This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2df51bd2-8f35-3784-a672-9288ad204a5e.roa
File: 2df51bd2-8f35-3784-a672-9288ad204a5e.roa (raw, json)
Hash identifier: C47xgjwXDWfSuvN2XOjRZDkOtNm2y5irxJWfXM9Rhf8=
Subject key identifier: 88:8E:EC:C2:0C:33:63:2F:C4:F1:32:DA:55:EB:0D:40:79:74:DA:E6
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584C9C31A21CBEBEB04CF62777C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2df51bd2-8f35-3784-a672-9288ad204a5e.roa
Signing time: Thu 22 Jan 2026 14:00:37 +0000
ROA not before: Thu 22 Jan 2026 14:00:37 +0000
ROA not after: Wed 22 Apr 2026 13:00:37 +0000
asID: 14618
IP address blocks: 130.137.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:9c:31:a2:1c:be:be:b0:4c:f6:27:77:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Jan 22 14:00:37 2026 GMT
Not After : Apr 22 13:00:37 2026 GMT
Subject: CN=97334b7c-f867-47e9-89c9-54f82a0ceccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f1:6a:b1:e7:3b:47:85:89:fb:0b:ad:c5:9f:
23:bd:38:36:48:4b:6c:c0:c3:78:e3:ac:ce:d0:eb:
38:c9:5f:df:77:1c:ec:a0:a5:10:0e:de:1b:9c:8a:
b1:8e:76:cb:86:0d:67:d4:fb:8e:6e:1a:67:0c:16:
13:9e:55:c5:d0:e0:ff:6e:10:95:92:35:16:bb:9a:
c5:10:a9:0d:80:32:80:95:77:f6:3c:de:61:da:99:
53:ea:c9:6f:a4:ee:bf:6f:f5:08:54:1e:f9:be:4f:
64:f5:c2:85:99:8a:46:dc:26:bf:bd:8d:9f:9f:ec:
72:93:af:61:72:75:43:17:d7:3b:87:28:51:64:5f:
3f:e3:d5:03:ed:e1:26:f2:ec:08:ba:8c:96:e7:17:
12:9d:03:cd:13:ec:58:4b:58:21:cd:e7:e4:d7:94:
e1:39:32:dc:43:0b:c7:0f:4f:7d:3d:29:6f:d6:93:
9e:a2:67:f9:03:fe:26:e8:20:ef:0f:1e:fe:a8:d5:
17:26:72:9f:50:26:07:9d:15:70:5f:1b:10:92:1d:
c6:41:06:9f:d3:89:81:40:be:b6:37:61:f2:26:66:
c2:fb:7d:b0:f6:1d:f4:99:12:33:14:82:e5:76:4c:
74:15:74:cf:fb:c5:0a:fa:b7:d3:92:72:fb:b3:bf:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8E:EC:C2:0C:33:63:2F:C4:F1:32:DA:55:EB:0D:40:79:74:DA:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2df51bd2-8f35-3784-a672-9288ad204a5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:42:db:a0:b4:98:6f:51:41:38:83:65:2e:d5:77:4e:49:2f:
86:fd:1c:6d:fd:39:14:bb:1f:71:90:e2:f8:c2:68:6c:9d:f8:
4b:0c:f5:51:dd:ca:26:ba:55:ac:43:21:b8:ac:76:89:b1:bc:
f8:70:da:48:80:e1:b9:8c:80:20:79:a0:89:23:fc:4b:52:b2:
ff:7d:e0:bc:39:2d:6b:9d:20:91:a2:81:bb:29:00:f7:d6:63:
a1:4a:53:6b:fe:4f:83:8a:24:e3:43:63:50:b0:73:79:31:31:
04:68:6e:1e:0f:6f:1d:35:f1:2f:42:e0:3a:b6:16:1d:cd:40:
33:95:15:d6:7c:ed:cf:25:87:0b:1f:d5:90:43:ad:37:c6:bd:
4e:88:21:6b:33:60:ce:ff:52:5d:34:29:45:f3:1e:23:5d:cb:
27:e8:ab:5c:cf:f7:56:1a:cd:a4:71:80:70:16:dc:90:b1:d9:
44:42:41:2d:dc:36:78:c1:83:8b:00:bc:bd:1e:73:9c:4e:21:
c4:a2:b3:61:bf:86:64:6f:a1:21:6f:12:05:86:73:6a:ab:a1:
41:dc:2a:8d:40:b4:69:35:a1:ff:96:22:fe:e1:74:41:35:f7:
a6:d2:32:a0:be:6b:80:a7:a6:1a:84:78:1b:17:7a:c7:98:46:
80:f9:91:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:58:10 2026 by rpki-client