This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3a11e3c-29b8-3899-a1d3-970745a11a14.roa
File: f3a11e3c-29b8-3899-a1d3-970745a11a14.roa (raw, json)
Hash identifier: nainyCHuDa0LUgFqaNqtP0C22L0BFHFK9dqI737oYP4=
Subject key identifier: 52:B3:08:4E:9D:8D:8A:7E:DE:CC:08:0A:7D:C1:A1:84:7E:16:F3:25
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584C4B3BD6D20DBD57671BB35C00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3a11e3c-29b8-3899-a1d3-970745a11a14.roa
Signing time: Wed 24 Dec 2025 14:00:40 +0000
ROA not before: Wed 24 Dec 2025 14:00:40 +0000
ROA not after: Tue 24 Mar 2026 13:00:40 +0000
asID: 16509
IP address blocks: 172.111.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4b:3b:d6:d2:0d:bd:57:67:1b:b3:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 24 14:00:40 2025 GMT
Not After : Mar 24 13:00:40 2026 GMT
Subject: CN=5df45927-06a0-4d14-bb5c-12dbd0ef5c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:dd:f5:d7:0f:0b:26:1c:58:e3:1d:4f:30:
c0:1f:cf:9b:44:bd:c5:3e:30:82:b0:a1:70:ca:14:
17:f7:fa:84:64:74:51:07:22:71:f3:b8:42:7a:ed:
23:07:2b:26:0e:2e:fa:59:19:ad:66:2b:e3:fd:a1:
18:96:45:3d:31:ce:8a:0d:38:6d:96:e4:4c:2b:97:
91:ba:92:fc:5d:cd:e6:75:b7:6f:ee:53:06:ff:3e:
2a:36:86:e0:c4:5e:ac:7d:90:97:e3:c3:d4:3a:ef:
bd:ab:12:c3:6e:d1:e9:c3:00:f5:4a:cb:1a:f2:eb:
5d:8e:9a:e4:c2:4c:31:04:a1:1b:1f:f3:6c:ac:bc:
14:f8:f8:a4:42:ea:8e:2d:32:ca:cb:eb:af:a3:f2:
88:be:13:52:24:2d:73:f7:f5:a7:f1:74:15:54:a8:
42:49:45:9e:af:a1:de:d7:63:79:3a:88:a1:f2:0c:
51:9f:a3:ae:d3:aa:66:80:4b:73:f5:21:64:ae:9c:
43:ca:48:89:de:d1:d6:4c:1c:3b:6b:2a:c6:40:a3:
f7:65:fe:5b:8e:41:3a:45:f2:67:36:ff:d5:2d:1c:
a1:fb:e9:7b:67:b1:61:5c:94:ed:84:89:46:ec:46:
66:b3:0b:6e:25:4c:6b:a8:ef:69:3c:60:1f:16:5f:
4d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B3:08:4E:9D:8D:8A:7E:DE:CC:08:0A:7D:C1:A1:84:7E:16:F3:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3a11e3c-29b8-3899-a1d3-970745a11a14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:d1:e8:fa:77:ff:33:ac:ae:6f:89:66:f6:0a:18:7e:79:bb:
aa:15:dd:29:98:db:37:2e:6a:e9:ef:2a:f0:e6:c3:56:33:1d:
5d:23:b6:ea:86:7d:d0:7c:36:2e:c9:a6:dc:b6:d9:0e:25:a2:
88:d2:76:f3:b7:a9:51:2b:60:1b:0e:46:c7:12:38:b2:37:41:
63:50:f9:6e:b5:c3:7b:a0:97:8d:96:e7:15:14:fd:65:b6:71:
ad:45:f6:0e:c1:f0:7f:47:36:ad:2e:73:22:5a:7a:80:f5:82:
b6:a1:3c:13:8f:b7:2a:a9:ed:f2:b7:85:e8:9f:9c:3b:b0:bf:
63:f4:9f:fb:16:74:dc:90:9f:72:c5:89:8f:ee:96:bd:a1:38:
ed:a7:a0:31:8e:23:6e:62:25:9d:99:cc:8d:c7:d9:15:fb:d2:
fa:d8:92:76:c8:21:49:d8:1b:6a:05:df:d6:cf:d8:1c:e1:78:
5e:da:97:79:01:56:60:6a:cc:57:01:34:b3:80:da:71:90:09:
40:9c:7d:d0:76:e4:b5:c9:1e:f0:fb:c7:e3:db:35:dd:00:72:
38:7c:d9:77:00:8f:c4:33:a8:89:b7:81:0e:25:24:6e:88:f5:
2a:a9:6c:8d:4d:ed:55:d5:d3:79:93:7f:fd:2f:dd:b2:b4:4f:
ca:b4:a8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:36:45 2026 by rpki-client