This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9f9ff8d-dce9-3139-9ae7-50f5d2914124.roa
File: b9f9ff8d-dce9-3139-9ae7-50f5d2914124.roa (raw, json)
Hash identifier: C3tRXPDnhIFRIesA58xa3lQJZq/w9mjjQXMXjHjUTpA=
Subject key identifier: 89:24:11:50:7C:4B:49:53:69:AA:E5:BE:90:82:01:4A:2A:0D:0B:B2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584C4B3BC6CF36348142D4AB2280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9f9ff8d-dce9-3139-9ae7-50f5d2914124.roa
Signing time: Wed 24 Dec 2025 14:00:40 +0000
ROA not before: Wed 24 Dec 2025 14:00:40 +0000
ROA not after: Tue 24 Mar 2026 13:00:40 +0000
asID: 396591
IP address blocks: 192.58.128.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4b:3b:c6:cf:36:34:81:42:d4:ab:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 24 14:00:40 2025 GMT
Not After : Mar 24 13:00:40 2026 GMT
Subject: CN=d3657e1e-27ca-4e0f-a3f6-696e3f55d420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:77:f8:06:53:8a:ab:b5:2b:5c:4d:45:3c:8e:
80:95:74:16:96:e9:6b:a5:85:0b:01:b2:58:ec:f1:
2b:d1:46:0c:55:ef:4c:e8:13:47:2a:55:d3:c0:0a:
50:4a:35:d9:1f:1d:1d:99:00:9b:64:cf:5a:f9:ff:
e9:7a:67:e7:e1:1f:e3:9e:e1:8e:5d:7f:96:bb:db:
c1:02:67:98:cf:fe:98:c8:81:86:2d:95:41:c4:12:
d7:e9:f8:60:c8:08:9b:fb:77:d8:eb:5c:4f:14:e4:
03:7a:87:fd:dc:2e:1e:a9:83:11:73:50:a5:d4:4b:
fc:c2:1e:68:fb:65:82:73:09:d2:a2:7a:b6:4f:be:
c7:4f:76:55:24:7c:c0:ec:3c:e4:a4:c8:34:76:b4:
a4:f8:e5:a5:c1:46:72:e5:14:f2:6a:f6:42:d8:bc:
24:d3:c6:84:b5:0d:27:0e:7e:19:56:f9:b1:cf:8e:
bd:b5:ab:6e:2f:bb:bf:8b:5a:03:70:51:91:35:79:
97:bb:58:1a:0e:ba:1d:fd:38:bf:78:3a:6b:fc:ed:
a8:65:1d:ba:b5:89:dd:de:58:8d:ae:c3:d8:46:49:
44:90:51:a2:af:11:3d:0b:02:57:3f:50:74:69:9a:
c8:50:42:9a:a5:7a:bb:5c:a7:0e:77:66:22:f4:5a:
85:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:24:11:50:7C:4B:49:53:69:AA:E5:BE:90:82:01:4A:2A:0D:0B:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9f9ff8d-dce9-3139-9ae7-50f5d2914124.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:da:b1:d7:ca:55:02:56:7c:05:c0:3e:b4:f8:04:1b:a0:e0:
77:13:ca:85:26:71:e1:31:e9:c8:38:88:5f:4b:84:bf:0a:07:
8c:98:6a:ad:c4:2d:e0:cf:94:20:bd:53:60:aa:4b:23:f6:b7:
ad:1d:5e:9b:07:d7:30:7a:85:4f:47:4f:65:05:ba:51:94:46:
35:a3:9b:b0:7c:bd:cd:c9:70:23:e3:9a:26:49:ba:02:4a:2f:
96:da:b5:f4:db:93:38:0a:e7:93:a2:83:0a:19:93:6a:94:30:
f7:93:8a:1f:de:b1:37:e1:8b:c5:22:74:f6:ac:18:8b:30:2c:
0c:9c:11:49:8a:c2:d9:bb:ca:74:6d:22:e5:50:a6:02:c8:c5:
d8:d7:a6:fe:90:71:98:67:9c:b5:81:0a:13:85:dd:0a:77:8d:
bd:1f:f6:e5:c8:2e:eb:9b:4f:4d:d8:5b:15:d0:e2:c4:b5:1f:
d0:0d:af:b9:4a:0c:eb:d7:1f:bd:b7:07:0f:5b:05:ad:e4:ee:
fc:5f:0b:c3:76:b3:f6:10:9d:3b:c3:19:7e:e1:8d:c3:20:45:
59:db:ca:89:f1:77:ee:46:ab:a0:3a:58:f1:b1:6b:80:23:bc:
a5:fa:58:94:02:f2:0c:01:4f:e0:50:47:af:e7:39:b4:f6:ca:
f4:91:b5:10
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWExLO8bPNjSBQtSrIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTIyNDE0MDA0MFoXDTI2MDMyNDEzMDA0MFowLzEtMCsGA1UEAxMk
ZDM2NTdlMWUtMjdjYS00ZTBmLWEzZjYtNjk2ZTNmNTVkNDIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3f4BlOKq7UrXE1FPI6AlXQWlulrpYULAbJY
7PEr0UYMVe9M6BNHKlXTwApQSjXZHx0dmQCbZM9a+f/pemfn4R/jnuGOXX+Wu9vB
AmeYz/6YyIGGLZVBxBLX6fhgyAib+3fY61xPFOQDeof93C4eqYMRc1Cl1Ev8wh5o
+2WCcwnSonq2T77HT3ZVJHzA7DzkpMg0drSk+OWlwUZy5RTyavZC2Lwk08aEtQ0n
Dn4ZVvmxz469tatuL7u/i1oDcFGRNXmXu1gaDrod/Ti/eDpr/O2oZR26tYnd3liN
rsPYRklEkFGirxE9CwJXP1B0aZrIUEKapXq7XKcOd2Yi9FqFFQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIkkEVB8S0lTaarlvpCCAUoqDQuyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjlmOWZmOGQtZGNlOS0z
MTM5LTlhZTctNTBmNWQyOTE0MTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAD2rHXylUCVnwFwD60+AQboOB3E8qFJnHhMenIOIhfS4S/CgeMmGqt
xC3gz5QgvVNgqksj9retHV6bB9cweoVPR09lBbpRlEY1o5uwfL3NyXAj45omSboC
Si+W2rX025M4CueTooMKGZNqlDD3k4of3rE34YvFInT2rBiLMCwMnBFJisLZu8p0
bSLlUKYCyMXY16b+kHGYZ5y1gQoThd0Kd429H/blyC7rm09N2FsV0OLEtR/QDa+5
Sgzr1x+9twcPWwWt5O78XwvDdrP2EJ07wxl+4Y3DIEVZ28qJ8XfuRqugOljxsWuA
I7yl+liUAvIMAU/gUEev5zm09sr0kbUQ
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:18:38 2026 by rpki-client