This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2afa0af0-d84f-3662-9436-b75c9503253d.roa
File: 2afa0af0-d84f-3662-9436-b75c9503253d.roa (raw, json)
Hash identifier: icZ4/vcFGHoHWMAvBO7hu/gkwmNirGzeGyX1kM+DtXM=
Subject key identifier: 82:0B:9A:C9:E1:31:EA:93:58:EC:1B:A4:9C:B2:63:49:B1:2D:4D:3B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584C751C32EFA0933583581F3920
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2afa0af0-d84f-3662-9436-b75c9503253d.roa
Signing time: Thu 08 Jan 2026 14:00:39 +0000
ROA not before: Thu 08 Jan 2026 14:00:39 +0000
ROA not after: Wed 08 Apr 2026 13:00:39 +0000
asID: 36183
IP address blocks: 172.224.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:75:1c:32:ef:a0:93:35:83:58:1f:39:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:39 2026 GMT
Not After : Apr 8 13:00:39 2026 GMT
Subject: CN=3f9c374d-bb74-478c-a381-114d36ed367e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5b:35:20:2e:e9:6a:1e:a5:7e:d6:a1:8a:21:
db:b5:4f:ec:8f:7d:e4:8d:d5:cf:33:4a:8a:ff:d9:
58:67:31:5a:57:b3:55:b7:fc:72:db:20:45:d4:d6:
7a:cf:c0:91:d2:48:45:fa:74:d6:36:b2:81:99:8b:
1e:83:50:e7:b5:9e:b4:83:30:5e:8b:05:6f:14:28:
f9:8d:e0:42:4a:ed:d2:a3:7d:d9:3b:77:35:8c:a9:
f1:86:61:b7:03:90:e7:ba:97:f5:ca:eb:e9:72:aa:
cc:12:0f:d0:c4:bf:87:80:e6:ea:73:9e:b5:53:b2:
0a:2d:19:1b:54:b3:02:f1:cf:f8:7a:c1:bf:0a:ec:
ca:40:52:13:fd:fa:8d:a0:17:4d:33:cd:eb:df:54:
8c:dd:09:57:99:3d:cd:9f:75:16:7b:3b:8a:b8:d2:
23:fb:eb:b6:ec:ae:50:ee:20:d1:cd:b6:5f:57:21:
b5:1a:47:1a:76:e4:cf:fe:7b:09:8c:ed:5e:72:4d:
7a:e5:29:b8:bc:14:37:c6:5f:8e:76:6f:b3:f8:7a:
2e:73:42:47:93:6b:ec:fc:1c:d4:a1:0a:d0:e3:cc:
91:1c:72:f0:50:04:fa:87:62:a7:9b:bb:82:af:d7:
7c:f4:13:c0:34:ee:d1:36:78:04:54:eb:d8:bb:8b:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0B:9A:C9:E1:31:EA:93:58:EC:1B:A4:9C:B2:63:49:B1:2D:4D:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2afa0af0-d84f-3662-9436-b75c9503253d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:a8:5f:c9:ff:b2:62:fb:e9:4c:0b:a0:07:d2:c6:e0:26:58:
97:d9:46:10:38:e7:63:4c:87:b1:59:f1:c1:83:1e:34:5b:ad:
55:5c:39:7f:1f:ea:77:85:05:e8:90:28:54:5b:38:23:9a:5b:
d8:39:ca:bc:86:be:dd:1f:94:b6:ee:33:e3:5d:f2:97:19:05:
68:d3:40:25:bd:23:ad:b4:c3:71:ae:7d:4a:48:bb:d3:3e:26:
72:81:b5:bb:89:23:37:c4:de:55:ab:64:c7:92:e1:b4:a0:12:
86:f3:c6:46:47:b7:b8:7c:9a:4c:87:3e:c7:d0:b9:c4:6e:57:
49:f0:47:10:27:88:a7:6d:3a:89:64:d1:3a:e7:69:74:9e:dd:
15:7b:01:49:fe:f0:fe:13:28:14:6b:0f:85:e4:65:60:74:06:
28:62:28:27:bc:8f:ec:d8:23:07:e1:17:69:57:5f:8f:38:fb:
2d:e9:57:ef:e6:03:e5:57:e5:d1:79:a6:ba:66:79:b1:8b:8d:
a4:cb:7f:53:c7:7c:ab:9c:09:32:a3:2d:38:58:d3:ea:d0:69:
64:d0:68:7c:6d:37:92:23:d3:1a:a3:a7:ed:39:bf:22:75:a6:
b8:6a:ed:de:41:dd:25:16:02:77:dc:ae:cc:d3:4b:b7:95:3f:
6f:7f:90:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:07:09 2026 by rpki-client