This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9abc068-7edc-39ad-ba76-b94baf924d42.roa
File: c9abc068-7edc-39ad-ba76-b94baf924d42.roa (raw, json)
Hash identifier: FX0diI4PA/PNFxjDBYs0vl4xZQBqAeoK6905Up16Sog=
Subject key identifier: 0C:DB:50:D9:C7:C8:1E:0B:11:63:3D:A3:FB:CB:D5:49:37:F2:05:8B
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584C4CA13FAF026E9DCA5FD0AA80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9abc068-7edc-39ad-ba76-b94baf924d42.roa
Signing time: Thu 25 Dec 2025 02:00:31 +0000
ROA not before: Thu 25 Dec 2025 02:00:31 +0000
ROA not after: Wed 25 Mar 2026 01:00:31 +0000
asID: 397202
IP address blocks: 216.168.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4c:a1:3f:af:02:6e:9d:ca:5f:d0:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 25 02:00:31 2025 GMT
Not After : Mar 25 01:00:31 2026 GMT
Subject: CN=70fdafe6-b179-4a20-a070-da6ae98f010b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:36:44:de:f1:c4:ef:e7:b6:09:68:2d:71:27:
dd:53:e2:a2:51:aa:2c:ca:83:9e:27:64:12:11:08:
eb:ed:1c:b3:25:b6:60:f1:82:6d:75:92:a3:a4:7c:
d8:fd:d1:7a:46:48:0c:b2:0b:3e:d3:0a:89:ef:79:
c0:ca:b5:18:b6:5c:75:eb:4d:1e:e7:27:ed:1c:dd:
4a:c7:14:aa:1c:af:37:cb:68:dc:7f:eb:74:57:e6:
81:76:22:02:5c:1b:2a:ae:fa:11:e8:4c:4c:60:b8:
27:4e:36:1e:40:3f:dd:55:d3:29:f4:ac:b3:9b:ba:
82:16:cd:51:cf:ce:f7:26:d8:4c:a2:d6:4b:6f:9d:
d4:5b:c2:26:ec:79:9c:b6:bc:b2:ba:f8:7e:43:73:
fa:e7:75:07:84:f5:d6:ce:82:1d:d1:98:97:c7:d9:
6e:a8:50:70:1d:c8:9e:e9:17:7c:82:21:75:41:db:
a5:85:0a:4e:ac:58:c0:95:34:11:1e:2f:2f:08:6c:
00:ee:e7:51:97:21:10:f7:4b:72:c6:83:69:7b:8a:
04:11:e7:14:cd:51:0a:36:18:59:83:43:ca:38:da:
fe:a4:4a:2f:5c:2a:46:7b:c6:78:38:ed:f2:d5:4a:
a1:53:6b:d6:cf:0d:e7:62:52:10:3b:f0:bd:7e:7b:
ff:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DB:50:D9:C7:C8:1E:0B:11:63:3D:A3:FB:CB:D5:49:37:F2:05:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9abc068-7edc-39ad-ba76-b94baf924d42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:5a:b1:2a:70:02:f8:40:a2:7f:ed:fe:a7:06:eb:f4:2f:0b:
d5:d5:2d:3b:3e:f3:30:12:1e:5c:d4:0a:be:f5:fe:55:08:71:
0a:97:79:28:7b:99:8f:58:d9:4b:d0:57:dd:19:cb:f0:f1:c5:
a3:dc:15:ee:2e:d8:ef:97:68:5e:09:66:67:12:a8:fd:51:98:
a9:5c:6f:5f:17:d9:d2:f7:fe:98:2a:41:7e:d1:d2:23:9b:2a:
8c:65:57:d8:f8:f5:7b:f6:e8:04:aa:50:d0:53:cd:22:41:59:
05:0a:23:52:14:ea:40:58:0f:13:b4:8f:38:e9:78:e1:a3:a6:
8a:72:cb:0d:f0:9b:0a:4d:2e:6e:d5:25:33:27:c1:04:7d:77:
64:64:66:ad:c9:ce:90:50:20:b3:71:ad:0e:d0:ff:cf:cf:84:
ca:35:82:f6:a5:48:5a:67:8a:ca:c3:ec:b1:7d:4f:7d:83:50:
a0:ba:02:56:cc:87:3c:d8:07:05:3f:6c:c1:e3:37:0b:00:db:
76:19:94:13:72:35:07:10:2a:01:d7:b1:b8:22:a3:22:61:f7:
8c:49:4c:2e:39:ab:ca:48:f8:69:c4:33:a1:74:48:6f:b6:c7:
92:64:e7:c1:69:91:23:60:e7:91:34:0d:61:f2:f2:39:fa:a7:
36:23:39:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:46:08 2026 by rpki-client