This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/431c2044-6c0f-3303-9c68-047ad228e587.roa
File: 431c2044-6c0f-3303-9c68-047ad228e587.roa (raw, json)
Hash identifier: sX28kq2P3V4AYW+nRqeaurD8p3cwmVrOM7B4VsxR4a4=
Subject key identifier: 42:78:48:FE:A9:CD:1B:2C:A5:1D:FF:7C:EC:E4:C8:5D:9E:14:44:0C
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584C45A730C0568D98C3C9347600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/431c2044-6c0f-3303-9c68-047ad228e587.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 7155
IP address blocks: 198.45.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Jan 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a7:30:c0:56:8d:98:c3:c9:34:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=8b1367d7-9508-41a6-8d81-82c18661e875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:e8:d1:40:cd:04:41:14:b0:97:de:b1:9d:
84:78:e0:0c:04:c1:86:2c:28:e3:37:7b:20:a8:8e:
61:ef:8b:0f:df:98:6f:9c:45:dc:a8:2d:13:bf:88:
20:ef:00:33:d3:e7:00:30:6f:87:b7:40:ea:2f:46:
d0:11:46:9e:02:b4:6b:66:cd:6a:b9:fd:51:3b:6b:
71:89:d9:ef:40:5d:ad:56:0d:12:96:26:0a:0e:34:
2f:ea:6f:1a:d7:ea:4e:b9:bf:fa:0f:46:9f:bf:1e:
17:c6:86:12:c1:48:09:29:db:ce:6a:d5:27:8d:65:
6b:42:09:db:30:69:aa:65:7d:ec:df:46:96:a0:16:
cd:dd:33:c3:17:1b:c4:aa:c0:99:f8:ca:5f:48:11:
d9:58:fe:f0:7d:09:8d:17:cc:09:b1:a5:e0:a8:9e:
a4:b0:2d:83:cc:6d:5c:62:fe:8b:43:d8:91:61:fb:
25:76:ab:c1:89:25:cb:3d:0b:0a:60:22:08:7b:9e:
9f:53:89:4d:83:b9:cd:78:b2:34:2c:ed:7c:f7:ed:
0c:1d:85:ba:de:f8:c3:b6:53:ab:a6:8a:72:0a:98:
e8:2a:c2:91:fc:af:a6:78:e0:b6:b8:57:cb:3f:10:
a7:e8:f9:f7:7b:10:6b:5f:77:95:4d:40:b5:79:a9:
03:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:78:48:FE:A9:CD:1B:2C:A5:1D:FF:7C:EC:E4:C8:5D:9E:14:44:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/431c2044-6c0f-3303-9c68-047ad228e587.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:44:fc:17:07:19:89:fd:5d:df:a6:2b:06:fa:85:5b:39:a5:
48:01:f2:5f:53:2b:e5:19:c8:41:d4:4d:56:6e:e5:b4:51:34:
bc:71:c6:20:70:b8:34:5b:1f:00:19:d6:0c:80:27:80:5e:64:
fa:e4:66:8d:7c:66:24:26:40:d0:93:20:bb:30:1a:f4:bf:0a:
68:b0:40:36:b7:e2:73:ce:97:c8:65:f2:a0:21:68:d6:29:3a:
02:f3:19:1a:a6:01:6a:d7:51:30:f1:74:65:70:69:4f:27:23:
5f:cc:5a:b7:72:96:66:3f:4a:3c:5b:76:4d:c2:4b:27:cb:39:
60:cc:33:31:dc:96:f5:da:15:ec:6c:00:f6:19:dc:74:76:08:
2c:98:60:13:0f:8a:ac:53:5a:c6:7f:ba:96:74:14:9f:cb:d7:
3f:c3:59:72:2a:07:e8:dc:a1:ef:6f:fb:32:09:dc:de:ce:d4:
22:e3:17:7b:5f:7d:b9:c3:de:5f:87:48:84:8e:24:3d:77:94:
62:d7:b3:60:38:25:c6:64:b2:bf:47:f4:0e:b4:f1:fb:0f:1f:
e6:48:c7:1f:70:50:ed:17:40:81:78:12:53:41:55:38:8f:6a:
77:6d:f3:a1:0f:85:01:99:55:ac:59:82:6b:e7:1c:60:23:50:
95:49:53:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 02:55:35 2026 by rpki-client