This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9de987fb-22ad-351a-ad74-f4233be06fb3.roa
File: 9de987fb-22ad-351a-ad74-f4233be06fb3.roa (raw, json)
Hash identifier: 8vJoIV9+a1Dq1FP4Y4fv4mj79AgcVUoAufQ7i/so5RA=
Subject key identifier: E8:BC:43:83:32:A4:E2:A2:D4:84:85:10:34:E1:22:14:05:95:22:4A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BE8208A459A7CADEAE3DC5EC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9de987fb-22ad-351a-ad74-f4233be06fb3.roa
Signing time: Wed 19 Nov 2025 02:00:30 +0000
ROA not before: Wed 19 Nov 2025 02:00:30 +0000
ROA not after: Tue 17 Feb 2026 02:00:30 +0000
asID: 396552
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:e8:20:8a:45:9a:7c:ad:ea:e3:dc:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 19 02:00:30 2025 GMT
Not After : Feb 17 02:00:30 2026 GMT
Subject: CN=c42b4c16-6fdc-44e6-b0e7-4b96ddffce0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7e:f3:32:a4:75:db:ba:1b:f5:81:68:d7:43:
73:ce:19:46:2e:87:53:f5:4d:5e:56:e0:18:58:c6:
b6:a5:a7:23:66:5b:cd:e5:65:97:22:dc:ab:df:40:
e5:d1:ad:a7:d5:46:16:2a:75:11:f3:b8:63:31:b1:
28:eb:ed:d1:f9:59:0b:2f:7a:c3:1c:0c:00:8e:60:
32:eb:54:9c:c6:46:d5:4e:99:a1:8c:96:b1:e1:64:
b6:31:4c:b9:cf:95:b0:dd:d1:e2:ea:2e:45:17:b4:
f6:82:42:a8:cd:35:c6:db:36:85:4a:e9:74:e1:e3:
a9:cd:d4:e0:f2:c0:1c:c7:4d:72:e0:ac:d4:79:4d:
43:8d:ec:0b:d3:f8:d1:7c:3c:bf:73:1f:f3:95:0e:
62:9c:a6:04:31:1d:43:b8:cd:e4:f1:2f:3b:c9:b0:
06:49:c8:5c:ce:b6:84:b9:9a:d3:8a:f2:50:29:5b:
8e:eb:f4:31:87:7d:e4:94:aa:ea:ed:24:93:4b:e4:
80:f1:ab:dc:f7:b2:3a:1f:70:e3:e2:54:4d:a5:c6:
cf:b9:dd:44:4f:ba:0a:f8:7f:bd:1a:ef:31:ed:82:
39:6d:49:39:cf:7a:98:f1:63:9d:0c:ae:6a:83:20:
22:f1:b0:30:26:78:83:4b:32:bd:79:bf:2c:79:00:
85:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BC:43:83:32:A4:E2:A2:D4:84:85:10:34:E1:22:14:05:95:22:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9de987fb-22ad-351a-ad74-f4233be06fb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:84:aa:71:75:a8:2d:59:61:70:f1:1b:eb:7f:97:d9:96:f2:
c9:56:e7:31:f1:a7:2a:12:5d:8e:78:25:c5:36:60:26:9a:42:
f8:b9:97:c8:eb:e1:3b:82:b2:ef:a4:30:f7:ea:d4:0c:69:28:
5d:51:4e:bb:bf:9c:5e:61:6e:38:79:99:f8:5c:0b:6e:44:8f:
8a:08:82:5c:77:9d:a0:93:1d:57:34:00:b4:fa:91:68:f6:80:
b6:33:35:fb:33:46:8d:2e:ae:8b:8c:96:58:4c:43:62:02:c4:
f5:c0:fa:73:13:18:18:5d:c6:f7:4d:c2:01:20:84:0c:ba:f7:
31:6c:24:71:47:17:94:54:00:64:d8:45:79:6d:af:09:bc:2d:
ab:a4:f9:8a:72:ba:72:e6:4d:0c:be:ac:17:4d:22:ef:ce:33:
35:d8:ca:cd:4c:5d:06:9f:41:5e:bf:d2:23:b5:91:0e:7b:81:
87:cf:f8:7e:42:94:c0:a8:3b:bf:f8:8c:51:f9:19:5f:94:0c:
53:5f:a4:a3:85:70:5a:6d:03:a3:75:85:65:b7:44:d9:53:b0:
c3:f6:4e:6c:38:47:d6:8d:d6:10:cd:36:1b:0e:15:fb:af:e0:
17:97:1d:2c:19:ec:72:14:3b:54:c5:67:47:4e:39:72:3c:1b:
10:dd:77:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:32:00 2025 by rpki-client