This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5cf67698-ee17-309b-8b92-a4fd7bbe7f9c.roa
File: 5cf67698-ee17-309b-8b92-a4fd7bbe7f9c.roa (raw, json)
Hash identifier: bTmAD5oMASwEmmbdDAweictyehFXRHvrDBercQFRjGg=
Subject key identifier: 7E:92:C9:C9:FA:ED:43:0D:7E:35:AC:13:6D:CE:E0:8D:03:1F:D0:47
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584C215B91BCDBE0FBA785DDFA60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5cf67698-ee17-309b-8b92-a4fd7bbe7f9c.roa
Signing time: Tue 09 Dec 2025 14:00:38 +0000
ROA not before: Tue 09 Dec 2025 14:00:38 +0000
ROA not after: Mon 09 Mar 2026 13:00:38 +0000
asID: 397195
IP address blocks: 192.43.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:21:5b:91:bc:db:e0:fb:a7:85:dd:fa:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 9 14:00:38 2025 GMT
Not After : Mar 9 13:00:38 2026 GMT
Subject: CN=020e2d6e-31e1-4928-979a-1b3754e4ec56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:8b:05:69:d2:14:27:8c:4e:2e:1b:16:81:
82:90:f4:73:cc:64:43:25:12:86:f6:25:0b:ec:dc:
5e:bb:05:86:d5:36:b3:8a:d5:6b:86:2b:0a:71:fc:
9d:05:ae:62:dd:72:d0:9e:05:c8:7b:1c:f5:1a:8f:
ab:59:97:10:69:b7:77:23:20:19:fc:ce:af:f5:91:
6e:88:70:55:55:49:0c:42:15:6d:84:e9:08:ac:3a:
a7:ee:07:14:ca:7d:6c:f0:8d:6d:b1:28:44:41:5a:
67:8d:5e:ea:a5:c3:78:69:ea:93:32:8a:aa:29:b9:
b7:d2:60:44:f3:10:7d:89:30:3d:b6:09:3f:29:4c:
eb:ea:d6:35:76:3c:bd:12:34:69:73:bc:1d:6a:12:
d3:7a:ae:9f:f4:92:89:bd:48:9e:b2:0b:8c:3c:17:
c4:99:8a:f7:7e:ce:b9:34:46:6b:2c:3f:5b:08:d3:
e2:67:9b:64:c8:df:bb:3b:1e:f4:42:0b:29:cb:b9:
10:7c:8a:d1:21:c7:ca:6c:a7:17:2f:75:0d:9d:30:
87:a2:c6:bb:c8:50:03:6b:7f:36:60:92:31:72:d7:
96:f1:3d:ad:8d:3b:ee:68:00:ca:75:c5:67:6e:56:
da:fb:b2:03:0b:d1:38:0e:97:fe:53:9c:fa:c2:46:
52:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:92:C9:C9:FA:ED:43:0D:7E:35:AC:13:6D:CE:E0:8D:03:1F:D0:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5cf67698-ee17-309b-8b92-a4fd7bbe7f9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:3a:0f:91:58:c9:ed:a0:1a:01:2b:f8:ee:1c:84:88:38:b0:
7c:9e:61:3b:51:64:ea:48:b9:16:64:eb:c5:14:1d:40:b4:6d:
06:da:a9:35:7a:ab:1c:47:86:20:30:21:54:04:2d:f9:ed:17:
11:5d:d5:1b:38:da:e9:68:c6:9f:94:9c:a3:2a:c8:47:49:d0:
bf:49:f2:79:a7:ac:7e:90:f5:15:8d:f2:3e:00:eb:d7:73:da:
11:09:65:64:2c:4d:7b:44:b3:53:df:d7:0e:12:60:d4:b4:6f:
53:04:cf:64:fb:e5:d1:9a:b7:2a:8a:15:05:09:e6:cc:e1:f0:
9b:89:76:30:bc:f0:03:da:de:88:2d:1e:4f:b0:c6:ca:5c:ae:
60:f5:d5:c4:5e:bd:6f:4c:19:58:74:3e:05:6c:1f:9c:07:f7:
64:35:6c:1c:9b:1c:84:7b:a6:94:23:58:fc:f0:34:45:fa:05:
55:28:59:f0:b7:54:f9:28:c1:5f:96:2e:1b:1e:14:be:39:6d:
d9:9a:3a:c1:8c:12:69:1f:a6:f4:05:b1:b6:d6:d2:2b:c9:9c:
45:6f:0b:38:0f:54:fd:fe:8b:62:e8:78:5e:62:0a:9e:bb:7f:
7c:7b:5c:16:b0:9b:a7:80:98:5e:3d:08:ac:d1:d3:25:37:d3:
5b:6e:a8:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwhW5G82+D7p4Xd+mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTIwOTE0MDAzOFoXDTI2MDMwOTEzMDAzOFowLzEtMCsGA1UEAxMk
MDIwZTJkNmUtMzFlMS00OTI4LTk3OWEtMWIzNzU0ZTRlYzU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAaLBWnSFCeMTi4bFoGCkPRzzGRDJRKG9iUL
7NxeuwWG1TazitVrhisKcfydBa5i3XLQngXIexz1Go+rWZcQabd3IyAZ/M6v9ZFu
iHBVVUkMQhVthOkIrDqn7gcUyn1s8I1tsShEQVpnjV7qpcN4aeqTMoqqKbm30mBE
8xB9iTA9tgk/KUzr6tY1djy9EjRpc7wdahLTeq6f9JKJvUiesguMPBfEmYr3fs65
NEZrLD9bCNPiZ5tkyN+7Ox70Qgspy7kQfIrRIcfKbKcXL3UNnTCHosa7yFADa382
YJIxcteW8T2tjTvuaADKdcVnblba+7IDC9E4Dpf+U5z6wkZSoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH6Sycn67UMNfjWsE23O4I0DH9BHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWNmNjc2OTgtZWUxNy0z
MDliLThiOTItYTRmZDdiYmU3ZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACQ6D5FYye2gGgEr+O4chIg4sHyeYTtRZOpIuRZk68UUHUC0bQbaqTV6
qxxHhiAwIVQELfntFxFd1Rs42uloxp+UnKMqyEdJ0L9J8nmnrH6Q9RWN8j4A69dz
2hEJZWQsTXtEs1Pf1w4SYNS0b1MEz2T75dGatyqKFQUJ5szh8JuJdjC88APa3ogt
Hk+wxspcrmD11cRevW9MGVh0PgVsH5wH92Q1bBybHIR7ppQjWPzwNEX6BVUoWfC3
VPkowV+WLhseFL45bdmaOsGMEmkfpvQFsbbW0ivJnEVvCzgPVP3+i2LoeF5iCp67
f3x7XBawm6eAmF49CKzR0yU301tuqI0=
-----END CERTIFICATE-----
Generated at Sun Dec 14 12:10:59 2025 by rpki-client