This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/c4d49987-7b4b-3be2-8e42-497758e9897c.roa
File: c4d49987-7b4b-3be2-8e42-497758e9897c.roa (raw, json)
Hash identifier: kxDCmx6jwsOsChgsdBVGNuCcmDptveM+p6RAgkXg86c=
Subject key identifier: 3F:68:F7:C8:5A:58:65:5C:64:AC:C7:86:63:50:D3:9C:1A:02:7F:67
Certificate issuer: /CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd
Certificate serial: 010D0C9F4328584C619143D5E51A1B903AFAECC0
Authority key identifier: 7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/c4d49987-7b4b-3be2-8e42-497758e9897c.roa
Signing time: Thu 01 Jan 2026 14:00:38 +0000
ROA not before: Thu 01 Jan 2026 14:00:38 +0000
ROA not after: Wed 01 Apr 2026 13:00:38 +0000
asID: 395224
IP address blocks: 199.91.151.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Jan 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:61:91:43:d5:e5:1a:1b:90:3a:fa:ec:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd
Validity
Not Before: Jan 1 14:00:38 2026 GMT
Not After : Apr 1 13:00:38 2026 GMT
Subject: CN=c8bc1454-a1dc-4fee-bd30-da37d7e35556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:88:12:86:56:81:73:a6:c2:d0:4c:78:56:
2e:d5:2c:7c:78:4c:28:05:4c:9b:3b:13:2a:ef:90:
2a:b4:1c:b8:6c:ac:6a:5b:0a:b9:35:67:29:ec:09:
aa:a3:69:ee:00:57:0a:14:92:0a:96:c3:01:89:d1:
dd:17:7f:fa:f4:6c:60:47:6e:61:12:2c:07:03:e5:
c5:cd:42:1c:1b:e4:7e:cd:a2:bb:2d:d1:31:db:44:
ac:49:d6:a4:44:85:cf:0d:bb:32:5d:46:c9:08:bd:
cc:d3:10:44:66:06:3e:34:2c:a9:21:f6:86:f4:c1:
0b:08:ec:95:bd:ed:26:27:16:92:14:52:fd:7e:1b:
df:ab:52:5e:43:02:dd:0d:8f:12:42:83:63:03:81:
d2:cf:16:3a:af:53:55:2e:3b:2d:e4:07:53:21:24:
22:05:eb:85:de:3b:1b:98:6b:d9:14:7d:13:90:63:
15:a3:38:ce:40:af:ca:dd:a1:f5:21:f3:91:8f:6f:
b1:2f:1d:6c:a6:f8:8a:c2:18:19:34:f8:29:21:af:
89:e3:93:73:7f:1e:f1:10:b4:05:31:0c:30:13:01:
ef:61:5c:65:73:79:5f:8b:98:8c:55:83:84:1f:a7:
56:34:05:cf:b0:66:0d:d8:1f:1a:ce:17:d4:31:b9:
46:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:68:F7:C8:5A:58:65:5C:64:AC:C7:86:63:50:D3:9C:1A:02:7F:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/c4d49987-7b4b-3be2-8e42-497758e9897c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl
X509v3 Authority Key Identifier:
keyid:7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:c3:57:af:7f:53:f9:0a:4d:ac:65:c8:8d:6f:fb:c7:a2:93:
90:f4:56:65:96:0e:b3:25:2f:f4:c8:2a:85:af:19:0b:b6:2f:
6c:b1:8c:d7:e8:10:66:d9:11:21:3a:d9:5f:06:90:4c:92:ac:
3d:c6:f7:55:59:b0:be:dc:d2:3f:7c:94:76:59:23:f9:0f:1b:
91:30:9e:96:f2:ed:ed:c6:2a:46:dd:08:d1:57:e0:12:f3:c3:
64:cf:77:31:a0:1f:f2:af:ab:1b:51:4e:83:92:2e:65:ff:36:
df:ac:08:5a:ea:ae:d7:2c:70:d4:15:d4:35:b6:55:df:9e:5d:
67:63:12:b9:7f:6c:e4:0b:81:b9:55:59:1f:70:4a:a4:6f:45:
45:fc:cd:8c:57:65:38:24:27:27:24:3c:f2:e0:16:14:12:14:
bb:df:f9:be:cf:1d:e7:66:b9:8d:17:bc:75:bc:fa:c0:77:0f:
38:2d:fe:ff:3f:5b:28:0d:89:aa:1a:32:7d:1c:fe:4f:c3:a2:
b7:ed:16:bb:52:24:5f:fa:9e:5d:5e:a4:a6:b9:8d:57:12:06:
80:30:b1:15:fa:bb:86:30:c3:68:46:f0:a1:24:75:e8:59:52:
af:f0:53:bb:d6:dc:dd:08:77:6f:2b:38:0b:bc:7e:1b:ef:99:
e2:6e:51:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 06:03:04 2026 by rpki-client