This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/cfa4f32e-c53a-3acb-998b-283e18217244.roa
File: cfa4f32e-c53a-3acb-998b-283e18217244.roa (raw, json)
Hash identifier: Q8Cfv9xxug/O1Bumm79+5V3l8HT8ibxDLYwiHOV5lY0=
Subject key identifier: 90:63:65:14:DE:5A:94:71:E2:FB:46:88:1C:5E:06:FD:D0:EF:6B:93
Certificate issuer: /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Certificate serial: 010D0C9F4328584C794C252DAD199666DF364500
Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/cfa4f32e-c53a-3acb-998b-283e18217244.roa
Signing time: Sat 10 Jan 2026 02:00:31 +0000
ROA not before: Sat 10 Jan 2026 02:00:31 +0000
ROA not after: Fri 10 Apr 2026 01:00:31 +0000
asID: 14618
IP address blocks: 143.220.128.0/23 maxlen: 23
143.220.130.0/23 maxlen: 23
143.220.132.0/23 maxlen: 23
143.220.134.0/23 maxlen: 23
143.220.136.0/23 maxlen: 23
143.220.138.0/23 maxlen: 23
143.220.140.0/23 maxlen: 23
143.220.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:79:4c:25:2d:ad:19:96:66:df:36:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Validity
Not Before: Jan 10 02:00:31 2026 GMT
Not After : Apr 10 01:00:31 2026 GMT
Subject: CN=d64f20bd-4707-42de-ba1e-3c5b1e843ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f6:6d:57:4b:66:9e:95:7c:95:ee:ad:87:a1:
8b:a8:92:e6:5a:b5:f2:a5:60:0e:d4:e7:1c:60:af:
1f:25:99:15:29:bf:9d:0d:8c:a5:68:ee:58:f4:0f:
88:f2:4a:4b:45:44:6d:dd:2a:ff:d0:6f:d3:f1:a0:
45:dd:a6:78:53:2d:1d:04:e6:7a:c5:07:fd:7a:e5:
aa:a0:f2:9a:07:f4:f8:ec:55:28:50:3d:72:3f:0d:
46:3c:8f:90:47:37:a4:3b:35:72:9a:44:07:be:da:
6b:22:28:39:e9:e8:0d:06:b0:d7:3c:0a:e5:70:35:
e6:52:ed:9f:de:e2:1c:8e:2e:62:f0:1d:50:43:68:
15:6b:77:38:ec:96:7d:b5:ba:24:7b:f1:22:a7:63:
94:11:7e:66:23:c1:8a:51:f7:e6:b7:1f:e3:c2:70:
fc:a0:17:d7:a6:93:8b:68:92:c8:ea:b3:61:29:4f:
b6:78:f4:af:3d:ed:ea:9e:77:90:c4:b2:a1:0a:90:
50:c8:c8:85:c1:e3:b7:e0:ee:df:4a:84:c1:a3:7a:
58:e1:09:71:8c:c0:73:6b:ed:2d:49:e4:7c:ea:71:
e3:b3:cb:df:63:58:15:51:7d:17:7b:c8:ab:3f:60:
7d:0c:e6:50:66:08:67:fa:63:00:a0:b4:85:93:fb:
0c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:63:65:14:DE:5A:94:71:E2:FB:46:88:1C:5E:06:FD:D0:EF:6B:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/cfa4f32e-c53a-3acb-998b-283e18217244.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl
X509v3 Authority Key Identifier:
keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
sbgp-ipAddrBlock: critical
IPv4:
143.220.128.0-143.220.142.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:ba:f9:47:70:32:30:16:1f:75:22:4e:35:56:02:76:e9:38:
b3:94:7a:7a:7c:96:6d:7e:21:22:b9:db:36:b0:f2:e2:e0:bd:
f7:b5:84:d1:73:f5:bc:f4:19:7a:5b:c4:f5:48:4c:3a:21:85:
4f:2c:70:83:f9:33:f8:d3:73:e5:4a:43:9d:7b:b6:96:63:bf:
b1:16:02:22:ca:9b:d5:56:42:6d:da:b1:22:b1:7e:bd:c7:76:
e8:53:92:07:a0:6c:bf:aa:ef:ed:d0:17:2a:e5:62:7e:8a:40:
e6:f9:95:8a:e6:66:b8:b2:c6:65:a8:d3:f6:48:9a:f1:6c:10:
d1:ed:59:5a:7d:50:f8:95:30:02:e8:1b:2b:62:47:f2:24:4e:
fe:a6:4a:df:a9:55:96:50:23:cd:62:47:6b:17:9c:f3:c8:bb:
e1:cc:b9:c7:0d:c4:1a:8e:b0:be:01:25:a8:b7:84:83:db:b7:
7a:4e:b1:2b:39:d8:39:a3:10:c2:31:ea:d0:cc:87:ca:f5:5b:
9c:bf:b4:f4:45:b2:45:7a:ad:75:76:ec:12:de:67:7b:fa:81:
85:9c:a8:16:2a:c0:29:6b:da:d9:b9:c8:7d:7d:26:0b:a9:8e:
a2:23:9d:97:da:92:65:c2:71:5a:96:61:8c:a2:14:6c:db:f5:
4e:c6:3f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:53:37 2026 by rpki-client