This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5240f0b1-db14-30f4-bc65-818a2619ae8d.roa
File: 5240f0b1-db14-30f4-bc65-818a2619ae8d.roa (raw, json)
Hash identifier: 482l1kEDYDGwQigH9wzqFTDdptQIFntBo6vrF9ZFdyc=
Subject key identifier: 4F:C6:C6:7F:D8:20:46:23:E4:D4:09:28:5E:51:0C:F8:B7:41:2E:58
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584C4B3BE80C8E804FA4E8365980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5240f0b1-db14-30f4-bc65-818a2619ae8d.roa
Signing time: Wed 24 Dec 2025 14:00:40 +0000
ROA not before: Wed 24 Dec 2025 14:00:40 +0000
ROA not after: Tue 24 Mar 2026 13:00:40 +0000
asID: 396580
IP address blocks: 192.58.128.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4b:3b:e8:0c:8e:80:4f:a4:e8:36:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 24 14:00:40 2025 GMT
Not After : Mar 24 13:00:40 2026 GMT
Subject: CN=9b40f9c9-670f-43f8-b6af-afbdd4b41e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:66:4b:b9:c8:64:49:60:24:ce:75:68:54:
f9:8e:de:fd:51:b2:bd:d4:08:48:63:41:2d:87:e9:
69:d3:f6:bf:c7:e0:fb:26:01:25:39:2c:b8:b0:6c:
d7:86:10:de:1e:0b:70:85:42:ab:28:bf:34:12:e2:
08:f5:c1:82:15:79:eb:8b:d5:67:f6:c6:04:32:1c:
c0:b3:8f:a0:22:f2:49:d7:bd:c9:8a:42:8a:08:2c:
91:f8:41:54:3d:c1:73:e2:07:6c:06:00:81:f8:ef:
ae:72:74:9c:5f:fc:40:ce:85:a2:fb:1c:87:50:86:
97:60:c4:d1:d8:f4:ea:52:02:18:34:d3:ea:d4:36:
7a:82:4f:fb:26:6d:3f:c5:2b:ab:fc:ac:8e:e3:9b:
b6:69:38:f1:5c:8e:4f:2c:ec:29:1a:ea:b4:0c:54:
34:5d:3b:90:db:ca:8c:3e:27:70:c5:1d:12:40:83:
f8:e6:dc:61:56:9b:b9:fc:2b:ef:1e:65:9d:3b:02:
66:46:43:b7:4c:1b:aa:3f:72:14:12:6b:19:4f:7f:
3b:ed:93:fe:0f:e7:09:e2:73:ef:bb:e4:8b:89:fc:
92:ad:fd:72:08:63:99:d8:93:7c:4f:0d:58:ad:6e:
1c:b6:eb:58:37:a7:0b:5d:9d:91:95:d4:5f:f5:57:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C6:C6:7F:D8:20:46:23:E4:D4:09:28:5E:51:0C:F8:B7:41:2E:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5240f0b1-db14-30f4-bc65-818a2619ae8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:a3:a1:31:5c:02:13:fe:f6:a3:e6:b4:a3:ed:09:6e:36:a8:
50:c1:5b:59:3a:31:16:57:2b:cd:f3:2a:d7:6d:25:c8:77:f0:
21:19:99:19:83:1d:3f:e6:2b:55:2e:5a:d4:e6:56:7e:b3:3b:
14:a1:0a:e3:b1:17:60:2c:a5:6c:8c:73:1f:ae:86:ce:8d:a3:
ce:0b:f5:9e:9c:fb:eb:7b:94:65:36:2e:33:6a:e7:1f:dd:28:
3c:a8:86:34:69:a9:9a:8b:63:60:1c:f8:06:4b:c4:97:48:ec:
cb:71:ae:71:46:3a:ab:9d:60:02:f1:c1:f1:ce:90:2c:fe:12:
44:85:36:c7:42:c9:04:2f:f0:06:f3:c3:a2:10:b7:1d:5a:35:
f1:ea:3c:d5:2f:89:d0:3b:fc:38:a5:91:aa:07:3e:80:e3:17:
4c:5a:f7:04:5c:94:b5:ea:23:d5:b3:0a:e9:6d:5d:ef:be:04:
dc:34:de:87:16:d5:c9:c9:7d:ad:e0:51:0d:18:09:23:f4:3e:
a2:11:fb:c1:17:c4:ee:0b:6f:eb:78:2b:0b:48:7f:22:7b:31:
9d:3d:d8:81:90:c6:a5:0b:c2:67:ee:56:e6:67:5b:30:67:44:
3f:5e:d1:99:11:63:64:9f:a9:10:ee:05:71:01:ee:68:55:9d:
dd:fb:06:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:47:34 2026 by rpki-client