This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/0f23b3b1-954d-3567-bd9a-85457745ed41.roa
File: 0f23b3b1-954d-3567-bd9a-85457745ed41.roa (raw, json)
Hash identifier: 8Q4e/trWSLsGLBjPinOZ52MUhyv8+xgB9c40cy5BZL8=
Subject key identifier: E4:1D:94:99:A4:84:C2:C7:49:53:E2:89:0D:A6:AC:31:8D:75:F0:47
Certificate issuer: /CN=74a9f5cd-6394-4062-8085-0e1da1f04511
Certificate serial: 010D0C9F4328584C4CA11C856B36BE67A7979D80
Authority key identifier: CD:CD:C7:35:30:B0:1A:4A:43:FD:5E:84:8F:A0:E3:69:14:F8:6F:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/0f23b3b1-954d-3567-bd9a-85457745ed41.roa
Signing time: Thu 25 Dec 2025 02:00:31 +0000
ROA not before: Thu 25 Dec 2025 02:00:31 +0000
ROA not after: Wed 25 Mar 2026 01:00:31 +0000
asID: 398663
IP address blocks: 204.108.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/74a9f5cd-6394-4062-8085-0e1da1f04511.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/74a9f5cd-6394-4062-8085-0e1da1f04511.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4c:a1:1c:85:6b:36:be:67:a7:97:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a9f5cd-6394-4062-8085-0e1da1f04511
Validity
Not Before: Dec 25 02:00:31 2025 GMT
Not After : Mar 25 01:00:31 2026 GMT
Subject: CN=bce9402b-77c8-4ee1-bb31-395c5fd7a279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:48:10:9f:f7:1f:b0:dd:b6:14:f9:a7:27:55:
ae:33:e0:30:25:8a:eb:61:50:b5:38:e2:a2:e6:a5:
49:40:6f:ec:23:58:f5:61:31:cf:1d:62:ed:51:eb:
65:45:c1:5a:86:eb:ed:70:24:65:d1:ac:5a:6e:55:
87:41:78:a3:b4:da:a8:af:65:07:42:71:7c:ea:1a:
fc:14:26:88:ca:77:0b:1f:92:67:e4:4f:fb:b8:5e:
a7:34:df:4f:1e:c3:a7:ad:38:a7:b0:18:47:4d:e6:
52:88:b6:54:db:c8:ee:fe:b3:3b:32:98:99:63:d7:
e1:f0:b2:67:90:7e:3a:ba:83:19:20:ca:f2:7c:2c:
9a:28:7f:4a:96:1e:ab:c7:f2:ce:1f:e2:97:0e:34:
52:cf:df:fc:9c:9d:56:5a:6b:3a:f9:ef:f3:6f:1c:
90:a2:55:7d:f1:23:d2:dc:db:47:25:98:02:2e:de:
2c:d8:d5:14:a5:58:8f:26:e2:b6:b3:b3:75:65:a3:
56:71:d7:ac:e4:c6:70:d5:4b:74:cd:9d:12:46:c4:
96:c3:f2:d6:77:7e:fb:a6:df:e0:20:48:8b:d4:36:
3a:ed:ca:26:6f:2e:6f:e9:3d:7f:8d:e6:c1:19:fb:
64:d4:46:24:90:5f:79:1c:14:01:88:73:20:f9:b9:
50:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1D:94:99:A4:84:C2:C7:49:53:E2:89:0D:A6:AC:31:8D:75:F0:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/0f23b3b1-954d-3567-bd9a-85457745ed41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/74a9f5cd-6394-4062-8085-0e1da1f04511.crl
X509v3 Authority Key Identifier:
keyid:CD:CD:C7:35:30:B0:1A:4A:43:FD:5E:84:8F:A0:E3:69:14:F8:6F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511.cer
sbgp-ipAddrBlock: critical
IPv4:
204.108.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:bf:63:ae:ef:a9:14:46:b8:21:24:e4:30:ed:0e:2f:75:5a:
3c:19:5c:4b:22:9b:d8:1a:1f:81:5f:41:48:7b:bb:37:7f:ff:
20:1d:0f:ff:ca:a0:65:3d:aa:44:f1:f8:f2:fe:13:bb:57:23:
f9:ad:74:f7:b6:c2:f5:c3:25:f2:d8:b3:73:af:4d:f9:f9:93:
a2:fd:c9:28:89:85:87:68:c9:6e:7f:b9:8c:d0:e7:e7:c3:4e:
a1:f2:a0:1f:ba:61:9c:2a:42:82:00:64:0a:4c:3f:b6:74:d2:
ce:1e:46:de:ce:79:be:08:bb:d0:d3:44:d4:5f:49:19:72:c1:
ab:3f:a1:aa:bf:ef:38:b1:c9:67:9a:8e:7f:91:21:87:85:29:
bc:92:fa:81:7f:b9:09:3c:b5:58:76:81:e8:02:5d:8e:db:5e:
3c:0b:8b:b5:cc:5d:c4:43:5e:d6:35:b4:f7:04:f3:58:44:8a:
f0:2f:15:15:63:58:3d:b2:11:33:29:e1:21:48:15:5f:6f:ed:
36:14:17:7c:07:d8:53:d5:9f:e6:b5:b6:15:c6:67:85:61:f2:
b8:2a:34:9d:87:84:00:0b:28:fa:5b:26:79:30:c8:e9:90:5e:
e9:34:34:c7:53:b9:62:4f:4f:23:c9:cd:70:3e:81:fe:a8:b2:
0e:79:8d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:36:02 2026 by rpki-client