5b:03:b3:a6: 94:58:c7:2b:41:1c:f3:c7:dd:3a:3a:d8:2e:64:cb:c3:eb:8d: a3:9b:8f:f7:1b:c7:7e:63:aa:8d:c8:c7:10:3d:cb:6c:72:e0: 24:92:93:2e:63:7d:45:3d:3a:71:07:ab:94:1e:09:95:f4:e6: 27:5a:df:65:1b:5a:92:37:00:4b:76:02:77:0b:b2:6d:72:d4: db:6a:ab:c3:68:36:94:4d:5c:02:e5:0c:85:db:27:6e:40:a7: 00:13:fe:7d:6d:de:ce:b3:77:0e:12:aa:69:25:62:e0:29:a7: ca:dd:4e:4c:02:c3:b5:28:94:d0:6c:64:e4:bf:34:a8:3c:f6: 7a:59:ca:7e:df:d1:b3:78:dc:78:94:5d:a7:8c:3a:af:e6:f9: f9:f1:af:f4:7a:bc:ee:8e:43:5b:73:a2:cc:12:89:2c:eb:37: 4b:f1:ae:79:75:34:7b:fd:d2:c3:eb:1a:1a:b8:61:ce:f7:39: 20:a4:fc:50:38:2d:ec:b7:ac:9e:4b:f2:ef:31:31:31:0f:4e: ff:cf:0c:2a:e5:1e:ba:47:17:ff:9a:71:5c:b5:13:9b:f5:2e: 09:9f:eb:28 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWExLO+lCqu/pVFNGJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIyNDE0MDA0MFoXDTI2MDMyNDEzMDA0MFowLzEtMCsGA1UEAxMk MjFmNWZhZGEtNTRjMy00NjEwLWJkZDMtYmQzMDRjZTk5Njk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQP/Pa34YWhI4xlW2feN17pi4jB545i6XFBS N8nv3JbBNsG4cpFdFgWYlKAs34Eq1X6RfCx1zuSdKE3wl3yB47jWIOPDTWgBjmnI OEVSGWz8A2TkYnLr87ZuJOOqM2XPQezu7/x1CuIHw3Ye2RHNPmk5Jnvp5XxlR0A4 5JvM2Z7riiXQivLQL+mfqgeYofMkzuoarHdxFi15r0c9123iWhAyc1JxfSRdYlRw RrEBF01nT4BCwHq9S8Ego1kEWEm53Gd45seJR1UwkApA7No6KOv+BUjXc4wl/81q GBZF1im3OUFLjx+Rrn9CK+SShHF97TT5gfyMjZH4llQh+WyARwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL+fk1QU6plFOHdkDLo/hLULchb4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2JhZmUwOWItNzgyYi0z MmFiLWFkZjktYmIxZmY2NWE5MGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBh4GkahtCTbedC3LJn8fmqIZzEIpscQhnU76rXLqshmlsDs6aUWMcr QRzzx906OtguZMvD642jm4/3G8d+Y6qNyMcQPctscuAkkpMuY31FPTpxB6uUHgmV 9OYnWt9lG1qSNwBLdgJ3C7JtctTbaqvDaDaUTVwC5QyF2yduQKcAE/59bd7Os3cO EqppJWLgKafK3U5MAsO1KJTQbGTkvzSoPPZ6Wcp+39GzeNx4lF2njDqv5vn58a/0 erzujkNbc6LMEoks6zdL8a55dTR7/dLD6xoauGHO9zkgpPxQOC3st6yeS/LvMTEx D07/zwwq5R66Rxf/mnFctROb9S4Jn+so -----END CERTIFICATE-----Generated at Sun Jan 25 20:18:40 2026 by rpki-client