This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3d8d8cb8-6dc9-3be4-9a54-a5ba85a4cf87.roa
File: 3d8d8cb8-6dc9-3be4-9a54-a5ba85a4cf87.roa (raw, json)
Hash identifier: 1F5xNJYJRHPrEriDmBJjYmUrKLsomYzHkSzSGLkIaUc=
Subject key identifier: 23:18:21:F6:5F:9D:76:EB:35:8C:EA:D5:BC:C7:27:12:CD:AF:A4:08
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584C40114F45C3EBBCF8E63EDA00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3d8d8cb8-6dc9-3be4-9a54-a5ba85a4cf87.roa
Signing time: Sat 20 Dec 2025 14:00:38 +0000
ROA not before: Sat 20 Dec 2025 14:00:38 +0000
ROA not after: Fri 20 Mar 2026 13:00:38 +0000
asID: 15169
IP address blocks: 104.134.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 26 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:40:11:4f:45:c3:eb:bc:f8:e6:3e:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Dec 20 14:00:38 2025 GMT
Not After : Mar 20 13:00:38 2026 GMT
Subject: CN=f29b659e-39fc-4ee0-af44-2609ab0d9902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:1a:8b:78:8b:d9:14:99:e2:2c:00:32:98:
ed:9d:bc:33:a6:b4:ce:ee:20:02:78:5b:f9:97:4c:
db:eb:69:a7:b2:53:f8:77:2d:b7:ac:c8:a3:54:a6:
2f:84:f7:91:8b:6a:36:c9:52:0e:ac:c8:fb:89:f1:
27:5e:72:69:ad:c5:60:ce:40:7a:4d:a2:e6:de:a5:
91:33:3e:91:72:80:cb:0e:01:70:7e:1a:d6:b3:e7:
ed:cc:66:29:cb:a2:9f:6b:c0:01:0e:00:a9:89:b5:
85:be:ae:2b:a5:7e:2d:77:da:d0:56:87:b6:6c:fe:
b3:4d:72:ce:36:c5:92:a3:b7:60:9d:a9:d2:21:f6:
15:d7:2f:51:e6:a9:73:ce:78:aa:42:fe:66:88:6b:
07:69:c7:68:c9:3a:10:9d:cd:03:14:6b:25:75:c1:
69:8f:de:8b:ac:bf:b7:97:81:fa:33:a2:99:11:fa:
06:fc:00:d1:fb:36:6f:f8:5a:23:43:67:27:77:6c:
4c:32:6f:85:45:d2:1f:b0:09:8b:b8:36:f3:2c:dc:
d6:b5:3b:a2:9a:ce:54:62:3a:f2:a7:ef:66:fa:ef:
83:24:c8:58:64:da:19:3b:3e:da:d7:15:d7:7e:f4:
c0:18:82:f9:71:de:db:2b:22:1e:f6:9e:ce:0b:6b:
d8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:18:21:F6:5F:9D:76:EB:35:8C:EA:D5:BC:C7:27:12:CD:AF:A4:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3d8d8cb8-6dc9-3be4-9a54-a5ba85a4cf87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:8e:97:12:93:31:66:bf:68:5e:b7:c9:9e:9e:53:06:0d:a8:
c2:ec:7b:24:c2:03:cb:3b:c6:9c:a9:6c:6d:f9:f5:b4:99:56:
ad:eb:20:0d:dc:88:ac:46:4c:e3:07:d1:43:7b:2e:36:9d:6d:
e9:86:82:bb:8a:9a:ea:b7:81:1c:7a:52:df:48:fa:53:fb:f9:
16:bb:7e:53:5b:1d:1a:60:f2:e5:62:9d:a2:e3:4d:b5:ad:81:
1d:a8:16:08:53:99:5d:1c:8c:55:b3:12:88:cc:ff:25:b8:ee:
11:84:09:96:17:30:c0:96:39:df:8c:d5:ce:3d:a4:e9:9b:1f:
19:de:92:43:1b:33:8c:19:d9:cb:39:15:7c:50:f5:0c:4d:a1:
a5:c0:17:67:43:4d:c8:cf:72:9e:5c:7e:63:f6:87:4b:23:2d:
79:ff:be:2b:f0:14:b7:a7:de:df:1c:01:02:d4:8b:7f:34:1d:
a5:26:16:60:08:77:b5:54:a2:ec:5f:dd:ef:ea:f7:43:aa:31:
2f:da:57:08:7d:06:ba:b2:f6:bf:29:e9:0e:c9:cc:6b:c8:28:
12:d2:43:8d:cc:d1:01:c9:af:ae:26:24:c6:32:f5:68:5d:9d:
04:40:7e:33:37:a9:8b:ca:e3:03:cf:51:22:47:05:da:60:60:
51:54:03:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 15:19:22 2025 by rpki-client