This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a20910dc-99bf-3c10-915d-32e9a7db28f5.roa
File: a20910dc-99bf-3c10-915d-32e9a7db28f5.roa (raw, json)
Hash identifier: 1Q6zYe0A6AIROCsLSdZTcuQfLCn2YcBwCgm8GILc3IM=
Subject key identifier: C0:90:AB:82:A3:CB:D8:6A:E9:97:1F:45:B4:7C:F1:6A:D1:8E:FB:6E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BF4B0B01AFC3196073E596C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a20910dc-99bf-3c10-915d-32e9a7db28f5.roa
Signing time: Sun 23 Nov 2025 14:00:38 +0000
ROA not before: Sun 23 Nov 2025 14:00:38 +0000
ROA not after: Sat 21 Feb 2026 14:00:38 +0000
asID: 20172
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:f4:b0:b0:1a:fc:31:96:07:3e:59:6c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 23 14:00:38 2025 GMT
Not After : Feb 21 14:00:38 2026 GMT
Subject: CN=b19f9ab2-ea88-4b15-873e-267722631e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:5a:79:f4:f6:81:d6:2d:00:4f:75:9f:b9:
b6:f9:d5:eb:b0:12:fc:49:1f:05:da:d5:0f:a5:07:
27:c2:b5:c9:c8:3e:6f:09:74:f2:fd:36:ed:68:de:
fd:ec:40:10:be:fd:67:63:9e:6f:fd:f8:67:af:3f:
dd:e7:39:f6:91:d2:a3:48:e5:ae:77:55:9b:81:c2:
8a:f7:5d:05:4e:c0:00:6a:82:3c:e3:ed:90:c6:6a:
f7:21:7b:55:b9:5a:7a:48:7d:78:3a:83:b1:0b:e9:
9d:79:ff:38:3f:b1:f8:be:b2:6d:19:d8:aa:9c:f1:
8e:bf:96:24:67:0d:67:7b:58:b6:46:74:e2:a2:b1:
fe:ac:6a:2e:8c:5a:85:5e:36:41:d4:72:c4:ad:6a:
4e:70:a7:ba:6d:c5:5f:2c:42:03:04:39:ee:89:01:
d9:35:8b:0f:b7:09:39:51:67:44:74:57:0e:6a:ce:
8a:08:4a:64:68:78:21:57:b0:c9:cd:d5:c3:01:e0:
ee:e7:7a:0f:cc:bf:39:1a:9f:a9:e5:86:cc:ae:de:
37:84:bb:b6:69:54:5a:47:54:10:b9:d5:e3:a2:ee:
87:30:ed:fd:18:0e:7f:49:f7:1a:61:29:a6:2d:80:
a0:44:3b:1c:e0:67:eb:ac:3f:fc:04:f5:e3:c5:da:
8e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:90:AB:82:A3:CB:D8:6A:E9:97:1F:45:B4:7C:F1:6A:D1:8E:FB:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a20910dc-99bf-3c10-915d-32e9a7db28f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:15:a9:e5:ae:b3:e3:a9:bb:96:06:90:b7:ff:24:cd:a4:07:
6c:17:f8:5f:fd:72:ac:3b:7a:5c:7e:d5:80:6a:fb:38:03:18:
9c:ad:be:b2:a2:ba:01:7d:cc:ef:fe:39:69:f4:d2:46:65:b1:
17:8f:e7:a4:3f:95:52:68:14:0a:7c:a8:91:c7:3d:19:9a:c3:
ec:7b:85:58:78:ce:0a:71:49:f0:04:63:91:4a:88:bc:f3:55:
9b:66:ae:cc:39:25:e8:b4:09:80:9b:28:33:b9:d0:5a:ac:95:
a9:e2:da:1c:67:17:2c:ef:d7:f0:15:7f:f6:45:f2:e4:54:e4:
4f:61:f1:99:f6:93:5e:3f:26:37:8e:b7:04:97:d0:a9:c2:0b:
bf:1f:3b:d1:f9:5a:cf:0f:a3:33:e6:61:1a:bd:8b:0e:77:0e:
7b:a0:b9:c0:c5:94:96:00:e6:12:1f:00:b5:5f:f6:f9:2d:55:
6c:10:48:97:89:90:2f:d4:bf:54:f0:bf:45:07:40:28:83:c0:
a8:c5:4a:e5:83:a2:4b:ec:f2:72:55:21:13:09:4a:03:20:42:
07:0b:ce:10:fb:54:7c:c1:fa:46:6b:f5:40:22:3e:9f:b4:8a:
3d:eb:ff:9f:45:3e:4c:00:f2:34:04:25:7d:6e:5f:16:4d:11:
38:78:d2:23
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEv0sLAa/DGWBz5ZbEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTEyMzE0MDAzOFoXDTI2MDIyMTE0MDAzOFowLzEtMCsGA1UEAxMk
YjE5ZjlhYjItZWE4OC00YjE1LTg3M2UtMjY3NzIyNjMxZThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtFaefT2gdYtAE91n7m2+dXrsBL8SR8F2tUP
pQcnwrXJyD5vCXTy/TbtaN797EAQvv1nY55v/fhnrz/d5zn2kdKjSOWud1WbgcKK
910FTsAAaoI84+2Qxmr3IXtVuVp6SH14OoOxC+mdef84P7H4vrJtGdiqnPGOv5Yk
Zw1ne1i2RnTiorH+rGoujFqFXjZB1HLErWpOcKe6bcVfLEIDBDnuiQHZNYsPtwk5
UWdEdFcOas6KCEpkaHghV7DJzdXDAeDu53oPzL85Gp+p5YbMrt43hLu2aVRaR1QQ
udXjou6HMO39GA5/SfcaYSmmLYCgRDsc4GfrrD/8BPXjxdqOXwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMCQq4Kjy9hq6ZcfRbR88WrRjvtuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTIwOTEwZGMtOTliZi0z
YzEwLTkxNWQtMzJlOWE3ZGIyOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBjFanlrrPjqbuWBpC3/yTNpAdsF/hf/XKsO3pcftWAavs4Axicrb6y
oroBfczv/jlp9NJGZbEXj+ekP5VSaBQKfKiRxz0ZmsPse4VYeM4KcUnwBGORSoi8
81WbZq7MOSXotAmAmygzudBarJWp4tocZxcs79fwFX/2RfLkVORPYfGZ9pNePyY3
jrcEl9Cpwgu/HzvR+VrPD6Mz5mEavYsOdw57oLnAxZSWAOYSHwC1X/b5LVVsEEiX
iZAv1L9U8L9FB0Aog8CoxUrlg6JL7PJyVSETCUoDIEIHC84Q+1R8wfpGa/VAIj6f
tIo96/+fRT5MAPI0BCV9bl8WTRE4eNIj
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:22:41 2025 by rpki-client