This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ffdbdcf-1b91-368f-95bb-a0b0156cc8e8.roa
File: 7ffdbdcf-1b91-368f-95bb-a0b0156cc8e8.roa (raw, json)
Hash identifier: m/pisO1mum3uy3kYlT7M4QHoyi0NKyJn5wl0ooyWlXc=
Subject key identifier: 5D:A8:CF:D3:14:A7:13:60:81:4F:F2:EE:13:54:24:CC:21:46:EA:B6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584C28564C147A50FBE0459888C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ffdbdcf-1b91-368f-95bb-a0b0156cc8e8.roa
Signing time: Fri 12 Dec 2025 02:00:30 +0000
ROA not before: Fri 12 Dec 2025 02:00:30 +0000
ROA not after: Thu 12 Mar 2026 01:00:30 +0000
asID: 396594
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:28:56:4c:14:7a:50:fb:e0:45:98:88:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 12 02:00:30 2025 GMT
Not After : Mar 12 01:00:30 2026 GMT
Subject: CN=42e166e6-ee8a-4162-8fbe-1a16c57d31a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:60:cc:32:9e:3b:e8:86:5e:12:75:8e:2f:
90:de:4b:20:b3:3c:ce:5d:40:e7:3e:25:85:0f:a6:
4d:1d:d1:7f:51:36:60:da:f5:f2:53:a6:bb:14:4a:
a3:09:ef:8a:c5:fe:12:26:63:7c:e5:2e:b4:e0:0c:
80:94:e5:c1:fa:c9:35:b0:56:9b:4e:8f:32:71:65:
1f:0e:29:e6:2e:80:18:45:a0:43:46:0a:62:45:55:
35:48:8f:34:da:27:0c:5f:8e:22:49:a0:65:8f:db:
02:39:81:ba:92:45:d1:e6:fd:ac:30:9c:ef:25:cf:
41:92:01:56:50:e8:dc:8c:08:8a:55:4c:67:33:32:
1e:b6:fe:2e:45:e5:9d:de:05:11:d5:c3:28:45:80:
5a:63:21:b1:03:57:d7:c9:c9:12:5c:7d:f3:3e:e5:
6b:d9:dd:01:5a:c1:73:a6:6d:24:5f:18:aa:94:29:
46:75:c4:30:5e:b5:46:da:20:27:46:63:6b:d9:3f:
f5:d1:f3:9a:d5:d3:22:7a:d5:b7:8c:2c:e9:37:c3:
ab:35:93:a5:89:a6:16:89:8a:62:a4:19:d6:c9:0a:
95:c8:d0:fa:ad:7d:4b:2a:01:b1:fe:99:71:56:44:
fa:75:b3:70:dd:64:a1:b8:70:fb:7c:5d:01:53:93:
99:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A8:CF:D3:14:A7:13:60:81:4F:F2:EE:13:54:24:CC:21:46:EA:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ffdbdcf-1b91-368f-95bb-a0b0156cc8e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:59:f0:96:d8:86:19:b0:ed:d6:de:ab:46:cd:55:90:ab:09:
2e:b7:33:75:48:14:d7:80:8e:ae:8c:bd:af:2f:e9:5e:b3:64:
82:7e:c8:a3:f4:2b:c1:e7:7b:b0:e2:a6:ba:47:25:48:36:1b:
70:ed:b3:fe:a5:50:78:55:4c:dc:b3:1c:ba:4c:5c:52:28:cf:
7d:fd:81:90:7f:8a:f6:1a:b7:3e:68:ff:10:2a:06:9a:1f:7f:
a7:33:d0:7a:00:bc:b6:ac:20:26:c3:6d:df:6a:d1:9b:11:a3:
cb:c7:46:97:60:e7:87:ef:2d:07:94:a7:c7:c8:f6:a4:a3:0a:
86:2f:5a:d0:ec:84:47:a2:54:7d:bc:f5:ed:43:8e:80:f3:e3:
db:1c:10:9d:4e:6b:95:25:ef:90:ca:13:e2:48:f2:d0:9d:05:
c6:51:71:3a:2d:b8:4f:41:39:06:24:af:00:f8:e8:02:ee:5c:
f2:14:64:30:19:92:8c:92:ee:48:b3:ec:32:e3:fc:ae:4f:c0:
c7:b3:a6:c5:ed:3d:1b:73:e8:5d:a5:8f:27:4d:30:e2:4e:5d:
82:f7:6b:32:4a:fe:03:dd:13:68:e5:1a:d1:d0:0f:52:da:45:
8c:f0:6d:65:06:c6:e0:82:71:01:64:40:ff:3d:d6:2b:f2:13:
a5:2f:f4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 13:52:33 2025 by rpki-client