This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ced76a77-e853-3b99-a16f-f047bf73a04c.roa
File: ced76a77-e853-3b99-a16f-f047bf73a04c.roa (raw, json)
Hash identifier: xPNZfuY7xpmRC4SKN8YYR/bt8LDLvlWw3zd4QeZ6B2Y=
Subject key identifier: 91:51:2B:3E:47:81:C1:EC:BA:B7:8E:F2:40:16:9D:2C:00:2F:11:A1
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584C8046EA97F11CE0DD3F91BD80
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ced76a77-e853-3b99-a16f-f047bf73a04c.roa
Signing time: Mon 12 Jan 2026 14:00:40 +0000
ROA not before: Mon 12 Jan 2026 14:00:40 +0000
ROA not after: Sun 12 Apr 2026 13:00:40 +0000
asID: 399439
IP address blocks: 208.53.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:80:46:ea:97:f1:1c:e0:dd:3f:91:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Jan 12 14:00:40 2026 GMT
Not After : Apr 12 13:00:40 2026 GMT
Subject: CN=731cb774-25e8-46e7-9487-e9b3524068f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:a7:11:06:02:dd:ae:a0:58:71:fd:04:56:
95:3a:3b:ed:82:da:dd:2b:5e:73:45:09:58:36:f7:
a5:1d:c4:23:54:9f:1a:79:55:05:ff:bc:2c:32:e1:
76:94:7c:fb:f1:f8:75:b3:44:dc:3c:c8:39:3b:f6:
c2:ec:eb:44:51:1b:ff:b0:f9:b7:31:5d:bb:e3:38:
6f:1f:79:9f:63:8e:98:9b:d9:19:c7:b1:c0:81:be:
63:13:d9:03:8a:f6:46:27:df:99:bb:70:e6:bb:86:
4f:2e:3b:49:ff:df:92:8b:1f:47:19:33:b3:3c:f8:
79:24:b2:2e:e8:e3:3a:ea:00:63:8b:45:36:6e:87:
1d:f1:41:0a:02:58:03:4d:a7:aa:88:b1:19:26:1f:
7c:26:4a:82:c5:9c:3a:f2:8f:b2:0e:36:ac:9f:9f:
c1:2f:30:ed:ce:10:87:ac:56:49:00:f0:6e:07:2f:
78:ea:e7:dc:9e:e8:8c:3f:4c:21:78:f2:7b:83:5c:
4e:0d:34:08:1e:89:92:4a:74:14:39:14:b3:db:e6:
b3:af:14:82:55:e9:3a:22:73:9d:1e:83:6c:4e:1a:
bf:b6:59:c2:84:28:72:76:2f:8d:82:62:0f:f8:ea:
83:5b:62:5d:19:19:30:c8:f1:9c:a3:25:18:82:96:
e2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:51:2B:3E:47:81:C1:EC:BA:B7:8E:F2:40:16:9D:2C:00:2F:11:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ced76a77-e853-3b99-a16f-f047bf73a04c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
208.53.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:92:1f:9f:05:1e:31:f0:dd:8f:7e:ee:56:e7:33:a7:75:89:
49:53:b2:90:77:00:e0:5d:32:00:ac:6e:be:9f:ec:90:22:b4:
93:be:82:b4:7f:52:4b:6f:9d:c9:d8:26:21:fd:e5:35:fb:de:
cc:e5:e2:f8:b7:32:19:2b:92:23:11:e0:29:32:29:4f:32:bb:
50:5d:24:81:a4:65:9d:9b:40:d5:af:f4:14:ca:d6:00:e4:bb:
45:d2:50:8d:fa:5d:54:d1:4f:e4:17:ee:cb:2c:5f:fe:c3:e1:
67:1a:80:6d:e3:20:ef:70:94:46:ff:98:9b:c4:1c:0a:d8:b3:
ab:04:7c:6e:b4:78:b5:e8:99:0b:89:23:c9:a5:56:b9:41:29:
40:6c:67:02:6a:07:03:ba:ef:87:8f:6c:7b:ab:2e:7a:bc:b2:
0a:92:18:a5:80:a3:ab:1e:f2:ae:e4:57:5f:4e:bd:71:da:0f:
3a:57:8d:80:17:d2:df:80:2e:b7:a1:0c:a6:00:26:7a:d5:b7:
1e:2f:cf:62:ce:a9:25:78:3e:ca:90:83:a4:c8:2a:8b:35:c6:
47:9c:c6:c5:1f:dd:9e:89:d0:17:6f:eb:13:89:95:87:51:78:
8a:4e:f7:66:76:41:ed:88:1f:c2:b9:a3:03:7f:d8:91:a7:64:
26:cc:12:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARuqX8Rzg3T+RvYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk
NzMxY2I3NzQtMjVlOC00NmU3LTk0ODctZTliMzUyNDA2OGY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFinEQYC3a6gWHH9BFaVOjvtgtrdK15zRQlY
NvelHcQjVJ8aeVUF/7wsMuF2lHz78fh1s0TcPMg5O/bC7OtEURv/sPm3MV274zhv
H3mfY46Ym9kZx7HAgb5jE9kDivZGJ9+Zu3Dmu4ZPLjtJ/9+Six9HGTOzPPh5JLIu
6OM66gBji0U2bocd8UEKAlgDTaeqiLEZJh98JkqCxZw68o+yDjasn5/BLzDtzhCH
rFZJAPBuBy946ufcnuiMP0whePJ7g1xODTQIHomSSnQUORSz2+azrxSCVek6InOd
HoNsThq/tlnChChydi+NgmIP+OqDW2JdGRkwyPGcoyUYgpbiDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJFRKz5HgcHsureO8kAWnSwALxGhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvY2VkNzZhNzctZTg1My0z
Yjk5LWExNmYtZjA0N2JmNzNhMDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DXAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE2SH58FHjHw3Y9+7lbnM6d1iUlTspB3AOBdMgCsbr6f7JAitJO+grR/
UktvncnYJiH95TX73szl4vi3MhkrkiMR4CkyKU8yu1BdJIGkZZ2bQNWv9BTK1gDk
u0XSUI36XVTRT+QX7sssX/7D4WcagG3jIO9wlEb/mJvEHArYs6sEfG60eLXomQuJ
I8mlVrlBKUBsZwJqBwO674ePbHurLnq8sgqSGKWAo6se8q7kV19OvXHaDzpXjYAX
0t+ALrehDKYAJnrVtx4vz2LOqSV4PsqQg6TIKos1xkecxsUf3Z6J0Bdv6xOJlYdR
eIpO92Z2Qe2IH8K5owN/2JGnZCbMEl8=
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:21:03 2026 by rpki-client