This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfed3926-df38-31bc-9681-6042bfbb2859.roa
File: cfed3926-df38-31bc-9681-6042bfbb2859.roa (raw, json)
Hash identifier: ECqXwrYzJsVrmmN2HpTUE1hMF5KQPpO38oRo6EmPAgY=
Subject key identifier: CC:4A:3E:F8:CA:E2:0B:2A:64:E2:D1:D3:B7:FD:57:D3:23:05:7F:D7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584C4B3BC67D5703BA6D7EDB5FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfed3926-df38-31bc-9681-6042bfbb2859.roa
Signing time: Wed 24 Dec 2025 14:00:40 +0000
ROA not before: Wed 24 Dec 2025 14:00:40 +0000
ROA not after: Tue 24 Mar 2026 13:00:40 +0000
asID: 396543
IP address blocks: 192.58.128.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 01 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4b:3b:c6:7d:57:03:ba:6d:7e:db:5f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 24 14:00:40 2025 GMT
Not After : Mar 24 13:00:40 2026 GMT
Subject: CN=ada2be57-52a2-4c4f-ace6-db81ab2c43ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c8:ea:55:e4:0c:fb:e0:f9:83:a6:e8:ea:ed:
4b:9a:4b:9d:d1:8d:9a:41:01:95:22:28:6f:86:20:
21:f8:4b:2c:b6:72:36:ee:0a:31:ec:d4:fd:88:e0:
16:57:c2:a4:c2:36:c3:e3:df:84:90:33:52:45:6a:
85:22:40:7f:2b:00:8c:a5:8d:98:66:6e:0c:03:df:
cf:d9:3c:08:b8:db:7c:18:f3:99:d2:fd:99:f8:60:
f4:35:2b:23:96:8c:1a:27:dd:07:1b:cf:a1:0b:81:
49:b9:ce:8a:47:2d:e6:8b:94:3a:2a:c5:fa:5a:ad:
be:c4:01:05:00:a1:8e:89:35:c2:df:4d:fe:b2:7d:
88:e1:3c:70:11:54:db:e2:75:6c:15:6a:9b:05:01:
5f:65:84:7e:c3:47:19:8c:ab:3f:e4:ac:b0:cb:9e:
b3:18:5b:ff:bd:a3:b3:62:c0:07:e4:e7:3a:4a:a2:
8e:62:7f:1e:d2:b4:21:c2:88:bb:03:7e:05:e2:28:
23:db:22:a4:24:e1:c9:2d:b6:c7:96:61:47:a2:66:
7b:ec:1c:6f:9d:7a:8c:4f:0c:8e:8f:a7:9b:94:59:
41:9f:09:81:97:7b:1e:93:99:f3:dc:53:0d:30:d4:
90:04:93:73:72:3e:f6:93:f0:cd:63:30:60:0d:62:
84:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4A:3E:F8:CA:E2:0B:2A:64:E2:D1:D3:B7:FD:57:D3:23:05:7F:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfed3926-df38-31bc-9681-6042bfbb2859.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:af:8a:6c:2e:f7:32:f0:ce:0c:8f:a0:0a:b9:43:f4:c7:c0:
51:b6:2c:cc:61:3a:1e:73:b2:94:d9:1c:7b:a8:b0:ca:ac:f0:
17:2a:e5:a6:db:4e:ba:b9:dc:7f:77:d3:c5:90:ea:75:92:4e:
7f:14:55:cf:49:51:b9:81:3d:0b:a5:a1:73:66:54:5b:0e:86:
6b:a0:77:4c:4e:c8:0f:7a:40:05:ed:42:65:3c:5c:e6:63:4a:
de:0e:4f:ba:5d:a5:04:d5:03:d0:84:e0:49:2c:06:d5:1a:23:
df:ff:30:55:fc:77:2d:3d:66:12:f6:e7:31:4c:75:8e:cf:94:
11:49:db:d6:1f:cf:87:5d:78:68:32:c9:e3:7e:9d:fe:cc:c1:
11:fe:f6:4a:7d:85:50:46:98:ea:39:7f:02:bd:02:67:b6:9d:
e7:fe:27:56:7e:13:a0:22:b4:e3:9f:cf:48:71:97:9f:e4:a1:
46:69:a8:d4:c7:d4:e5:8f:63:4d:79:fa:99:19:9a:f6:7a:3b:
fb:23:ee:f9:f5:5d:b5:9d:21:72:62:b2:af:7d:f3:d4:64:25:
31:21:89:5b:bc:26:41:35:ad:76:48:b8:54:8b:02:c6:f7:a4:
ad:4b:11:f8:05:62:d3:b3:22:b5:e8:29:2b:7d:bf:0e:2e:36:
3a:e6:1d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 14:55:57 2025 by rpki-client