This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa File: cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa (raw, json) Hash identifier: WPBX4fEXEyzgFp7+vqazQb+n8g69VmLi/4sRdEqtLyw= Subject key identifier: AB:2E:52:6C:C2:6F:60:4E:EF:4B:52:60:02:18:9D:C8:E5:9C:F4:D9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C4B3BCE0ED525EE9AFA5ED040 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa Signing time: Wed 24 Dec 2025 14:00:40 +0000 ROA not before: Wed 24 Dec 2025 14:00:40 +0000 ROA not after: Tue 24 Mar 2026 13:00:40 +0000 asID: 396600 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4b:3b:ce:0e:d5:25:ee:9a:fa:5e:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 24 14:00:40 2025 GMT Not After : Mar 24 13:00:40 2026 GMT Subject: CN=e1d84d96-51fb-42e3-80b4-039f140514e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bd:9c:56:57:12:8c:34:fc:2b:f0:76:7e:84: 91:e5:de:63:3e:0f:fc:e8:e1:48:47:bb:70:bd:16: 1b:04:9a:50:3c:c1:bf:c8:2f:78:a9:3c:b3:46:12: 0f:8d:51:8a:02:1d:f2:c0:f9:1c:a3:37:cb:ea:f8: 9c:dc:87:ad:9e:0a:96:a2:48:6f:7c:f6:46:78:8c: 25:84:54:ff:2e:5f:da:fc:06:e0:70:10:de:d0:14: 80:f7:89:97:fb:97:e6:66:fa:35:ae:c5:b7:09:90: 57:9e:a7:a5:bb:db:68:46:8c:15:c0:c9:5c:1e:6b: f8:8a:c4:df:a7:80:6a:f4:c8:d4:9d:ca:8c:6b:26: 67:d3:32:5d:9f:fe:21:71:43:6c:d7:59:5a:91:58: e5:a6:06:85:46:68:90:76:a6:21:81:aa:8d:8e:43: eb:3f:a1:24:36:dd:2e:51:35:fd:5f:5a:1c:f2:be: 72:47:b8:26:c1:a7:a0:d6:10:f8:77:4d:90:b4:08: ea:c8:de:a9:d3:6b:49:10:b2:37:50:e2:55:84:0b: 7c:8a:b8:4e:f3:99:36:9a:e4:95:7b:ed:36:09:21: 87:22:35:ac:44:23:d1:2a:cd:a3:79:9b:10:d6:21: 38:cc:55:c5:5b:1c:3f:22:d2:7e:3e:ae:47:0f:c3: 7a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2E:52:6C:C2:6F:60:4E:EF:4B:52:60:02:18:9D:C8:E5:9C:F4:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:c0:9b:33:50:34:77:83:a8:78:cb:eb:45:86:c9:51:8f:1f: ba:88:86:d9:5d:6f:bf:9d:4a:f3:7c:6f:99:88:f9:7a:99:97: 53:db:d4:36:37:a7:ab:f6:8f:d0:e0:6e:83:ef:f3:ce:80:25: f6:2b:c4:73:ef:31:31:52:26:ad:ce:77:aa:23:0d:dd:d0:70: 1a:f6:c2:a1:dd:32:c3:fc:ca:0d:6a:e3:84:1f:5b:50:d8:dc: c3:55:2d:e8:6f:27:9c:ef:c7:a9:21:c8:df:55:84:e3:ce:fb: b9:0d:ed:2a:32:97:ac:37:b4:6e:66:a7:00:d9:9d:e2:79:c7: b7:e8:ab:77:2e:08:53:51:ff:ac:98:54:22:17:c5:05:39:1f: a3:99:01:2d:4d:18:a3:01:3a:54:98:28:5c:47:67:b3:8b:63: 07:7c:16:55:1d:f1:95:e3:ad:e4:39:d2:9e:bd:80:00:dd:8c: ce:d2:3e:e9:3a:f2:46:e9:94:c8:28:ce:4d:54:55:2a:03:f5: 01:b0:61:fd:66:6a:4f:1f:d1:c6:9d:0c:92:9b:6a:9d:64:93: 6d:67:f8:0f:56:70:be:18:74:c8:45:8f:13:1f:e5:b6:a1:af: 71:7e:ff:3f:31:28:8f:32:60:c5:e5:52:56:d1:da:59:7b:7a: 40:93:c9:18 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWExLO84O1SXumvpe0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIyNDE0MDA0MFoXDTI2MDMyNDEzMDA0MFowLzEtMCsGA1UEAxMk ZTFkODRkOTYtNTFmYi00MmUzLTgwYjQtMDM5ZjE0MDUxNGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1b2cVlcSjDT8K/B2foSR5d5jPg/86OFIR7tw vRYbBJpQPMG/yC94qTyzRhIPjVGKAh3ywPkcozfL6vic3IetngqWokhvfPZGeIwl hFT/Ll/a/AbgcBDe0BSA94mX+5fmZvo1rsW3CZBXnqelu9toRowVwMlcHmv4isTf p4Bq9MjUncqMayZn0zJdn/4hcUNs11lakVjlpgaFRmiQdqYhgaqNjkPrP6EkNt0u UTX9X1oc8r5yR7gmwaeg1hD4d02QtAjqyN6p02tJELI3UOJVhAt8irhO85k2muSV e+02CSGHIjWsRCPRKs2jeZsQ1iE4zFXFWxw/ItJ+Pq5HD8N6+wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKsuUmzCb2BO70tSYAIYncjlnPTZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2YwOTg1NGUtNGI4Ni0z NzI1LWI0ZGEtMWQzNGY2YWM1NGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAWwJszUDR3g6h4y+tFhslRjx+6iIbZXW+/nUrzfG+ZiPl6mZdT29Q2 N6er9o/Q4G6D7/POgCX2K8Rz7zExUiatzneqIw3d0HAa9sKh3TLD/MoNauOEH1tQ 2NzDVS3obyec78epIcjfVYTjzvu5De0qMpesN7RuZqcA2Z3iece36Kt3LghTUf+s mFQiF8UFOR+jmQEtTRijATpUmChcR2ezi2MHfBZVHfGV463kOdKevYAA3YzO0j7p OvJG6ZTIKM5NVFUqA/UBsGH9ZmpPH9HGnQySm2qdZJNtZ/gPVnC+GHTIRY8TH+W2 oa9xfv8/MSiPMmDF5VJW0dpZe3pAk8kY -----END CERTIFICATE-----Generated at Sun Jan 25 20:18:47 2026 by rpki-client