This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20ab3fab-0117-3ffe-b84c-c2610dc2b1e1.roa
File: 20ab3fab-0117-3ffe-b84c-c2610dc2b1e1.roa (raw, json)
Hash identifier: kf4p4GAxMhZM+k1/T2i1YJpsxsnwhZ7UboX+p20ZjCw=
Subject key identifier: E7:8B:FD:8B:AE:CA:BA:9F:25:1B:5F:41:78:EE:57:6F:31:BC:1C:8E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584C2856493CFAC22388E21B1B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20ab3fab-0117-3ffe-b84c-c2610dc2b1e1.roa
Signing time: Fri 12 Dec 2025 02:00:30 +0000
ROA not before: Fri 12 Dec 2025 02:00:30 +0000
ROA not after: Thu 12 Mar 2026 01:00:30 +0000
asID: 396577
IP address blocks: 192.68.126.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:28:56:49:3c:fa:c2:23:88:e2:1b:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 12 02:00:30 2025 GMT
Not After : Mar 12 01:00:30 2026 GMT
Subject: CN=0ba1881f-5c3d-4e38-9c5f-93439e75b1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:49:a5:0b:7d:77:ac:39:80:c5:b1:c4:03:3a:
d2:76:73:8c:0f:11:cd:6d:2a:7d:3b:78:91:b6:ae:
55:32:01:37:c1:f2:d4:8f:35:12:65:d5:b5:b4:94:
4e:3a:56:5c:5e:47:7c:f6:ed:4b:03:96:bf:8b:96:
a6:a0:2e:93:54:5c:66:0f:21:c5:fc:b1:8e:46:f0:
d7:3e:85:44:4e:56:1f:c1:4a:6e:58:ae:48:8f:4b:
20:f6:28:0f:d7:a3:f4:f4:fa:c3:0b:82:4b:0d:2d:
a2:97:fc:27:96:b2:74:ed:c0:25:60:c5:69:6f:25:
7b:14:69:07:5a:20:9c:61:35:e7:ba:c0:d1:db:39:
44:5a:1c:79:9f:8e:21:f4:81:7e:71:08:63:91:26:
55:27:81:97:7e:49:61:5a:57:7b:8b:46:f4:20:24:
97:af:06:90:6e:db:88:98:6a:bf:b9:40:21:58:39:
cb:53:bf:1b:f0:e7:0e:70:5c:bb:87:a3:e6:c3:3d:
08:f7:d0:b4:5d:22:ee:ca:32:79:35:2e:17:b8:1f:
02:4f:f4:4b:ec:fb:b4:04:6d:6b:cd:14:a5:8b:34:
00:9d:cb:62:c3:8f:0a:18:da:21:e8:80:f3:37:a2:
a8:98:e1:7c:00:67:6b:8a:31:f8:4f:b6:ba:35:1e:
28:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8B:FD:8B:AE:CA:BA:9F:25:1B:5F:41:78:EE:57:6F:31:BC:1C:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20ab3fab-0117-3ffe-b84c-c2610dc2b1e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:ca:59:17:bb:09:c8:53:ce:38:d0:80:de:e1:2f:81:6c:00:
a9:16:be:66:0e:7a:4d:41:ea:bd:60:b8:24:21:e5:b6:c0:8d:
99:04:44:e4:bb:fe:5f:33:9d:27:a9:21:4c:9e:51:a6:c9:54:
b7:1b:50:4d:d4:0e:81:4b:94:24:e0:b3:56:8e:12:82:cc:c4:
3b:01:fb:7f:e7:46:69:c5:2f:a1:e5:37:85:81:3a:24:da:8a:
8e:37:39:fd:02:61:f5:9f:f7:5e:83:0f:60:1c:72:8e:67:f6:
4e:85:73:3b:e4:91:d4:2c:e7:0a:20:04:fd:81:c3:2e:c7:57:
44:66:74:dc:a7:c9:51:00:9c:c3:2c:38:25:12:d3:13:05:2a:
53:fc:7a:98:19:76:e2:53:34:bc:50:61:a9:6f:07:15:de:4f:
71:f8:22:ac:3a:2a:0f:d2:7a:9b:22:5f:03:be:85:54:0b:11:
4c:95:27:38:84:58:6a:14:7f:09:45:40:45:46:2d:85:a5:96:
08:7f:1a:3d:83:5b:97:de:0f:1e:37:63:58:65:8e:a2:fa:ae:
22:02:61:e4:be:00:ab:41:ae:fe:a2:f4:8e:2e:19:7a:bb:8f:
96:83:c1:68:9b:72:bb:fb:cb:74:3e:59:07:9f:d4:36:ec:3c:
8a:8c:1a:bd
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEwoVkk8+sIjiOIbG4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTIxMjAyMDAzMFoXDTI2MDMxMjAxMDAzMFowLzEtMCsGA1UEAxMk
MGJhMTg4MWYtNWMzZC00ZTM4LTljNWYtOTM0MzllNzViMWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEmlC313rDmAxbHEAzrSdnOMDxHNbSp9O3iR
tq5VMgE3wfLUjzUSZdW1tJROOlZcXkd89u1LA5a/i5amoC6TVFxmDyHF/LGORvDX
PoVETlYfwUpuWK5Ij0sg9igP16P09PrDC4JLDS2il/wnlrJ07cAlYMVpbyV7FGkH
WiCcYTXnusDR2zlEWhx5n44h9IF+cQhjkSZVJ4GXfklhWld7i0b0ICSXrwaQbtuI
mGq/uUAhWDnLU78b8OcOcFy7h6Pmwz0I99C0XSLuyjJ5NS4XuB8CT/RL7Pu0BG1r
zRSlizQAnctiw48KGNoh6IDzN6KomOF8AGdrijH4T7a6NR4orQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOeL/YuuyrqfJRtfQXjuV28xvByOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjBhYjNmYWItMDExNy0z
ZmZlLWI4NGMtYzI2MTBkYzJiMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC4ylkXuwnIU8440IDe4S+BbACpFr5mDnpNQeq9YLgkIeW2wI2ZBETk
u/5fM50nqSFMnlGmyVS3G1BN1A6BS5Qk4LNWjhKCzMQ7Aft/50ZpxS+h5TeFgTok
2oqONzn9AmH1n/degw9gHHKOZ/ZOhXM75JHULOcKIAT9gcMux1dEZnTcp8lRAJzD
LDglEtMTBSpT/HqYGXbiUzS8UGGpbwcV3k9x+CKsOioP0nqbIl8DvoVUCxFMlSc4
hFhqFH8JRUBFRi2FpZYIfxo9g1uX3g8eN2NYZY6i+q4iAmHkvgCrQa7+ovSOLhl6
u4+Wg8Fom3K7+8t0PlkHn9Q27DyKjBq9
-----END CERTIFICATE-----
Generated at Sun Dec 14 12:03:58 2025 by rpki-client