This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff5a8db9-0400-3c63-8de4-6dd8489a1368.roa
File: ff5a8db9-0400-3c63-8de4-6dd8489a1368.roa (raw, json)
Hash identifier: L+F4IY1wJy6rPBVsMRJIcl9ytxqmdvVHwYpdxu9bg3Y=
Subject key identifier: 4D:EA:B3:90:B5:0A:49:8C:9D:5E:6B:01:3D:03:A5:C3:D6:2A:84:5D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584C34E66501C46F1BD366821000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff5a8db9-0400-3c63-8de4-6dd8489a1368.roa
Signing time: Tue 16 Dec 2025 14:00:38 +0000
ROA not before: Tue 16 Dec 2025 14:00:38 +0000
ROA not after: Mon 16 Mar 2026 13:00:38 +0000
asID: 396554
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:34:e6:65:01:c4:6f:1b:d3:66:82:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 16 14:00:38 2025 GMT
Not After : Mar 16 13:00:38 2026 GMT
Subject: CN=01b7a1f3-94c9-4963-ada5-d87a0e2cb02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:45:4c:b7:45:60:3e:a1:fa:31:4d:b4:a7:ae:
6b:dd:a4:10:4f:1e:2b:2c:27:19:6d:08:a2:10:2c:
ca:4a:3c:e1:64:96:f2:cb:56:28:8b:5d:3b:f2:5c:
31:bc:7b:ba:ae:40:16:8b:21:1c:16:15:e5:7a:60:
db:0c:80:b9:8f:c2:4c:92:a7:aa:65:49:f6:97:4b:
75:4e:f0:83:e3:1e:d5:eb:18:20:f1:0c:6b:9a:f4:
b8:fc:e9:47:fa:48:e6:e7:ba:64:00:a4:5d:3c:b8:
97:74:dc:58:3a:af:83:f2:7d:0b:79:48:4c:bd:df:
31:2e:75:5d:d6:07:cd:9f:63:44:59:96:59:65:7b:
85:c5:bd:dc:12:37:d9:06:12:1f:32:5c:fc:fd:f0:
37:26:a2:63:0d:b0:11:d1:0e:bc:f7:de:c5:1e:c5:
90:15:56:9d:07:89:28:c3:8a:11:0c:fc:37:81:5f:
fc:d8:18:1c:ee:26:28:f6:d6:d0:a3:bd:42:c5:55:
97:4d:fa:49:8d:fb:3e:48:4a:34:a0:d7:77:81:d9:
88:ae:f9:9c:ae:75:94:8c:67:f4:27:70:b1:02:22:
e1:b1:3d:56:78:2b:d9:4a:34:12:ab:e8:4c:02:2f:
6e:a3:eb:88:cd:13:58:c4:97:ca:33:6b:2e:3f:a2:
e8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EA:B3:90:B5:0A:49:8C:9D:5E:6B:01:3D:03:A5:C3:D6:2A:84:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff5a8db9-0400-3c63-8de4-6dd8489a1368.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:43:3b:76:02:b3:cc:af:02:dc:ad:10:78:d6:a0:75:fe:14:
24:a0:76:89:cb:a2:06:f1:de:c3:98:d0:87:52:4f:93:bc:d8:
60:0a:b2:67:d3:4b:6b:57:3c:f1:b7:09:8a:a8:ca:07:65:aa:
7a:74:49:bc:09:ea:ee:7f:0b:02:66:e9:1c:30:b4:75:1a:d0:
38:85:c6:b9:e1:0c:1a:55:2a:89:5b:24:b5:a1:7c:d7:36:c0:
88:08:8d:4c:bc:14:47:49:d2:7c:94:4a:44:a1:42:b2:66:41:
15:62:96:3c:11:9f:11:0d:14:be:b6:09:06:68:d1:86:41:99:
c7:47:e0:1a:32:6b:8b:35:86:e2:75:75:fd:33:bd:6c:0e:c4:
12:33:80:4d:70:9e:7b:87:42:5a:e1:8b:91:bd:06:93:da:ea:
bf:01:e8:1b:0d:93:7b:48:b0:6e:c4:0b:93:fd:7e:29:7b:aa:
c8:25:1a:9a:1a:c7:44:91:8b:f7:10:46:16:0c:3d:4e:46:15:
98:65:6d:fe:f1:e9:0e:18:d0:3e:e0:1e:26:75:fb:be:93:23:
0f:1a:5a:85:ef:90:0b:60:16:6a:a3:e1:94:28:d8:64:a1:13:
c2:a0:8b:36:03:30:46:0b:4b:0b:23:29:7e:bc:d3:41:c8:b1:
29:bb:d8:63
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEw05mUBxG8b02aCEAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTIxNjE0MDAzOFoXDTI2MDMxNjEzMDAzOFowLzEtMCsGA1UEAxMk
MDFiN2ExZjMtOTRjOS00OTYzLWFkYTUtZDg3YTBlMmNiMDJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkVMt0VgPqH6MU20p65r3aQQTx4rLCcZbQii
ECzKSjzhZJbyy1Yoi1078lwxvHu6rkAWiyEcFhXlemDbDIC5j8JMkqeqZUn2l0t1
TvCD4x7V6xgg8QxrmvS4/OlH+kjm57pkAKRdPLiXdNxYOq+D8n0LeUhMvd8xLnVd
1gfNn2NEWZZZZXuFxb3cEjfZBhIfMlz8/fA3JqJjDbAR0Q68997FHsWQFVadB4ko
w4oRDPw3gV/82Bgc7iYo9tbQo71CxVWXTfpJjfs+SEo0oNd3gdmIrvmcrnWUjGf0
J3CxAiLhsT1WeCvZSjQSq+hMAi9uo+uIzRNYxJfKM2suP6Lo+QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFE3qs5C1CkmMnV5rAT0DpcPWKoRdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmY1YThkYjktMDQwMC0z
YzYzLThkZTQtNmRkODQ4OWExMzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBUQzt2ArPMrwLcrRB41qB1/hQkoHaJy6IG8d7DmNCHUk+TvNhgCrJn
00trVzzxtwmKqMoHZap6dEm8CerufwsCZukcMLR1GtA4hca54QwaVSqJWyS1oXzX
NsCICI1MvBRHSdJ8lEpEoUKyZkEVYpY8EZ8RDRS+tgkGaNGGQZnHR+AaMmuLNYbi
dXX9M71sDsQSM4BNcJ57h0Ja4YuRvQaT2uq/AegbDZN7SLBuxAuT/X4pe6rIJRqa
GsdEkYv3EEYWDD1ORhWYZW3+8ekOGNA+4B4mdfu+kyMPGlqF75ALYBZqo+GUKNhk
oRPCoIs2AzBGC0sLIyl+vNNByLEpu9hj
-----END CERTIFICATE-----
Generated at Sat Dec 20 14:45:09 2025 by rpki-client