This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa
File: 1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa (raw, json)
Hash identifier: +UW3OdpADf/A1FEmNy4I5LTambb886/cHtP6PGsn6aM=
Subject key identifier: 7D:EE:7A:1F:FF:FC:CD:F1:CD:9A:B9:82:91:C2:26:1D:7A:14:7F:B0
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584C688BE6793E97B1E71DB64C80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa
Signing time: Sun 04 Jan 2026 02:00:30 +0000
ROA not before: Sun 04 Jan 2026 02:00:30 +0000
ROA not after: Sat 04 Apr 2026 01:00:30 +0000
asID: 3356
IP address blocks: 199.35.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:68:8b:e6:79:3e:97:b1:e7:1d:b6:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Jan 4 02:00:30 2026 GMT
Not After : Apr 4 01:00:30 2026 GMT
Subject: CN=fd26ad5d-fa2b-4df0-9bd0-82aba3e2b314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ee:da:74:c8:2c:14:4b:7e:ec:be:db:e9:9d:
e6:87:09:8b:3b:dd:4b:18:17:df:8f:f0:81:f4:c4:
c5:19:12:2c:09:7d:c6:61:56:58:2a:02:cb:d4:73:
7c:be:38:f2:63:86:79:41:64:2a:68:b8:61:69:92:
f3:42:95:74:eb:49:9b:c7:d7:43:93:cb:d8:d1:de:
4c:dd:ba:7c:de:6f:f1:f7:b3:fb:84:81:2d:42:71:
58:6b:65:85:04:93:ad:a2:9d:0e:40:4d:de:cb:19:
8c:b5:b4:49:b2:5c:97:1f:44:c7:13:75:8a:9c:df:
b4:0b:6c:1a:ad:5d:f0:68:fb:fc:5b:5b:14:9a:13:
7a:eb:2a:7e:ff:00:a0:fd:43:a8:01:fd:a1:26:1d:
dc:df:5c:37:4e:6c:3d:98:f1:a1:73:1c:f5:16:20:
cd:f3:bc:92:af:48:ef:cd:41:83:35:b2:2c:f4:f7:
60:ee:9e:20:cb:bb:02:e3:7d:dc:0b:4a:7f:b2:5b:
db:13:1c:9a:b8:e0:b5:c8:56:86:59:99:1e:c5:6c:
d9:50:43:e3:5d:30:5d:07:ce:45:a9:0a:e2:74:b0:
0e:3f:22:fb:e4:66:4c:28:2e:a6:f2:9e:c0:28:e9:
a8:ff:ff:51:a0:0d:a5:9e:81:c6:9b:72:a8:c4:6b:
24:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EE:7A:1F:FF:FC:CD:F1:CD:9A:B9:82:91:C2:26:1D:7A:14:7F:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
199.35.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:20:c5:9c:8c:8a:b2:de:fe:60:21:d9:74:f4:8f:47:2f:da:
1c:68:ae:43:e9:af:b6:00:c2:60:43:b2:07:4d:5b:0a:77:d4:
20:06:57:39:ad:08:bf:f8:30:0e:1e:41:79:75:34:7c:bf:a9:
2a:5f:8f:fa:9d:f8:cf:8f:ec:dc:95:4e:9d:70:04:5f:3a:d4:
af:97:4a:2e:a2:c9:ed:f4:84:49:0b:f6:0c:d0:27:2c:27:c6:
57:ca:81:a1:5b:54:ec:02:c3:ff:4c:03:c6:6f:4e:ae:5d:00:
4d:7a:05:84:25:d3:c7:ff:91:90:1e:bd:2f:59:cd:42:30:09:
e0:85:49:ef:2d:42:4b:ce:62:f0:93:78:64:b1:2d:32:c9:0a:
f6:68:6d:b8:59:67:4a:4c:db:02:82:2b:70:01:58:6c:b1:38:
ae:26:53:f6:5c:36:7e:16:ca:7d:f0:05:c4:08:c1:c9:aa:02:
7f:93:59:c2:b9:24:f0:b7:07:48:25:01:85:cf:3e:1f:db:a4:
7c:a3:37:09:e7:fe:59:2b:c6:a2:37:58:81:63:6f:93:b5:6e:
89:aa:ec:77:ae:aa:90:f4:56:88:73:4e:ec:b6:32:09:1e:46:
c1:23:86:8c:a7:83:3d:18:30:d9:2a:72:5c:7b:b7:5e:d5:18:
43:8c:26:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:50:33 2026 by rpki-client