This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f887a2c8-0f26-3b5e-8cff-d2702d75d14d.roa
File: f887a2c8-0f26-3b5e-8cff-d2702d75d14d.roa (raw, json)
Hash identifier: Gwidghzr0LJRqEzlYt8URMl1VDrTin8htoRVHwwibTE=
Subject key identifier: DD:B6:90:BB:D1:B5:3C:A0:41:B2:1B:27:24:FC:38:93:49:E8:D5:87
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584C8E3C6531428B6A9E79583680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f887a2c8-0f26-3b5e-8cff-d2702d75d14d.roa
Signing time: Sat 17 Jan 2026 14:00:38 +0000
ROA not before: Sat 17 Jan 2026 14:00:38 +0000
ROA not after: Fri 17 Apr 2026 13:00:38 +0000
asID: 396542
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:8e:3c:65:31:42:8b:6a:9e:79:58:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 17 14:00:38 2026 GMT
Not After : Apr 17 13:00:38 2026 GMT
Subject: CN=ea3975b0-ba03-473d-ad45-1a062c4a26c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:af:97:eb:a7:a1:75:c8:7a:00:70:d4:ad:
9d:1d:58:e7:fe:a0:7f:c7:65:b3:ec:ab:84:46:8f:
fb:f1:5c:87:d6:43:a0:57:6c:e0:55:bc:6e:7c:e9:
ae:67:04:03:e6:f2:dd:27:78:de:9c:c5:d6:5d:e3:
06:b5:53:f2:c8:87:1d:2a:a8:cf:f1:4f:34:9a:dd:
12:cc:b8:29:c0:8d:86:3b:b5:1f:d0:84:fe:d5:ae:
56:0b:ba:b0:89:5c:b4:c5:a5:47:76:f6:fe:b3:15:
17:2a:9c:5c:8a:3e:1a:1b:12:cd:0a:e4:0e:81:54:
9a:82:08:29:42:a9:22:1f:5f:34:07:8f:80:40:38:
b0:d7:0e:bb:cd:ba:36:cc:62:c4:25:0c:cc:9e:bc:
7a:3e:0e:80:eb:c3:a0:98:ba:af:99:aa:16:99:b8:
de:d0:46:0e:c0:6b:49:c5:79:a5:72:06:a1:b7:b1:
96:5f:42:8a:e0:30:e3:e9:33:e8:c6:77:30:85:d0:
e0:38:04:fe:41:d3:8e:53:6b:62:d3:06:24:f8:5e:
b5:53:50:c2:5f:cc:31:f3:01:26:f2:93:91:a6:23:
67:68:3e:36:4f:53:e9:cb:d3:31:e3:a6:07:e9:f1:
31:36:2e:06:7b:c0:10:71:e4:41:d4:8e:2a:ea:b0:
25:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B6:90:BB:D1:B5:3C:A0:41:B2:1B:27:24:FC:38:93:49:E8:D5:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f887a2c8-0f26-3b5e-8cff-d2702d75d14d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:0f:b9:ea:91:4c:e2:9b:6a:42:16:e8:53:86:e1:a4:82:f7:
37:e5:fc:45:c3:62:da:56:6d:f0:67:b5:4c:44:16:68:d4:fb:
45:6b:a7:8b:90:10:f6:ff:e4:e4:96:4e:e1:3e:7b:bc:93:68:
42:3b:a6:5b:2b:4c:dc:a3:85:ac:2f:34:29:84:23:b9:a9:d5:
96:3d:97:7d:e3:96:75:bb:49:41:81:4d:62:c1:e5:aa:04:71:
b1:bd:0e:69:73:7c:e1:5c:bd:78:35:d7:03:bc:f2:e8:1c:0a:
21:c2:36:cd:0e:a1:19:2f:08:c7:83:9d:74:35:2e:e8:57:41:
9d:6e:ec:42:4b:35:58:36:ec:5b:e7:c5:70:43:80:1a:bd:61:
a3:50:d4:4d:ba:77:40:27:7a:6b:2d:77:a4:7c:f2:f7:e6:06:
15:ef:31:26:7a:40:5a:02:3b:70:d4:6c:94:83:a8:be:c6:3b:
ef:ea:ff:40:c7:ae:b3:93:e9:ea:dc:87:8e:88:e4:22:dd:9d:
de:f9:18:94:53:f2:3c:fb:80:67:8d:c1:a6:06:af:9a:cf:72:
a8:a7:94:f3:72:5e:a9:e7:3b:54:ec:27:6e:20:93:0d:42:bb:
98:f5:49:00:12:fe:b7:54:b5:e5:64:d2:6c:fa:46:36:ea:31:
ed:06:2b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:13:07 2026 by rpki-client