This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2c998f78-e91f-34b3-b1fb-62f532bbc284.roa
File: 2c998f78-e91f-34b3-b1fb-62f532bbc284.roa (raw, json)
Hash identifier: cXhR/8ab81rlPzBj0mvDY1R3sE4N9wGpXzB+1Pcpj70=
Subject key identifier: 41:3E:84:FF:E0:4A:01:81:C5:BC:2A:4A:A6:BF:DA:6F:44:80:E9:9F
Certificate issuer: /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial: 010D0C9F4328584C69F163BEFD0973E85481BF80
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2c998f78-e91f-34b3-b1fb-62f532bbc284.roa
Signing time: Sun 04 Jan 2026 14:00:38 +0000
ROA not before: Sun 04 Jan 2026 14:00:38 +0000
ROA not after: Sat 04 Apr 2026 13:00:38 +0000
asID: 30059
IP address blocks: 216.68.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:69:f1:63:be:fd:09:73:e8:54:81:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
Validity
Not Before: Jan 4 14:00:38 2026 GMT
Not After : Apr 4 13:00:38 2026 GMT
Subject: CN=bab5b97d-0e7c-413e-8fc4-aff945ce05f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fe:69:3d:77:04:d7:d4:35:f1:ed:13:e0:af:
94:db:f2:e2:63:ba:f7:6a:c7:e6:1f:8b:43:7e:c9:
46:32:07:11:c9:a2:a4:64:97:6b:34:ef:b5:0d:42:
50:93:32:25:f5:5d:54:8c:d7:fa:60:57:28:2e:ef:
48:9c:fc:00:8d:bd:a6:fc:39:87:0a:be:db:90:f4:
6a:e9:77:d6:75:25:3f:17:37:90:7a:c2:cd:1f:4a:
96:7a:3c:0a:e8:11:1f:11:11:01:0e:93:89:e7:53:
88:14:ab:b9:e5:d8:1e:fe:d3:62:e8:30:7e:11:12:
5b:5f:6e:16:8b:d2:5b:ea:30:b4:8b:29:e1:b6:3a:
7f:45:49:e0:12:14:13:f3:37:e6:4a:c3:9d:49:44:
80:6a:1c:7f:a3:f0:a9:d7:42:5d:55:e2:85:aa:70:
21:e4:67:b5:70:67:a9:ad:eb:15:9e:99:78:84:b6:
8f:3e:75:77:e0:17:cf:a0:47:bd:71:c4:71:2f:38:
46:7d:c8:60:1e:dd:08:9a:de:ab:29:af:7d:32:74:
69:15:4e:5d:07:2a:dd:a0:c0:ae:c4:82:4f:5b:1c:
f8:60:10:fa:f4:b0:a1:fe:34:5f:d4:7b:b1:61:33:
5a:83:2e:c8:62:0c:8f:03:11:ac:54:c1:db:3f:37:
93:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3E:84:FF:E0:4A:01:81:C5:BC:2A:4A:A6:BF:DA:6F:44:80:E9:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2c998f78-e91f-34b3-b1fb-62f532bbc284.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
X509v3 Authority Key Identifier:
keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
sbgp-ipAddrBlock: critical
IPv4:
216.68.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:20:19:7b:c4:3c:f4:7b:a1:39:c3:f3:2c:b0:3b:94:9d:36:
4f:9f:45:43:70:88:74:37:a3:d4:77:7c:bf:95:be:96:58:e4:
9e:29:fe:5b:20:5e:e1:73:bd:a3:c5:ce:ff:e3:60:aa:5c:9d:
1a:cd:cf:05:d2:6e:95:e2:7a:d8:9f:4b:41:43:aa:b7:97:bb:
a9:76:cd:8e:42:f9:c3:5f:98:f6:32:6d:e7:43:d2:0d:81:e9:
e2:e8:61:62:f1:67:ef:2d:c6:ac:96:6b:d9:ab:b5:1a:5c:58:
64:29:dd:21:3b:ea:ff:9c:74:bf:34:92:ff:58:66:d7:1d:e9:
8b:14:b7:49:71:83:00:49:4b:4c:06:78:30:81:38:2d:ca:8f:
a9:65:d4:94:77:b5:0d:e6:83:2e:e2:35:14:3b:37:28:eb:3f:
1c:f1:ad:5a:0e:61:64:60:5e:45:09:c7:a2:2d:56:42:36:87:
a3:b5:08:e1:d2:f1:a4:dd:6e:70:6a:cb:be:aa:c1:02:1d:ff:
02:d6:23:b5:f4:f4:3a:bd:d7:7e:ab:dc:63:54:f4:2f:e6:4c:
69:d8:91:52:ae:d1:b9:53:0a:02:50:b7:5b:ae:15:84:17:cb:
9c:d1:ec:2c:db:0d:26:08:99:7a:0f:02:e9:c7:d4:47:18:4e:
22:e7:01:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExp8WO+/Qlz6FSBv4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQz
YTBjMB4XDTI2MDEwNDE0MDAzOFoXDTI2MDQwNDEzMDAzOFowLzEtMCsGA1UEAxMk
YmFiNWI5N2QtMGU3Yy00MTNlLThmYzQtYWZmOTQ1Y2UwNWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv5pPXcE19Q18e0T4K+U2/LiY7r3asfmH4tD
fslGMgcRyaKkZJdrNO+1DUJQkzIl9V1UjNf6YFcoLu9InPwAjb2m/DmHCr7bkPRq
6XfWdSU/FzeQesLNH0qWejwK6BEfEREBDpOJ51OIFKu55dge/tNi6DB+ERJbX24W
i9Jb6jC0iynhtjp/RUngEhQT8zfmSsOdSUSAahx/o/Cp10JdVeKFqnAh5Ge1cGep
resVnpl4hLaPPnV34BfPoEe9ccRxLzhGfchgHt0Imt6rKa99MnRpFU5dByrdoMCu
xIJPWxz4YBD69LCh/jRf1HuxYTNagy7IYgyPAxGsVMHbPzeTYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEE+hP/gSgGBxbwqSqa/2m9EgOmfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYz
OTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvMmM5OThmNzgtZTkxZi0z
NGIzLWIxZmItNjJmNTMyYmJjMjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQ2MzkzNjYtYzA0NC00NTZlLWI4
YzgtMGRlMDRhNTQzYTBjLzFkNjM5MzY2LWMwNDQtNDU2ZS1iOGM4LTBkZTA0YTU0
M2EwYy5jcmwwHwYDVR0jBBgwFoAU/DVXyQ49tRkFhaSn5xDpZWoEZ4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUw
NGE1NDNhMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2EToMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8gGXvEPPR7oTnD8yywO5SdNk+fRUNwiHQ3o9R3fL+VvpZY5J4p/lsg
XuFzvaPFzv/jYKpcnRrNzwXSbpXietifS0FDqreXu6l2zY5C+cNfmPYybedD0g2B
6eLoYWLxZ+8txqyWa9mrtRpcWGQp3SE76v+cdL80kv9YZtcd6YsUt0lxgwBJS0wG
eDCBOC3Kj6ll1JR3tQ3mgy7iNRQ7NyjrPxzxrVoOYWRgXkUJx6ItVkI2h6O1COHS
8aTdbnBqy76qwQId/wLWI7X09Dq9136r3GNU9C/mTGnYkVKu0blTCgJQt1uuFYQX
y5zR7CzbDSYImXoPAunH1EcYTiLnAeA=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:11:27 2026 by rpki-client