This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbaa2634-c105-36dd-a5af-e9683f6c572c.roa
File: dbaa2634-c105-36dd-a5af-e9683f6c572c.roa (raw, json)
Hash identifier: KUrCPyxAeoIGh8+t/NJPOJ8On0tT9k+BuQIEfF0WZJE=
Subject key identifier: 3E:20:F8:E2:74:4F:58:DB:CF:E6:9D:07:BE:22:F2:38:D7:C1:19:07
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584C4B3BE404FA8D5DB79ABB8500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbaa2634-c105-36dd-a5af-e9683f6c572c.roa
Signing time: Wed 24 Dec 2025 14:00:40 +0000
ROA not before: Wed 24 Dec 2025 14:00:40 +0000
ROA not after: Tue 24 Mar 2026 13:00:40 +0000
asID: 397212
IP address blocks: 192.58.128.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 26 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4b:3b:e4:04:fa:8d:5d:b7:9a:bb:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 24 14:00:40 2025 GMT
Not After : Mar 24 13:00:40 2026 GMT
Subject: CN=f7984eec-9917-4c81-8a30-8cad87286f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f2:14:93:1b:d2:a3:47:83:74:04:5a:e7:67:
ea:cd:24:6c:10:9b:3e:f4:42:7c:3e:94:9f:76:7c:
4d:ba:41:01:2a:e4:e1:0c:5f:2a:68:44:70:c1:be:
5e:e5:75:93:4d:c9:d7:e0:1b:78:9f:34:37:51:23:
83:4d:14:9b:1e:98:b6:8c:88:64:fa:03:41:10:5c:
8b:41:e9:3b:61:3a:1e:a7:2b:86:6f:67:1a:15:fc:
cb:8b:de:d4:3b:6b:20:8d:13:40:58:72:d2:b0:0f:
87:2a:b6:80:a8:d9:b5:b5:3b:7e:99:d4:e4:61:ef:
fd:01:37:cd:b6:66:36:66:79:8c:aa:ee:0b:93:78:
ca:81:7a:5f:00:d2:45:67:49:c8:9e:15:1e:af:ac:
38:1e:e4:49:df:6f:56:e1:5f:ce:4e:ca:ad:4a:3b:
3f:9b:f0:b8:26:3d:ac:d3:17:6a:19:7b:85:7e:a5:
66:27:ec:5f:11:82:9c:57:f7:92:04:3d:34:31:ab:
cf:87:75:51:75:38:6f:6a:cf:15:48:9a:bc:27:57:
37:1e:ee:a2:bd:32:3a:20:c8:94:78:0b:a2:6a:62:
3c:59:d1:df:0f:37:d3:e5:d2:01:63:0d:a3:d0:d9:
3d:61:8e:60:6d:11:ab:ce:1e:0a:ab:e9:f1:08:94:
cf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:20:F8:E2:74:4F:58:DB:CF:E6:9D:07:BE:22:F2:38:D7:C1:19:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbaa2634-c105-36dd-a5af-e9683f6c572c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.128.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:a6:92:68:9d:dd:19:d0:4c:c3:36:f3:6c:49:91:45:64:73:
f5:93:15:d7:bc:3f:13:33:d5:22:da:e7:87:e6:15:3a:25:d6:
68:48:dc:ba:86:e9:0f:d6:bf:ce:9e:70:aa:87:e7:43:de:fa:
fd:c9:27:0a:dc:90:2c:4d:d0:82:2c:ee:31:8e:e3:0c:20:40:
20:13:7b:36:58:e7:51:60:1c:fc:4d:69:62:93:01:d9:75:82:
4d:9e:f3:f0:34:60:92:b0:63:bf:69:47:79:99:64:a8:38:d5:
8f:5a:07:4f:01:20:19:99:94:cb:ac:48:66:0f:ad:06:2c:5b:
74:7f:99:1e:d2:cd:24:d8:0e:90:b9:e6:51:d8:91:b3:ac:96:
c5:0d:02:a9:00:16:3a:a3:84:cc:9e:26:f8:8f:e1:c6:c6:10:
aa:bb:a6:2d:29:5d:b2:55:1e:c7:36:b3:93:50:10:b7:5a:db:
f3:4d:f8:a7:36:a7:32:de:ee:2a:e0:ad:a8:4a:65:00:e2:e1:
d1:8a:91:ba:22:7d:b5:9e:ba:3b:e7:9d:3e:68:31:72:bf:e3:
c6:53:8d:2d:5d:9d:26:c1:d1:b5:92:3e:8e:a3:30:58:f8:0f:
f7:36:3e:c9:78:2d:c4:07:2b:fb:96:05:20:c1:39:a3:93:56:
c3:41:f4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:06:17 2025 by rpki-client