This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb344849-76d8-36a8-801c-c856e304a3a6.roa
File: bb344849-76d8-36a8-801c-c856e304a3a6.roa (raw, json)
Hash identifier: 3fc2+hG7NkdsZsH/bLEw1ufBXBHS2xmRqJGN8YIZgq4=
Subject key identifier: B4:14:DA:41:50:7A:A9:DC:A3:BD:44:A2:BF:7A:42:F5:9E:D4:94:CE
Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial: 010D0C9F4328584C5EC69CA9FFCB09B2BB5D76C0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb344849-76d8-36a8-801c-c856e304a3a6.roa
Signing time: Wed 31 Dec 2025 14:00:38 +0000
ROA not before: Wed 31 Dec 2025 14:00:38 +0000
ROA not after: Tue 31 Mar 2026 13:00:38 +0000
asID: 33141
IP address blocks: 24.38.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:5e:c6:9c:a9:ff:cb:09:b2:bb:5d:76:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Validity
Not Before: Dec 31 14:00:38 2025 GMT
Not After : Mar 31 13:00:38 2026 GMT
Subject: CN=09d0cd91-95e0-4612-b179-f00d929d4503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:82:60:88:05:52:ed:6a:c4:e4:dd:37:b1:32:
90:b9:18:3b:87:38:16:18:db:35:91:bd:d1:38:84:
af:a8:cc:b1:29:7c:57:49:78:82:fe:87:a6:a4:4a:
3d:3b:1d:4d:09:a5:cf:ce:e4:e2:6f:be:4b:f8:e0:
9e:d9:5c:c0:c1:3d:39:9f:50:1c:f2:64:8b:10:03:
d5:ee:d6:ac:12:f4:af:ed:ec:89:34:6f:2f:ba:ba:
85:28:3d:39:7a:95:63:06:56:86:11:24:06:47:91:
72:ad:93:6c:a4:b6:4c:b1:4a:a7:59:60:89:3b:11:
05:05:11:54:f9:87:93:c5:1f:5a:fc:c2:34:9e:4e:
b3:26:22:57:31:4a:66:27:1c:86:e1:ea:f2:92:4e:
45:24:87:14:2b:1c:52:be:93:80:0d:2b:3b:90:de:
be:97:64:6a:d7:7b:93:c1:2c:4a:4f:b2:e8:8c:58:
a0:26:0a:31:cf:23:e6:da:5b:33:88:19:0e:d9:d6:
74:ae:bd:b5:dc:3f:a9:a9:32:01:66:d6:d8:f2:61:
1b:43:9b:94:71:a9:d8:c8:c4:0a:47:1a:2e:14:23:
5e:47:e3:92:96:8a:b6:8e:84:9d:f3:68:5d:92:55:
cc:4a:72:d6:fe:71:48:6a:31:d9:80:dc:66:d2:42:
ac:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:14:DA:41:50:7A:A9:DC:A3:BD:44:A2:BF:7A:42:F5:9E:D4:94:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb344849-76d8-36a8-801c-c856e304a3a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
X509v3 Authority Key Identifier:
keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
sbgp-ipAddrBlock: critical
IPv4:
24.38.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:9e:c2:38:99:38:73:99:86:fd:61:ad:fa:d3:a6:ea:33:8f:
71:e6:5a:f9:15:11:ad:f0:46:1c:9d:a1:1c:33:b6:05:10:38:
f5:c7:82:45:82:15:d2:86:a1:2b:01:e9:b0:71:f5:d6:ef:47:
ed:01:7c:0f:39:58:f0:0f:22:48:69:fd:29:e9:ed:2c:95:85:
45:d7:bb:97:15:f3:de:b9:de:1a:1a:b3:2f:d1:e4:60:c5:65:
7c:66:19:9b:54:cb:cb:69:07:86:55:0b:fc:e4:44:c0:0a:69:
03:ba:2c:76:0b:49:5c:38:89:12:9d:6f:02:a0:df:7f:7b:12:
65:e3:f0:c4:60:f5:0c:f5:35:6a:f5:ef:0b:78:55:f6:ad:5e:
a4:2e:ac:38:29:23:25:1c:eb:65:0b:7f:69:9f:56:db:96:66:
f6:ca:a2:a4:87:41:b3:aa:e0:ea:7a:fa:1b:bf:b3:c3:53:e4:
33:ed:d1:f5:1b:41:f2:c9:9e:83:f8:04:3e:e6:6e:c4:05:a3:
18:05:93:66:f7:42:2d:2f:0c:c7:b6:64:e8:e3:9c:1f:6c:0f:
ba:15:0a:ce:c1:a1:1d:84:b0:7d:0e:ee:eb:8d:78:0d:97:6c:
92:57:bc:e7:96:9d:c2:54:8a:d9:b3:d0:8d:78:94:11:8b:19:
22:a8:76:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:36:26 2026 by rpki-client