This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa3aaa0b-972a-3dc5-aeb1-702709556878.roa
File: aa3aaa0b-972a-3dc5-aeb1-702709556878.roa (raw, json)
Hash identifier: xGNKRrvpBKgoOMlbaIPWJs/53wFcEiYCKSrCvtcpMNM=
Subject key identifier: B7:91:32:53:1C:A9:30:58:89:A7:1A:E4:59:6D:7E:98:89:51:67:A1
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584C3916752F7E99BD0AFF9C6500
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa3aaa0b-972a-3dc5-aeb1-702709556878.roa
Signing time: Thu 18 Dec 2025 02:00:31 +0000
ROA not before: Thu 18 Dec 2025 02:00:31 +0000
ROA not after: Wed 18 Mar 2026 01:00:31 +0000
asID: 25485
IP address blocks: 198.41.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:39:16:75:2f:7e:99:bd:0a:ff:9c:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 18 02:00:31 2025 GMT
Not After : Mar 18 01:00:31 2026 GMT
Subject: CN=1f03bac4-d329-476e-ba34-f22d5a969fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5b:20:93:c7:95:d8:7e:66:35:8d:03:88:c9:
77:70:48:2d:34:05:f9:1b:65:ac:e5:34:72:86:7b:
e8:00:14:51:c1:b4:31:d7:f9:92:87:16:bc:5e:4f:
5b:fd:87:e9:8d:54:98:8e:5d:9e:9e:02:4d:61:31:
2f:23:e1:30:b8:5d:7f:de:fe:f0:0e:2d:54:b6:6e:
f1:e9:6e:bb:f7:89:ef:79:3c:51:c8:a0:00:76:ee:
2e:fc:1d:62:1f:5f:f3:9a:83:77:7b:d4:df:ca:84:
71:8b:5f:07:58:88:3d:6c:80:ad:52:0b:90:2e:f3:
8a:93:b9:ab:bc:3d:dd:58:87:a6:eb:9d:78:10:31:
68:f1:32:27:fc:b1:33:51:77:a9:72:fc:2d:09:e6:
39:15:e5:a2:cd:c8:c1:31:f7:60:22:27:e1:46:4a:
5d:31:a5:23:e3:fe:b4:b2:f1:9e:62:08:60:21:fb:
b1:33:08:1f:78:d3:c0:9c:39:1a:97:a2:c1:ab:a1:
02:a7:a6:4f:88:c0:d0:3b:38:7a:9d:79:fa:cf:d2:
96:ea:87:9c:50:08:d1:88:f1:cb:2c:18:5f:40:9f:
6e:ba:76:a9:9f:80:a9:62:5d:b5:e1:1a:09:e0:6e:
02:d5:18:66:60:6c:fb:6e:90:63:4d:5c:d4:61:a9:
d7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:91:32:53:1C:A9:30:58:89:A7:1A:E4:59:6D:7E:98:89:51:67:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa3aaa0b-972a-3dc5-aeb1-702709556878.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:28:ec:e7:cd:48:77:7d:9a:55:8a:1f:7d:04:1d:f0:e5:f2:
1a:db:9b:77:d6:b3:fe:d1:98:55:03:6e:2b:55:cf:dd:78:a0:
70:10:2c:37:ad:d0:41:36:4e:99:a9:9e:ba:be:5f:6c:86:d9:
fa:95:fc:fc:e3:10:78:e9:c9:77:ca:68:fe:31:fa:c5:49:07:
63:bb:aa:e8:d9:54:28:bf:27:ed:9d:57:d5:0b:5f:e0:6c:01:
7c:58:32:5d:70:45:51:a5:1b:04:60:b6:63:ca:06:22:a3:43:
5d:fd:c6:bf:36:43:ad:6f:4a:dd:4c:01:b3:e1:5c:6a:7b:0d:
b7:44:09:28:d3:5b:75:41:1f:90:d9:5f:46:6e:84:fb:93:94:
69:6b:c7:3a:d4:c6:df:55:03:89:7a:79:ff:7a:cd:ef:cd:a4:
3a:6c:dc:7c:18:3d:c9:dd:18:0e:2f:00:3b:92:d9:b1:23:2a:
bd:f0:74:10:8a:98:c2:45:95:e9:5e:54:b0:a3:40:20:7d:b1:
b0:f9:1d:fb:32:2a:35:a5:bb:04:f3:15:d3:b1:88:a6:75:e8:
0c:d4:5a:ad:5c:6a:9f:f4:98:02:21:96:5c:74:2d:5b:0f:25:
92:ec:fd:fd:ea:3e:45:a2:77:e4:72:0a:0b:6d:02:3a:80:f3:
a6:55:3b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:10:17 2026 by rpki-client