This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa
File: df81f8d2-6da0-3290-b864-c6d6e634429c.roa (raw, json)
Hash identifier: 0nHdii2JEQfaIVmcm+8YBEc9lYyi83MU5U02n9Qd6y0=
Subject key identifier: 61:B0:A1:43:75:CA:EF:EA:BB:A6:3E:8F:FC:36:D2:46:59:59:DC:2D
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584C7D7C5A4F0D75943ECBE50984
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa
Signing time: Sun 11 Jan 2026 14:00:39 +0000
ROA not before: Sun 11 Jan 2026 14:00:39 +0000
ROA not after: Sat 11 Apr 2026 13:00:39 +0000
asID: 16696
IP address blocks: 161.38.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 12 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:7d:7c:5a:4f:0d:75:94:3e:cb:e5:09:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Jan 11 14:00:39 2026 GMT
Not After : Apr 11 13:00:39 2026 GMT
Subject: CN=c1f24126-4d54-4edb-adea-48ea587e45f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:39:40:5a:44:1a:5e:5d:00:d6:40:36:36:be:
a2:1f:94:ab:07:a3:aa:02:bd:aa:0f:52:2a:15:7e:
15:9c:0e:a0:98:db:ed:6b:06:be:c0:7c:e4:2e:c3:
db:b0:13:94:7d:d0:1f:eb:65:e8:a8:c4:67:17:7a:
bd:7f:ee:5a:63:e6:4a:55:61:77:98:61:25:e5:ad:
ca:db:e5:b2:bf:8f:6a:e4:42:3e:5b:f6:ea:f0:f1:
50:ca:03:32:4b:cf:93:93:31:b9:b9:07:ea:37:63:
a0:92:50:97:21:ad:ca:16:1b:96:53:0f:ed:76:7b:
22:3f:03:fb:1d:b2:82:82:70:8b:45:9d:e4:7e:fa:
a8:c7:84:ce:e3:79:12:5c:ec:0b:d6:da:5b:25:39:
cd:ab:8b:89:86:21:ae:14:28:05:b7:ca:8c:c1:ff:
55:0c:6e:ac:86:88:72:53:39:bd:a7:f6:dd:34:08:
2e:86:ff:7d:4d:2c:a5:c9:dd:36:f2:b8:cd:fd:3d:
58:0f:04:53:d7:99:40:4e:bc:7a:6f:27:9b:ac:19:
18:e7:91:f7:c6:34:df:fb:f0:1d:08:07:38:e2:59:
84:d1:f8:f8:f4:bb:fe:ff:bc:2c:70:3b:aa:cc:a2:
28:8d:c6:8f:fa:86:17:72:66:85:af:d4:ce:01:a1:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B0:A1:43:75:CA:EF:EA:BB:A6:3E:8F:FC:36:D2:46:59:59:DC:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
161.38.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:3a:03:46:29:47:b8:e1:bc:f6:44:b5:d9:e7:9d:1c:1e:3b:
03:24:28:1d:1f:60:59:cf:f7:02:7a:4b:9c:f4:34:29:7c:49:
5c:40:14:b9:cb:8d:d1:ba:31:d5:f2:2a:ca:f5:77:37:78:99:
3e:ca:59:a0:1a:a9:3e:26:af:d0:19:84:1c:d8:f9:57:2d:c4:
28:52:c4:fa:17:c9:c0:47:51:11:cd:f6:b3:d9:73:cb:01:6d:
bc:fd:c0:26:16:3c:4d:49:d2:8c:0d:23:3d:02:17:2a:8e:f5:
86:04:24:df:7d:cd:71:a2:1a:6c:94:25:04:3e:6b:e8:53:a8:
67:b3:97:f4:50:c0:1a:8d:19:49:46:25:65:c7:fd:f6:29:dc:
42:e4:a3:eb:7e:f6:e3:e1:79:f0:2d:6b:b0:16:35:23:51:09:
13:ac:5d:5f:de:9e:69:30:13:74:9b:b1:74:8c:18:61:d8:f5:
28:4a:c4:b6:1c:df:a7:97:3b:12:85:27:8e:fc:61:f4:64:fa:
a8:0e:3e:dc:4b:4b:fa:0a:2d:74:d9:4a:00:ec:05:13:12:53:
a2:22:da:f9:b4:5a:5b:f1:98:f2:d5:86:e4:53:4f:6b:a4:21:
b8:fb:4b:5b:67:84:60:53:94:16:ff:4a:71:8f:98:61:c6:16:
aa:41:81:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 02:00:56 2026 by rpki-client