This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9bdb552-3747-3060-8c91-220dceab6cf6.roa
File: c9bdb552-3747-3060-8c91-220dceab6cf6.roa (raw, json)
Hash identifier: RyfxIr1O0wLHyja4XtJFOvjpEEG6dwe9K5lYo0OI+zA=
Subject key identifier: 17:0B:2F:AC:2A:42:EC:E2:44:FE:67:99:F2:DA:CF:5E:31:B5:C0:92
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584C5EC6EC4E73EB325C4F4AD400
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9bdb552-3747-3060-8c91-220dceab6cf6.roa
Signing time: Wed 31 Dec 2025 14:00:38 +0000
ROA not before: Wed 31 Dec 2025 14:00:38 +0000
ROA not after: Tue 31 Mar 2026 13:00:38 +0000
asID: 397196
IP address blocks: 209.112.127.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 11 Feb 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:5e:c6:ec:4e:73:eb:32:5c:4f:4a:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 31 14:00:38 2025 GMT
Not After : Mar 31 13:00:38 2026 GMT
Subject: CN=8583807f-556c-4a27-8586-a7fc924d473a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:14:90:0b:43:ee:57:a7:e6:ed:6d:e7:89:7b:
9d:85:8a:bd:43:3c:cf:68:a2:73:e3:64:12:04:2c:
5e:ea:86:79:cf:18:fd:b3:e7:39:5c:8f:82:b0:9c:
a8:af:c1:ce:f1:0f:e5:ed:c2:28:05:44:ca:a0:cd:
35:2c:89:0d:be:3d:f9:59:1d:c2:8a:00:aa:13:56:
5e:3e:7f:c7:b6:ea:fb:bc:1a:24:16:6f:15:30:47:
7a:5d:42:03:8a:7f:2b:24:16:d6:83:5c:0e:b4:5d:
47:73:d0:1a:0d:0c:d6:86:a7:3a:9a:ee:33:d9:25:
ba:df:7f:af:6b:d6:00:e3:bc:b1:a5:51:4b:db:b7:
56:02:32:d9:fb:01:18:5a:ed:f3:4d:ac:e9:3a:26:
e4:10:1e:b7:58:ec:d3:96:78:85:50:71:71:65:e9:
13:66:05:e0:ca:5e:4d:c5:df:21:d5:6d:83:5b:c3:
2d:02:4b:44:b0:df:4e:9f:af:ad:e3:3b:58:4f:a5:
99:13:0e:cb:ac:43:4f:58:78:98:ec:d4:5c:89:06:
a7:84:43:76:71:95:97:15:fa:63:a4:99:7e:02:bb:
95:23:e8:dd:3b:d3:58:68:11:99:ed:98:0d:87:7a:
72:4b:39:ed:60:ec:8f:bb:3b:84:74:b1:b6:33:87:
ea:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0B:2F:AC:2A:42:EC:E2:44:FE:67:99:F2:DA:CF:5E:31:B5:C0:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9bdb552-3747-3060-8c91-220dceab6cf6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:77:e4:06:6e:cb:2e:c6:83:97:15:e0:19:74:a3:66:1a:9a:
4a:cd:1a:a1:0f:38:bc:f2:23:d0:4a:41:bc:4a:46:d7:03:65:
73:38:85:1f:03:b5:21:bb:1f:87:c3:22:8a:b6:e8:da:17:ad:
b9:03:d2:93:16:0d:45:39:f7:b3:46:19:e2:2b:2f:4d:d6:c2:
e9:15:e1:b8:a1:07:12:9e:05:9e:0d:08:8c:ae:82:05:c7:ba:
49:60:a2:12:4e:67:ed:2b:ef:1f:14:3e:7b:6c:25:79:fe:13:
b3:d2:97:dc:9b:08:e8:29:fb:d5:0a:32:53:5b:ec:f7:bd:7f:
ab:0b:53:6a:b0:1b:69:24:42:89:c7:a0:9d:80:45:07:6d:c4:
7a:fa:37:ef:eb:16:a1:38:fb:44:35:1f:db:d5:3f:1c:47:ac:
ca:c4:cc:ad:5f:e5:f5:c4:e8:7c:1e:f3:b7:45:be:63:f1:93:
72:78:b9:bd:80:c9:80:b4:0a:90:36:0c:08:57:21:b8:66:1c:
a1:af:e4:52:91:72:15:29:d8:f0:43:cb:bd:f7:10:39:1b:b1:
76:83:4f:64:0d:ec:15:f6:ae:80:0d:24:b3:2d:df:00:f3:2a:
84:f6:38:25:d7:16:8a:53:73:1e:20:fb:8a:1c:21:4d:64:a4:
c9:b5:d7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:21:10 2026 by rpki-client