This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb9dfec-b85d-3860-978d-511ab6c14113.roa
File: bfb9dfec-b85d-3860-978d-511ab6c14113.roa (raw, json)
Hash identifier: om3Xm1HufTeh1KxYgq4PWOeem6FFpONH0I/GfNfYWbw=
Subject key identifier: C5:68:9D:14:C8:D9:06:E0:E2:B2:E4:FE:60:B0:9C:33:27:21:69:1D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584C37B10C4EB64148E13DF95FA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb9dfec-b85d-3860-978d-511ab6c14113.roa
Signing time: Wed 17 Dec 2025 14:00:39 +0000
ROA not before: Wed 17 Dec 2025 14:00:39 +0000
ROA not after: Tue 17 Mar 2026 13:00:39 +0000
asID: 396567
IP address blocks: 192.43.172.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:37:b1:0c:4e:b6:41:48:e1:3d:f9:5f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 17 14:00:39 2025 GMT
Not After : Mar 17 13:00:39 2026 GMT
Subject: CN=4b2e767d-629f-423a-ac36-1fb7bbdcf02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:54:89:87:55:fb:f7:6c:ff:b0:d9:d3:bb:b9:
a1:36:c2:af:4d:09:04:38:fc:7e:e7:38:61:be:51:
95:2f:5c:4c:3a:3d:ce:5f:19:fc:33:75:b9:fa:05:
47:eb:7b:76:da:6b:1b:e1:38:15:ad:b6:3a:f8:e0:
81:a1:b4:11:b3:d5:23:4e:db:e4:70:45:c7:ef:4a:
f3:05:e9:77:24:c1:38:bb:7c:64:1d:8c:51:4e:93:
75:ec:24:02:6a:0c:31:bb:24:b7:eb:61:63:7b:6c:
87:78:80:1e:8c:c0:2c:ad:3c:38:a3:c3:00:a7:d0:
12:4e:5a:94:2d:a8:de:13:d6:67:05:99:db:2b:da:
67:33:57:20:10:37:6c:f2:97:15:45:b1:68:0d:45:
3c:b7:31:91:0c:b4:76:90:0f:35:03:75:c6:b4:e2:
d8:15:9d:56:9b:d1:b6:c8:80:83:fa:47:d7:27:ec:
ac:bf:3c:ad:14:e2:72:65:59:c2:d7:3c:ac:8b:a5:
43:37:20:c4:40:6d:3c:28:1c:98:7d:59:06:49:77:
e6:5b:d0:c9:03:b7:23:87:11:2d:f7:40:38:a1:88:
03:cb:92:86:56:5d:a7:d1:35:af:4a:38:86:dd:56:
d9:b8:bb:40:5f:fb:2c:b7:e6:b8:6a:e5:16:14:8f:
64:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:68:9D:14:C8:D9:06:E0:E2:B2:E4:FE:60:B0:9C:33:27:21:69:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb9dfec-b85d-3860-978d-511ab6c14113.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:64:3d:aa:d2:6c:46:69:c3:33:ab:37:b1:3a:bb:98:73:00:
df:df:ed:0d:60:01:b3:0c:bc:f4:a4:b2:eb:c9:86:9f:1f:f9:
84:84:4b:1b:f0:52:c0:66:21:b9:9e:97:6a:6c:a2:f6:3c:26:
83:a5:d3:98:37:1c:bd:f5:3a:92:e9:b5:5e:84:fa:2a:f7:9a:
51:61:40:5e:ec:11:e6:73:e7:85:94:0e:62:06:99:cc:46:94:
5e:2e:11:23:53:7d:f3:99:8a:fd:f3:91:32:b3:7c:fc:17:56:
0d:60:8c:c4:4e:71:9f:b7:f8:ed:fd:57:5e:dd:0d:a9:79:eb:
86:87:ee:c3:fe:b4:7e:fa:39:38:4e:b0:27:73:46:3d:00:d0:
f2:bb:d9:25:df:9c:08:60:9b:e9:36:bd:48:a8:06:2d:03:03:
d6:e6:26:8d:64:fc:40:da:68:bc:ef:b1:a0:10:95:47:8f:71:
01:5c:da:6d:2e:46:a9:82:99:94:9e:ad:10:31:37:99:19:19:
a3:20:6d:34:fe:e7:e6:8f:a8:37:fb:59:cf:c0:7d:04:4e:be:
df:85:f2:2a:70:f0:25:37:b5:10:ec:4b:eb:b4:75:59:83:4e:
e1:73:49:5f:1b:bd:a2:90:98:56:70:3d:86:6f:7c:02:fb:6c:
f6:5f:bc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:52:11 2026 by rpki-client