This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1b1f431a-cc2d-3476-9010-a01cf18e3242.roa
File: 1b1f431a-cc2d-3476-9010-a01cf18e3242.roa (raw, json)
Hash identifier: /+BasRvQNRUdc15Idgn2KArPcGGVxWdgyfu0w/Zxuwo=
Subject key identifier: 64:77:52:55:6F:40:D1:3A:6D:F1:C3:3E:B6:20:F8:66:16:F9:77:BD
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584C9C31A322098B9DF0DD07C600
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1b1f431a-cc2d-3476-9010-a01cf18e3242.roa
Signing time: Thu 22 Jan 2026 14:00:37 +0000
ROA not before: Thu 22 Jan 2026 14:00:37 +0000
ROA not after: Wed 22 Apr 2026 13:00:37 +0000
asID: 8987
IP address blocks: 130.137.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:9c:31:a3:22:09:8b:9d:f0:dd:07:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Jan 22 14:00:37 2026 GMT
Not After : Apr 22 13:00:37 2026 GMT
Subject: CN=c4a75555-5686-4754-a30f-205e0e4585d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:65:dd:0e:3c:18:0f:00:da:1d:8d:17:0e:4c:
66:64:6e:f9:59:ce:a1:33:8b:8a:66:ed:ec:73:ce:
7c:fa:60:31:72:c0:11:fb:fd:18:7f:a9:3d:75:94:
c1:d3:15:60:7b:f8:a8:49:0c:72:d0:70:1d:c8:2c:
ba:20:2e:ec:f1:fd:d7:63:59:ce:6e:03:e8:3c:78:
88:11:b5:cd:e6:94:50:67:11:92:59:4c:9f:a7:80:
c2:8a:0d:fd:dc:20:fb:e1:b2:c7:e5:1f:6b:dc:ba:
fd:4e:f6:33:39:8d:35:f9:e6:fc:07:bf:e4:ef:2f:
a3:8d:02:af:98:92:b6:e9:32:b7:de:50:7e:83:76:
ec:69:ce:df:b7:01:8f:9c:ca:39:a9:ad:60:9f:a6:
f0:5c:7e:26:dc:b1:0d:d6:ff:e3:27:63:a1:64:95:
26:ef:56:f9:45:d5:0e:87:06:b6:60:3d:fb:ab:1f:
72:4e:59:76:77:e1:30:0e:df:23:4c:a3:64:21:a7:
03:26:7c:7d:4f:5c:68:2a:de:a1:5e:cb:ab:b4:23:
29:89:e4:c9:88:2a:d4:6d:ce:29:aa:7b:dc:87:09:
95:ed:bc:44:e8:c4:d8:16:a4:10:7d:a6:a1:4f:3a:
07:93:d8:61:52:bc:41:de:7e:e7:24:75:7e:86:9d:
d4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:77:52:55:6F:40:D1:3A:6D:F1:C3:3E:B6:20:F8:66:16:F9:77:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1b1f431a-cc2d-3476-9010-a01cf18e3242.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:a6:79:8e:ef:7a:ea:ea:71:ac:da:26:e9:f9:83:e3:a8:a8:
34:4b:c8:64:ed:93:cd:4c:5f:6b:76:79:a4:59:aa:6b:a9:93:
ca:34:19:b2:69:b8:be:d7:cd:e7:24:dc:e8:29:60:84:4c:98:
04:30:3b:66:54:ef:ee:5e:74:59:2e:8b:71:f8:45:8d:a5:1f:
c3:d6:ef:45:19:5e:f5:54:8d:f7:ec:3f:60:40:68:2c:0d:7b:
9d:37:64:ae:c5:2c:cd:cf:15:a2:dd:ba:cd:0c:b0:7d:d3:ec:
87:c0:07:8a:2f:f2:d3:a1:23:ca:96:b1:08:a7:9b:03:ec:f9:
ea:2a:4a:03:4b:c7:22:c4:df:ed:c6:ad:b7:4d:4a:c5:67:88:
1b:d6:a4:2d:71:02:15:77:e4:6c:a3:7d:cd:66:9c:81:46:70:
a3:86:1f:c4:79:4b:08:d1:32:ad:b4:93:c4:0d:4c:bb:27:6c:
6e:e9:fd:31:9b:fc:ad:92:f5:7e:a0:39:3a:e8:98:16:b4:f1:
79:3c:4a:c7:0a:20:dc:9d:21:8e:c2:17:50:25:ec:6c:c5:49:
72:7e:35:00:7d:18:d1:33:6e:2c:cd:ac:54:8e:3d:ab:54:73:
29:21:2d:14:9f:b5:e8:8d:be:5c:37:b1:e7:8d:46:b6:e0:0f:
fa:b4:e3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:42:40 2026 by rpki-client