This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d998e5d-3741-3db9-a5a4-201dfc0ba612.roa
File: 2d998e5d-3741-3db9-a5a4-201dfc0ba612.roa (raw, json)
Hash identifier: LhMvL1dyRtRRFjgW6Rsgtxezv2igZHj2FwT+NfQ66UM=
Subject key identifier: E0:E0:77:FB:F2:0C:EA:1F:AE:78:F3:9C:23:A6:91:0E:51:E7:0F:CE
Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial: 010D0C9F4328584C4F6BCB235C111AEF35431F80
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d998e5d-3741-3db9-a5a4-201dfc0ba612.roa
Signing time: Fri 26 Dec 2025 02:00:32 +0000
ROA not before: Fri 26 Dec 2025 02:00:32 +0000
ROA not after: Thu 26 Mar 2026 01:00:32 +0000
asID: 12037
IP address blocks: 167.176.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4f:6b:cb:23:5c:11:1a:ef:35:43:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Validity
Not Before: Dec 26 02:00:32 2025 GMT
Not After : Mar 26 01:00:32 2026 GMT
Subject: CN=b2b2e7e0-9f62-40bc-8783-00d041a94456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:59:a4:2e:2d:2a:e1:6a:dc:4b:f2:42:e1:bd:
41:4d:bf:32:66:f2:74:84:55:16:6a:46:d0:4d:b4:
54:4f:f1:81:36:8e:ff:00:64:66:78:d8:b3:9f:01:
c1:7d:25:02:87:5b:3f:3b:e2:7e:da:d9:f6:6a:f3:
2b:5f:f9:a2:eb:ac:fa:7a:94:40:16:08:fb:6c:fb:
ec:10:aa:8e:c4:66:31:86:99:02:8a:1a:35:ef:e2:
cb:a7:98:e1:9c:f9:fc:62:45:32:56:d9:34:b7:22:
a3:fe:8b:4d:b0:0e:11:9d:a8:85:fc:7d:e2:45:41:
84:84:53:f6:a4:ba:2a:79:a5:47:0d:47:42:67:f2:
ff:26:88:f7:44:1d:29:5c:52:1d:cf:e2:f9:cd:10:
0a:f4:35:7c:a7:7f:91:f1:a0:80:f7:70:bc:ea:6c:
27:24:b0:d2:d7:53:63:e1:36:c9:da:a3:57:76:a8:
9d:76:90:b5:9f:69:a3:93:b2:0d:9e:d9:65:7e:eb:
64:2d:3e:2f:e8:67:a5:9c:16:14:b7:5e:27:1b:c7:
d0:6e:68:a6:76:5e:05:13:d8:89:23:28:af:19:50:
60:f4:d7:48:1d:70:03:33:ad:bd:24:5f:57:71:47:
79:b0:2b:36:e1:f0:4e:51:c6:34:b7:2b:69:20:e2:
a8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E0:77:FB:F2:0C:EA:1F:AE:78:F3:9C:23:A6:91:0E:51:E7:0F:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d998e5d-3741-3db9-a5a4-201dfc0ba612.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
X509v3 Authority Key Identifier:
keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
sbgp-ipAddrBlock: critical
IPv4:
167.176.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:8c:8d:55:16:a1:d7:88:34:67:34:04:d5:c7:2c:ea:60:f2:
55:cb:5f:ec:e4:ba:f5:de:9f:c2:a9:d5:61:a8:6b:e4:6f:2a:
6d:68:8a:81:8e:73:ce:e6:1d:89:68:40:f2:26:40:72:25:26:
64:e5:da:21:b5:e2:a9:3d:0d:9c:f4:e1:be:55:70:7e:2e:16:
47:e8:8f:72:29:4c:4a:96:95:e6:6f:13:f7:f9:de:e4:9f:ab:
05:6d:b1:b7:45:08:94:51:a4:d2:67:2b:cf:26:08:ed:55:4a:
5c:a9:ea:67:88:26:1b:39:b4:a3:35:61:f7:aa:9b:fb:84:71:
e1:0f:6c:d8:de:48:c6:07:94:4f:5c:3e:35:ce:8a:17:c5:79:
46:04:67:94:a3:e4:be:6a:f3:7d:2f:ab:8d:8b:5f:56:bd:e4:
04:9a:ca:0c:27:71:9f:0b:bf:29:52:31:e8:52:b5:70:19:f5:
cf:12:0c:1f:a4:b7:e9:c3:ed:a8:69:1b:ef:39:67:d4:a0:96:
93:76:99:3a:4d:c5:39:5a:42:85:a8:f4:98:3b:a3:9a:4e:0d:
69:f1:67:87:53:2a:e3:da:72:3e:5e:da:2c:9b:b9:7f:c7:4f:
d7:0e:15:a2:aa:22:7e:ff:20:6d:85:a2:ec:72:17:7d:85:22:
a5:0e:82:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExPa8sjXBEa7zVDH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm
ODhhMB4XDTI1MTIyNjAyMDAzMloXDTI2MDMyNjAxMDAzMlowLzEtMCsGA1UEAxMk
YjJiMmU3ZTAtOWY2Mi00MGJjLTg3ODMtMDBkMDQxYTk0NDU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklmkLi0q4WrcS/JC4b1BTb8yZvJ0hFUWakbQ
TbRUT/GBNo7/AGRmeNiznwHBfSUCh1s/O+J+2tn2avMrX/mi66z6epRAFgj7bPvs
EKqOxGYxhpkCiho17+LLp5jhnPn8YkUyVtk0tyKj/otNsA4RnaiF/H3iRUGEhFP2
pLoqeaVHDUdCZ/L/Joj3RB0pXFIdz+L5zRAK9DV8p3+R8aCA93C86mwnJLDS11Nj
4TbJ2qNXdqiddpC1n2mjk7INntllfutkLT4v6GelnBYUt14nG8fQbmimdl4FE9iJ
IyivGVBg9NdIHXADM629JF9XcUd5sCs24fBOUcY0tytpIOKoawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFODgd/vyDOofrnjznCOmkQ5R5w/OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj
YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvMmQ5OThlNWQtMzc0MS0z
ZGI5LWE1YTQtMjAxZGZjMGJhNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj
YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw
Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw
Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7AmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAESMjVUWodeINGc0BNXHLOpg8lXLX+zkuvXen8Kp1WGoa+RvKm1oioGO
c87mHYloQPImQHIlJmTl2iG14qk9DZz04b5VcH4uFkfoj3IpTEqWleZvE/f53uSf
qwVtsbdFCJRRpNJnK88mCO1VSlyp6meIJhs5tKM1Yfeqm/uEceEPbNjeSMYHlE9c
PjXOihfFeUYEZ5Sj5L5q830vq42LX1a95ASaygwncZ8LvylSMehStXAZ9c8SDB+k
t+nD7ahpG+85Z9SglpN2mTpNxTlaQoWo9Jg7o5pODWnxZ4dTKuPacj5e2iybuX/H
T9cOFaKqIn7/IG2FouxyF32FIqUOgm4=
-----END CERTIFICATE-----
Generated at Fri Jan 9 18:20:17 2026 by rpki-client