This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/3f1804e2-95de-35be-88e3-5feefeb68750.roa
File: 3f1804e2-95de-35be-88e3-5feefeb68750.roa (raw, json)
Hash identifier: WzTggu4o6BRft+cP1Tp78r9HQtjmLDfRRgAelWW9adw=
Subject key identifier: A8:F3:0A:0B:DB:4E:D2:EB:0E:13:0A:CF:95:45:99:E4:3A:83:08:05
Certificate issuer: /CN=5a154205-b480-44eb-8ce6-252aa97d28bd
Certificate serial: 010D0C9F4328584C8A0C5D7B5ADFF50CFEDDF8A0
Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/3f1804e2-95de-35be-88e3-5feefeb68750.roa
Signing time: Fri 16 Jan 2026 02:00:31 +0000
ROA not before: Fri 16 Jan 2026 02:00:31 +0000
ROA not after: Thu 16 Apr 2026 01:00:31 +0000
asID: 138195
IP address blocks: 23.235.164.0/24 maxlen: 32
23.248.246.0/24 maxlen: 32
103.199.103.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:8a:0c:5d:7b:5a:df:f5:0c:fe:dd:f8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd
Validity
Not Before: Jan 16 02:00:31 2026 GMT
Not After : Apr 16 01:00:31 2026 GMT
Subject: CN=3f9f94d8-d1be-4e8c-a95b-90b83bf582c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ea:b0:dd:f1:15:af:70:b2:c3:58:7a:fd:91:
87:45:cf:64:ca:2b:60:ad:4f:a8:ea:51:a1:37:5c:
0b:a9:d5:fe:2b:df:6b:65:c9:00:e5:d2:68:4f:44:
ef:cc:eb:5b:ce:0a:f9:e6:95:79:81:b6:7b:11:5d:
8b:be:63:79:e7:36:a9:8d:6a:80:c6:41:b7:34:18:
b3:ae:81:e5:ce:00:ab:7b:75:88:41:01:85:2f:9b:
d6:f9:1c:26:ea:a7:25:79:07:2f:e2:cf:8d:de:0c:
69:f4:02:26:8f:c2:09:a3:77:32:85:df:52:7d:4f:
8a:1e:cb:e8:51:c0:39:b1:6a:e7:f9:77:07:24:15:
75:5f:87:6e:73:f0:f5:5d:2d:8c:e6:9f:9d:04:59:
73:c6:4b:0f:ac:a6:3b:8f:11:09:6e:34:ef:96:7a:
a6:37:d4:ac:cd:5e:f5:48:df:01:5f:32:d7:17:ef:
84:36:8f:a2:be:b6:b7:9f:5e:2e:25:9c:41:ad:f6:
2d:2c:1f:11:0c:d8:ec:f2:2a:7a:c4:1d:2f:84:3a:
36:62:92:7f:e1:56:e7:97:6d:10:f4:14:3e:0a:61:
73:84:f7:68:3f:c1:8a:5e:b2:27:52:6f:3a:fc:c5:
b8:7a:8d:91:35:a8:ea:3c:66:54:c1:7f:4b:39:9e:
fb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F3:0A:0B:DB:4E:D2:EB:0E:13:0A:CF:95:45:99:E4:3A:83:08:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/3f1804e2-95de-35be-88e3-5feefeb68750.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl
X509v3 Authority Key Identifier:
keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
sbgp-ipAddrBlock: critical
IPv4:
23.235.164.0/24
23.248.246.0/24
103.199.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:09:a0:d9:2a:b9:b5:8a:e7:9c:fe:c5:83:0a:14:d5:07:b6:
65:15:a3:69:0d:f6:26:13:c8:75:22:9f:af:1d:f8:b3:ca:54:
f9:ef:9e:a1:d2:a0:a4:99:dc:c5:ab:ea:1b:a5:b0:34:d3:e0:
6c:f5:66:4d:92:14:d2:3f:cb:7c:98:8e:0e:b0:5b:80:82:ef:
a8:90:ee:ca:fa:44:3d:44:35:9e:f4:ff:73:da:bc:0b:32:46:
59:42:20:59:46:6d:5a:a3:c2:f7:46:08:4c:17:ec:00:92:83:
f8:9c:99:59:c8:f8:9f:65:b4:15:6d:9c:d4:d2:60:f2:a1:18:
91:6c:69:de:8b:0f:22:13:3f:2c:5c:b8:31:b7:7c:b0:4b:1c:
81:99:0b:92:09:67:01:55:82:4f:d8:0a:2b:81:df:5d:98:4f:
58:a8:ae:10:91:ea:5d:47:f5:89:6d:b8:b8:37:89:c2:35:d5:
ec:54:85:ca:54:09:25:a7:b2:bf:08:66:61:0c:c9:08:56:77:
93:28:16:51:6f:0d:1b:03:6e:6d:b5:4a:04:36:ed:68:1c:a0:
10:81:6f:94:b9:f9:30:cb:f9:4b:52:9c:c3:d8:76:52:b0:96:
06:62:32:c4:f7:2e:49:8c:b7:d3:29:a4:6d:c0:cb:4b:c7:1a:
58:07:5a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:22:35 2026 by rpki-client