This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa
File: cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa (raw, json)
Hash identifier: eRLGHcygOlFloO87/Jh9FqaitfKHFqrGj4cbcpp4UBw=
Subject key identifier: 07:2D:DD:D0:26:16:A9:60:B5:D3:7A:3F:B1:21:13:6B:20:54:57:8E
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584C996708914F2E6227132FCA80
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa
Signing time: Wed 21 Jan 2026 14:00:38 +0000
ROA not before: Wed 21 Jan 2026 14:00:38 +0000
ROA not after: Tue 21 Apr 2026 13:00:38 +0000
asID: 13576
IP address blocks: 209.151.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:99:67:08:91:4f:2e:62:27:13:2f:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Jan 21 14:00:38 2026 GMT
Not After : Apr 21 13:00:38 2026 GMT
Subject: CN=121a84d4-b2f5-4187-abdc-0c8abf521826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9f:b6:5e:a9:a8:be:3c:af:8c:67:34:0c:c7:
83:67:d3:47:99:9b:e2:80:79:d7:cf:d1:36:bc:6b:
b3:a9:6a:e8:fb:18:6d:c2:8d:7e:1f:c7:60:c7:9d:
0f:8f:de:6e:0f:30:b2:11:67:06:9b:a2:3d:73:16:
bf:38:80:06:0d:42:1d:90:52:bc:13:18:a3:00:8d:
66:b1:98:54:0d:20:d5:c4:ac:45:84:fe:f5:4a:cb:
9f:23:94:11:0a:bb:30:ae:3a:96:1c:37:7c:45:3a:
44:41:1d:61:58:62:27:1a:e5:46:59:b6:87:17:9d:
e2:63:f5:4a:2e:5e:db:69:35:1e:d1:af:51:2d:19:
c8:71:3d:8d:7c:e4:41:e6:d1:0a:50:ba:a2:8d:c2:
6e:bf:02:36:b7:7d:65:60:95:01:c1:cd:2a:d6:76:
c5:03:29:0c:bf:06:1b:c8:31:c4:99:99:4c:78:d5:
d6:36:f2:d3:b0:6d:ce:f4:fd:53:08:27:f3:5f:89:
27:73:b2:69:69:e6:11:25:3e:46:b2:0e:72:f5:95:
ad:0e:4d:c8:3d:95:e9:fd:36:c0:c2:08:b7:a0:56:
43:69:3e:1e:a2:c1:fb:48:71:fd:01:d2:8b:ca:44:
5d:c1:d9:1a:0c:da:43:ad:2a:65:8b:d9:07:7d:ec:
cf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2D:DD:D0:26:16:A9:60:B5:D3:7A:3F:B1:21:13:6B:20:54:57:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
209.151.181.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:e4:7c:b9:0f:f9:96:63:92:c2:fd:fb:79:5a:d2:f4:4d:ad:
7d:be:53:3f:4c:9a:14:00:23:8d:1d:f6:f4:92:79:b1:bd:d9:
d2:67:aa:32:d6:f6:31:7e:d6:80:09:46:ca:8f:a2:70:6e:32:
a1:ed:9e:d3:a4:a8:5f:1d:fe:8d:34:e6:51:76:99:c5:34:37:
55:75:be:ef:2c:1d:1b:c2:5e:20:55:9d:da:90:30:1f:fc:96:
88:6e:a5:8d:22:ff:6e:66:f9:4a:91:1a:5d:5f:3f:f8:0b:52:
8b:29:9b:bc:c1:2e:b0:95:2e:67:89:2d:ec:24:9d:de:d3:24:
0c:4a:13:ed:7d:0a:2c:38:af:2f:e8:c4:9a:06:1c:57:5b:5d:
88:a9:67:f4:85:78:fa:8a:1e:2b:e1:18:70:1c:95:bc:80:13:
4d:99:6e:ae:91:3d:ec:5b:3a:e4:5c:1a:d5:b5:90:97:e7:09:
d8:36:df:ec:06:bf:1b:7b:0b:a4:05:d8:6f:8b:9c:e1:69:49:
79:c9:c7:bf:5e:45:e0:65:98:14:38:6a:37:83:7e:15:ed:b6:
d0:b2:e7:8a:44:5b:a3:98:2e:f6:37:85:1f:7b:b8:b6:2d:b5:
e2:62:3e:f2:77:47:4c:de:32:5c:05:38:67:d2:d1:8d:bb:15:
75:47:a8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:23:47 2026 by rpki-client