This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af34dd58-8ed2-3543-b763-7807c9f26ff8.roa
File: af34dd58-8ed2-3543-b763-7807c9f26ff8.roa (raw, json)
Hash identifier: +6esrICRmH17KOgzLPcFcJ/fdbDVL1wFvbVgXuE0T3E=
Subject key identifier: 79:A2:51:8E:7E:E4:E3:08:5B:38:AE:2A:2E:7D:B8:51:4B:02:F4:1F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584C45A7CDFE929EB467B60C6380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af34dd58-8ed2-3543-b763-7807c9f26ff8.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 7155
IP address blocks: 184.20.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a7:cd:fe:92:9e:b4:67:b6:0c:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=645c2e20-353a-45b7-b06c-5847ec7e839b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3a:ac:92:c2:f7:21:0b:8e:d8:f4:15:89:41:
e4:5a:44:cf:c5:ac:b4:3b:ff:d8:cb:72:16:e2:40:
81:cb:fc:bd:a0:45:4b:c1:8d:43:b6:3c:8d:44:f5:
b6:19:e1:42:51:29:04:be:9e:28:8c:de:2e:95:71:
50:58:84:6f:83:46:53:3d:83:ff:06:6f:a3:f6:de:
0d:1f:bc:dc:f3:f1:e2:c5:65:b8:9a:bb:f3:2e:b6:
5e:23:f5:a3:27:15:c7:8b:f6:5f:66:c4:7e:6a:bb:
66:2e:6a:41:dc:d6:02:e7:f2:36:b1:26:7b:35:eb:
5b:2c:27:ac:e1:4a:e6:6c:7e:af:02:4b:ce:2e:e6:
ea:3a:46:dc:12:cb:49:6d:d8:cd:a1:ab:af:f2:37:
bf:ec:f2:8f:68:ff:1e:a5:e7:11:cb:a5:fa:6e:d2:
85:33:90:de:96:7c:3b:c9:8a:8a:f9:67:e7:0f:9a:
7c:fa:b0:4d:da:e0:91:e4:da:e6:24:c3:53:c3:3f:
3a:86:2a:dd:32:79:6c:5a:8c:5a:bb:05:5e:a2:ba:
21:7f:45:b6:fc:f9:7d:02:23:b5:6f:c5:62:50:08:
e7:f1:6f:ad:8a:19:30:fc:62:ec:66:71:60:e9:0a:
58:5f:9a:58:53:1d:4c:69:db:c3:a9:97:1f:a7:a5:
cd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A2:51:8E:7E:E4:E3:08:5B:38:AE:2A:2E:7D:B8:51:4B:02:F4:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af34dd58-8ed2-3543-b763-7807c9f26ff8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d1:84:97:0f:4f:59:71:92:b4:5d:b8:0e:41:68:74:66:c9:f2:
a6:cb:f7:c6:72:fd:db:85:af:29:ea:f0:bd:97:78:c0:61:eb:
2b:0a:bb:8d:f0:38:68:b3:dd:6e:c7:74:d6:1e:86:f0:27:71:
fa:d1:e9:68:14:6b:53:68:29:91:38:56:3c:b8:58:92:52:d1:
79:1d:04:b4:e2:9d:ad:ac:4f:90:b0:50:2b:fd:94:76:08:77:
cf:50:93:01:07:7a:71:ee:35:87:5c:4b:29:8d:8b:64:a9:ee:
be:cf:1e:98:ea:10:71:6b:36:ea:ec:00:a8:f6:b0:6d:6b:22:
34:49:3c:a5:c5:7f:38:26:ac:df:62:42:99:41:f2:42:4d:32:
ef:af:99:6b:93:21:e9:3b:48:c4:c6:04:a3:8f:a8:6e:40:67:
d9:b4:41:79:92:74:7a:b2:a8:e1:b0:19:ed:a8:ea:f3:21:83:
7f:ca:dc:b3:f8:7c:f5:48:18:f1:0c:9a:37:77:1b:60:61:2f:
58:b0:a3:73:e5:fa:cd:4e:87:61:49:f7:b9:3f:0b:9c:49:94:
a2:7f:a2:04:62:65:06:29:51:aa:b6:4c:93:43:53:1b:83:0e:
e7:7d:77:73:09:2c:b6:a9:4b:e0:53:33:90:28:a1:dd:34:2f:
8a:6c:97:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:58:16 2026 by rpki-client