This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4041993b-13e1-3b5b-8657-0a7f7446c299.roa File: 4041993b-13e1-3b5b-8657-0a7f7446c299.roa (raw, json) Hash identifier: Q+Ezfl8HetfPLCDhMnkMq1v7Kg/emnBU+gDAuwy8wKg= Subject key identifier: 09:AE:F0:85:5A:8D:F8:1F:E9:E2:56:69:C3:74:E8:81:04:15:84:EA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C285644557BC5A0C781856900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4041993b-13e1-3b5b-8657-0a7f7446c299.roa Signing time: Fri 12 Dec 2025 02:00:30 +0000 ROA not before: Fri 12 Dec 2025 02:00:30 +0000 ROA not after: Thu 12 Mar 2026 01:00:30 +0000 asID: 20362 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:28:56:44:55:7b:c5:a0:c7:81:85:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 12 02:00:30 2025 GMT Not After : Mar 12 01:00:30 2026 GMT Subject: CN=8d7bf598-e634-40d0-a55f-d2ab5d336be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:51:2c:38:fe:ca:57:63:28:79:e1:38:9a:d7: 63:5f:2a:49:dc:cc:04:00:ef:0e:3e:5c:da:39:d2: 58:99:44:44:0a:9f:77:a4:41:d3:31:df:9a:91:df: 7e:3f:b3:c6:09:9e:96:56:05:31:3e:2a:18:34:28: 14:96:b7:b7:f0:23:91:53:ef:fd:fc:87:c8:24:03: 82:b7:4e:43:a4:a1:29:48:7d:25:6e:b8:bc:b5:a6: cd:f5:f9:08:c1:dc:aa:44:81:42:72:70:5e:70:56: 07:32:5d:f0:a2:19:73:bb:9b:d5:48:9a:ca:a7:d2: 09:54:af:a1:b1:de:c9:12:97:61:5d:1e:5f:c6:e0: 35:76:36:ea:6d:91:c2:9b:d2:81:8e:1d:bc:ef:2a: 1f:12:e2:34:d5:ae:86:fe:c1:42:ef:2d:82:dd:e3: 90:c5:6e:1c:86:1e:a9:7e:bc:0b:22:63:9f:c4:42: aa:76:0b:58:4b:35:d4:43:18:81:d2:20:db:19:1a: f4:26:3c:fe:82:34:a2:37:ad:1b:88:a4:3b:94:7d: 60:19:d0:16:57:a7:9f:12:7f:e0:d2:42:7a:6f:04: 52:4f:27:51:70:f4:c1:36:75:b0:44:ca:2e:c1:9c: 69:5c:f9:8e:f6:31:9e:0e:8d:7d:e9:96:d8:8d:e2: d3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AE:F0:85:5A:8D:F8:1F:E9:E2:56:69:C3:74:E8:81:04:15:84:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4041993b-13e1-3b5b-8657-0a7f7446c299.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:1a:36:d2:90:f0:ee:e5:18:f1:8f:f6:50:cc:bd:f2:ed:44: 0f:57:21:c7:ed:90:d3:f6:9a:68:80:04:6c:2f:11:10:2a:40: 31:81:d4:5b:fa:3b:e0:73:38:21:74:f6:c0:58:43:e2:d3:cb: 84:de:22:3d:ab:4b:a2:23:17:f1:e3:98:8c:77:b2:9c:81:11: 1d:2a:ed:98:ad:ae:f6:26:92:2d:74:d9:1f:fe:4b:ae:fd:d4: 4c:3e:50:a1:06:8f:82:e6:fc:d5:50:f9:66:50:7e:5c:0b:7a: fa:f7:1b:e2:16:75:52:ed:0b:0a:ad:ee:a4:02:25:77:70:d2: 9a:1c:38:e4:68:e8:90:c9:16:9f:88:0a:05:35:12:e7:9b:8d: 46:10:cc:9e:39:d4:3c:66:4d:43:3e:94:13:90:28:83:a5:f9: 86:8c:0b:c4:b1:0d:fd:a1:be:a0:03:c0:c3:84:4d:61:00:ac: c7:7c:4a:07:3a:f1:de:49:22:8e:35:8d:79:8d:60:99:69:de: f9:5a:e9:1f:3d:c1:f5:a4:ac:65:bf:fe:73:72:2b:ae:21:5f: 77:f3:70:5e:db:dd:1a:f6:91:55:db:3d:88:4e:af:11:c9:fd: ff:3a:af:29:c3:ac:e5:7e:f5:fb:68:54:df:22:3b:30:e5:11: ba:61:ce:f8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEwoVkRVe8Wgx4GFaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIxMjAyMDAzMFoXDTI2MDMxMjAxMDAzMFowLzEtMCsGA1UEAxMk OGQ3YmY1OTgtZTYzNC00MGQwLWE1NWYtZDJhYjVkMzM2YmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVEsOP7KV2MoeeE4mtdjXypJ3MwEAO8OPlza OdJYmURECp93pEHTMd+akd9+P7PGCZ6WVgUxPioYNCgUlre38CORU+/9/IfIJAOC t05DpKEpSH0lbri8tabN9fkIwdyqRIFCcnBecFYHMl3wohlzu5vVSJrKp9IJVK+h sd7JEpdhXR5fxuA1djbqbZHCm9KBjh287yofEuI01a6G/sFC7y2C3eOQxW4chh6p frwLImOfxEKqdgtYSzXUQxiB0iDbGRr0Jjz+gjSiN60biKQ7lH1gGdAWV6efEn/g 0kJ6bwRSTydRcPTBNnWwRMouwZxpXPmO9jGeDo196ZbYjeLTGQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAmu8IVajfgf6eJWacN06IEEFYTqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDA0MTk5M2ItMTNlMS0z YjViLTg2NTctMGE3Zjc0NDZjMjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCTGjbSkPDu5Rjxj/ZQzL3y7UQPVyHH7ZDT9ppogARsLxEQKkAxgdRb +jvgczghdPbAWEPi08uE3iI9q0uiIxfx45iMd7KcgREdKu2Yra72JpItdNkf/kuu /dRMPlChBo+C5vzVUPlmUH5cC3r69xviFnVS7QsKre6kAiV3cNKaHDjkaOiQyRaf iAoFNRLnm41GEMyeOdQ8Zk1DPpQTkCiDpfmGjAvEsQ39ob6gA8DDhE1hAKzHfEoH OvHeSSKONY15jWCZad75WukfPcH1pKxlv/5zciuuIV9383Be290a9pFV2z2ITq8R yf3/Oq8pw6zlfvX7aFTfIjsw5RG6Yc74 -----END CERTIFICATE-----Generated at Sun Dec 14 12:09:17 2025 by rpki-client