This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddff14cf-541a-3e8a-a9fe-11e036c29959.roa
File: ddff14cf-541a-3e8a-a9fe-11e036c29959.roa (raw, json)
Hash identifier: DhqczamI//aC1OZoOpPfS14z8x5wJqHByZL4Cc+ugnc=
Subject key identifier: F1:59:11:65:34:8B:B1:41:4C:F7:ED:82:38:C8:10:7B:A2:1E:44:3B
Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial: 010D0C9F4328584C42DBD764420AC9789B7146C0
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddff14cf-541a-3e8a-a9fe-11e036c29959.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 400304
IP address blocks: 45.59.116.0/24 maxlen: 24
66.23.193.0/24 maxlen: 24
104.36.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:db:d7:64:42:0a:c9:78:9b:71:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=71d18b49-88fe-47c7-9ef9-f458b31e9310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b6:66:62:77:85:a5:22:fb:28:1a:b3:af:eb:
fb:78:17:6b:85:87:cb:41:c0:03:2c:d5:ef:08:ce:
0d:63:15:58:b9:c8:f3:0e:33:a9:7a:03:b5:4c:6e:
4d:0b:cb:69:47:3f:54:cf:1e:eb:9e:93:44:5b:9a:
c4:74:c4:5b:d2:52:9e:68:af:8f:32:27:4a:a5:6f:
dc:75:a3:cb:d9:bd:ce:3d:22:c7:93:1c:0f:3a:b8:
16:26:c7:a0:c6:db:48:de:09:10:ee:4c:54:c3:b3:
18:d5:d1:70:f8:b5:02:c0:af:69:bf:ad:db:01:42:
de:8f:33:8a:fd:67:81:be:7a:2e:aa:c5:c3:35:55:
41:c9:e9:3e:65:05:2d:0b:77:68:82:1f:10:e1:2a:
0a:72:8c:20:18:f2:0b:b3:89:16:98:8f:2e:11:91:
dd:8e:7c:90:20:c3:d1:0e:7e:a3:2e:65:d5:22:d4:
13:e8:8f:71:83:5e:e6:1f:99:74:7d:a3:0a:c1:05:
ec:40:ef:18:56:15:02:04:52:53:00:0c:e8:73:40:
76:9a:60:8c:e2:8f:82:32:a3:bf:e1:dc:a9:4d:ce:
24:15:7a:e9:f1:0b:d2:f4:5b:2c:24:ed:91:6d:c0:
a3:5a:57:cb:ce:f6:bf:79:c1:aa:ec:a9:51:e3:f3:
cd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:59:11:65:34:8B:B1:41:4C:F7:ED:82:38:C8:10:7B:A2:1E:44:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddff14cf-541a-3e8a-a9fe-11e036c29959.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
X509v3 Authority Key Identifier:
keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.116.0/24
66.23.193.0/24
104.36.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d0:85:be:7f:89:47:9a:c6:1f:bf:6b:7b:af:28:fc:30:a9:f7:
a5:52:bc:1e:aa:5b:7e:41:b3:99:00:56:2f:07:9e:ca:78:a0:
3c:83:a2:91:a9:d6:43:35:e0:f5:82:84:fb:c3:b2:88:eb:f6:
db:c7:44:b0:5f:76:bb:d6:2e:9c:5e:c1:72:99:9a:af:49:23:
c3:b0:c8:0c:6f:bc:9c:5f:27:79:70:d9:94:75:b3:72:fc:45:
76:3d:48:c7:7c:e6:7d:d1:66:b9:c7:13:bc:6c:be:63:2a:bc:
7e:4a:61:3a:66:34:c9:b8:18:82:ca:e9:55:96:7f:1a:41:de:
3f:bf:27:92:e3:7a:c9:eb:74:00:ab:eb:65:5f:61:45:5b:08:
04:07:66:04:bc:90:e5:8a:6e:a8:72:40:30:dc:1c:09:f8:f6:
84:f7:1f:a9:d6:cf:e7:5c:6a:b5:0f:5d:21:6f:3b:13:12:04:
6f:57:92:51:54:91:c7:03:0e:8e:88:bb:21:ae:80:ff:59:6e:
b0:0b:cf:96:2e:69:b1:e7:bd:2d:47:3d:e8:cc:96:fe:b6:fd:
7f:01:20:34:34:8b:3e:5b:ff:e8:1b:10:ed:ba:b1:8d:c6:8b:
59:1a:ad:4b:25:a3:e3:e3:62:01:32:07:ef:dd:ae:35:12:e6:
2f:f9:17:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:02:46 2026 by rpki-client