This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/882d0ec4-8387-38e3-93e9-e4806eb2a252.roa
File: 882d0ec4-8387-38e3-93e9-e4806eb2a252.roa (raw, json)
Hash identifier: aAU0WaRTS76niMpxGULZRjA2N+aO1jMYp5294fjfPNU=
Subject key identifier: 38:5A:1F:83:A1:4D:83:6B:4F:2A:CF:22:65:7D:46:AA:9D:D7:3D:E7
Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Certificate serial: 010D0C9F4328584C794C51F8355B2E39C9A77900
Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/882d0ec4-8387-38e3-93e9-e4806eb2a252.roa
Signing time: Sat 10 Jan 2026 02:00:31 +0000
ROA not before: Sat 10 Jan 2026 02:00:31 +0000
ROA not after: Fri 10 Apr 2026 01:00:31 +0000
asID: 26904
IP address blocks: 23.247.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:79:4c:51:f8:35:5b:2e:39:c9:a7:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Validity
Not Before: Jan 10 02:00:31 2026 GMT
Not After : Apr 10 01:00:31 2026 GMT
Subject: CN=ab80c9cb-d156-43b0-a918-586702131fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:04:75:0d:60:6e:b8:bf:ab:4a:50:b8:97:41:
4e:7e:49:15:83:3d:bb:5b:16:ef:ce:64:bc:6d:a4:
8d:62:31:d8:ad:cc:45:82:79:6e:d1:a5:cb:cf:74:
b6:f9:15:e7:2c:15:ea:32:61:82:ef:eb:bc:20:36:
1e:47:5e:16:b5:6f:d5:ae:75:c3:35:66:f7:60:f2:
e6:1f:4a:c2:92:3e:89:f1:ac:09:1e:29:83:3c:b9:
96:0e:c4:b8:f3:b4:5b:24:23:bb:62:ba:72:02:c9:
fe:4c:17:87:d9:82:83:78:7b:ce:61:d7:3d:9a:4c:
0f:ed:7c:3f:09:2f:8c:7d:99:61:e6:db:40:af:c2:
f0:46:cb:54:4e:3b:4d:49:b5:55:88:f6:79:94:b9:
ab:86:1f:6e:a9:7e:8d:2f:30:6b:66:6c:13:41:03:
bd:6b:9b:d7:ed:97:78:86:6a:0d:e4:0f:c2:f5:0b:
4f:e9:1a:40:f3:cf:e3:b0:db:b5:15:c3:a8:53:d9:
20:9c:4b:03:6d:9c:9a:ac:4e:69:ce:ea:f8:7d:7f:
81:b1:e6:03:8c:69:94:1d:62:36:62:fd:be:39:13:
ad:86:4c:57:ff:a5:22:95:b3:39:a9:7d:70:d7:60:
0a:68:5f:bc:2c:59:45:e9:7a:23:02:38:f2:1c:08:
3f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5A:1F:83:A1:4D:83:6B:4F:2A:CF:22:65:7D:46:AA:9D:D7:3D:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/882d0ec4-8387-38e3-93e9-e4806eb2a252.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl
X509v3 Authority Key Identifier:
keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.247.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:4f:48:0a:02:58:31:2f:64:ef:02:db:ae:86:91:b6:3b:1e:
81:30:c8:1e:75:62:af:85:68:a5:a9:92:27:c6:4f:4f:4e:a5:
68:bc:9d:19:2c:6b:b2:d9:56:d3:04:e0:b9:ef:2f:45:86:d5:
12:48:64:be:ea:e6:8e:7c:82:40:b4:22:02:e1:9b:e9:08:09:
91:0f:68:58:8a:56:26:b9:89:ab:22:a1:a7:0f:db:c4:20:b9:
47:cf:a6:1d:e8:82:c6:f0:0d:87:7e:7d:c3:da:a6:89:2f:94:
a6:12:fc:57:5f:3f:17:e6:63:fe:06:9e:01:bf:d6:13:7c:6c:
c1:04:53:00:03:69:07:48:81:a2:61:68:e5:25:67:54:da:4e:
9a:d4:6f:da:1b:f0:9c:d6:23:30:37:23:b1:fe:92:ec:8d:3f:
c5:bd:58:a5:ce:e4:6c:d3:31:c7:cd:aa:90:b6:ec:51:7a:40:
71:3c:2c:92:e7:44:ed:2c:0a:0b:1e:0f:b4:b2:1b:b4:8d:0e:
70:a5:d3:c6:46:62:32:e9:3e:b4:d4:5f:ba:1e:18:05:b6:7e:
8f:0b:bc:13:0a:f0:cc:39:43:35:71:e1:2f:c9:31:3c:e8:e6:
6f:62:6e:3e:75:9b:c2:8e:fd:d6:bd:dd:f4:9c:b2:4e:e0:e9:
77:ee:02:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:32:22 2026 by rpki-client