This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3af51884-3076-3368-aea4-3fc846996bea.roa
File: 3af51884-3076-3368-aea4-3fc846996bea.roa (raw, json)
Hash identifier: KTRdqYgLWSFGTCF/z1KdINYemFN9Ce3qQZ3OYyutG38=
Subject key identifier: 4A:4C:0F:2F:BF:E7:8C:07:A5:A5:25:F9:D2:98:7B:10:B5:3D:25:E2
Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial: 010D0C9F4328584C8E3C2C1B473B8AD44780EB00
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3af51884-3076-3368-aea4-3fc846996bea.roa
Signing time: Sat 17 Jan 2026 14:00:38 +0000
ROA not before: Sat 17 Jan 2026 14:00:38 +0000
ROA not after: Fri 17 Apr 2026 13:00:38 +0000
asID: 16509
IP address blocks: 13.111.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 21 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:8e:3c:2c:1b:47:3b:8a:d4:47:80:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Validity
Not Before: Jan 17 14:00:38 2026 GMT
Not After : Apr 17 13:00:38 2026 GMT
Subject: CN=cf55146f-0670-4f0f-836c-fc6fcc7d8abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:7d:33:a4:14:cb:50:e4:fd:0b:d6:eb:91:
cf:15:47:2a:b9:19:ad:9e:26:85:fc:15:2d:79:30:
a3:60:57:7c:6b:45:19:cc:fb:2d:ed:2e:4a:80:19:
43:ff:77:72:b5:46:f1:61:5e:81:70:0c:9f:df:c1:
db:5b:d6:8e:0f:38:eb:bf:48:66:62:22:66:25:87:
ab:9f:0b:34:ff:64:e9:52:b3:54:95:32:0c:56:c2:
d1:81:b0:72:8f:ed:ab:ef:fe:5d:56:81:5d:1b:a7:
0b:d0:75:72:0d:4c:8b:a6:17:4f:78:67:33:90:b7:
3d:2b:a1:66:ed:36:6f:51:c2:27:af:e1:ea:59:91:
0c:c5:6d:a9:4b:3e:a5:ae:ed:13:71:85:87:7d:3b:
27:04:7b:92:4c:34:36:cd:02:91:89:28:97:c3:38:
a7:47:5c:b8:3c:a0:2f:e6:b3:29:b2:7b:97:61:47:
a6:4d:7c:da:16:4d:c0:49:48:c7:d2:9d:80:bb:88:
b9:e1:1c:61:c5:8e:a1:20:c4:be:6f:34:39:6c:69:
dd:f9:7b:c1:6c:fc:18:c7:8c:3a:03:cf:8d:c4:9b:
bc:ba:2b:ad:b1:a4:e9:9a:66:a5:84:b2:3a:8c:fd:
72:6f:79:fd:3a:46:75:75:c1:19:eb:59:bf:ac:7f:
6d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4C:0F:2F:BF:E7:8C:07:A5:A5:25:F9:D2:98:7B:10:B5:3D:25:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3af51884-3076-3368-aea4-3fc846996bea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
X509v3 Authority Key Identifier:
keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
sbgp-ipAddrBlock: critical
IPv4:
13.111.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:92:8e:67:38:de:3b:d6:b1:9d:5b:54:9a:61:1d:b0:de:39:
72:64:ce:a9:10:85:2f:f5:9c:48:5e:13:96:9c:29:84:06:e5:
15:26:65:03:22:66:69:89:d6:7f:6e:ca:5c:94:dc:81:03:59:
7f:dd:46:55:92:93:d5:9b:c7:df:da:f4:c3:7b:d8:f0:fc:52:
c0:0d:63:0c:8d:20:7c:d9:00:fa:39:67:f4:0e:6b:fc:e6:13:
f0:45:a5:ee:f0:c1:ee:c9:35:69:ff:84:58:94:98:80:f6:7e:
43:e6:6e:55:e5:4c:7c:42:7a:26:66:81:4e:42:85:bc:ab:d9:
41:c6:4d:60:23:e6:60:f2:45:4a:8f:c6:9b:d4:68:4a:5b:b5:
a6:08:7a:9d:4e:7a:d9:a6:57:6f:d6:b7:50:f0:28:bb:de:7c:
46:45:65:be:37:33:31:72:72:c4:c0:e1:94:aa:db:cb:13:88:
df:8c:5a:67:ad:84:26:60:30:0d:32:61:e1:c9:e9:d6:7c:4b:
ae:1a:12:32:6b:ab:fd:8f:fc:10:4a:0f:b9:83:64:9d:dc:96:
cf:c6:db:ac:95:be:44:b4:5f:ab:16:90:8b:41:9d:c3:a3:96:
4b:58:3a:99:c1:e2:48:0c:01:da:d4:e3:c7:e4:36:25:78:bc:
40:38:d5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:27:37 2026 by rpki-client