This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa
File: 838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa (raw, json)
Hash identifier: A/dVi63ADw9fH3fRAo3CoF6CtIFe1ucvZo6NvTom50w=
Subject key identifier: 0A:AE:62:4C:D8:A1:FC:2B:94:E9:55:C7:FB:05:73:77:09:FB:4A:D7
Certificate issuer: /CN=df94af30-a8e8-42b4-9e43-649437c0cac7
Certificate serial: 010D0C9F4328584CAE570767849E48BD2609F800
Authority key identifier: 4A:55:61:BC:24:00:53:15:DC:9F:48:CF:55:4F:D6:D8:8A:E2:FC:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 397681
IP address blocks: 192.219.99.0/24 maxlen: 24
198.168.2.0/24 maxlen: 24
199.202.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 31 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:07:67:84:9e:48:bd:26:09:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df94af30-a8e8-42b4-9e43-649437c0cac7
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=f3918cce-9dc0-49cc-8993-30639e28a613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9d:b3:2c:1f:40:83:8f:51:e9:2e:ea:e1:3b:
77:92:45:2f:64:9b:41:08:5b:88:ff:05:5b:c5:8e:
5e:c6:cd:6f:2d:8f:5c:08:4e:5b:d8:ae:37:fd:38:
29:1c:39:ac:e9:c8:63:d7:63:14:b4:8c:9b:f2:e3:
c3:6f:96:11:36:53:88:31:f9:70:5d:e3:47:f7:a0:
46:24:e2:01:13:d8:1d:e0:0a:57:8e:41:25:15:1f:
a9:dd:f0:31:57:21:94:a0:27:f9:22:9a:bd:7b:f5:
2a:0f:ff:eb:d8:81:d0:88:8b:0f:94:91:d8:f1:bc:
53:b6:e1:54:66:6c:ad:17:e9:1c:4a:34:d6:54:f4:
c4:c4:f6:39:2f:21:47:d1:1e:9f:23:de:01:68:c4:
57:61:d6:b6:a3:21:d7:a1:62:10:e3:1c:8c:a3:5e:
57:bc:d2:bc:8f:97:28:17:4e:4a:b8:c8:6f:e7:5f:
86:ec:10:41:4d:40:03:7b:ce:29:e7:d1:8d:05:c5:
27:8b:25:db:68:23:28:5d:dc:41:37:ca:1a:e8:96:
4f:93:c0:b5:28:7c:e1:00:3c:d6:25:54:37:12:57:
b5:9b:f2:44:30:df:0c:bb:12:12:87:2e:f2:83:81:
57:02:59:02:3c:44:d2:38:7c:72:0c:c9:05:83:51:
0e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AE:62:4C:D8:A1:FC:2B:94:E9:55:C7:FB:05:73:77:09:FB:4A:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.crl
X509v3 Authority Key Identifier:
keyid:4A:55:61:BC:24:00:53:15:DC:9F:48:CF:55:4F:D6:D8:8A:E2:FC:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer
sbgp-ipAddrBlock: critical
IPv4:
192.219.99.0/24
198.168.2.0/24
199.202.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:fd:1a:34:fc:e2:ae:ce:7c:e6:01:36:47:5c:ae:6f:43:64:
37:09:76:e7:15:32:96:76:0c:dc:13:d6:bc:2b:6f:7c:b0:01:
c6:6a:57:a6:22:32:bd:c5:6a:b4:40:89:65:a8:a3:df:b2:72:
95:1d:78:c7:36:1f:61:4c:2b:dc:8c:35:76:50:fa:98:ad:a8:
ba:b7:e7:c4:4b:29:76:3b:31:e3:59:43:96:84:77:fc:b4:82:
67:3a:3d:f1:b2:e2:f1:7a:f7:62:c1:a2:d1:8b:33:cb:09:d6:
66:29:4a:8b:2d:f2:24:4d:9e:b8:66:f2:61:9a:ec:ac:4d:96:
8d:06:3c:94:cd:81:3f:1d:73:79:0e:30:43:07:81:1b:1f:d2:
be:d6:32:0b:1b:34:3d:e8:98:d8:16:7f:e2:77:d5:ce:89:f2:
59:4d:99:84:63:7d:61:43:fd:cf:33:33:0c:8c:6a:46:74:95:
ab:42:a0:f7:e9:1e:e9:14:4b:d2:9a:ff:0b:53:e5:76:f2:4a:
c8:30:e6:6d:c6:20:2b:b3:ce:72:8a:5a:59:ab:7a:32:df:be:
1f:d5:fe:a5:c3:c2:8c:38:10:fd:2e:2b:8a:39:05:0c:54:5b:
21:b5:c1:6e:a3:ff:14:45:b2:da:28:da:cb:6e:9d:3e:0d:91:
57:d7:06:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 14:54:23 2026 by rpki-client