This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/cfefb2e0-07ae-3fe0-96eb-1c46ef1b7e9a.roa
File: cfefb2e0-07ae-3fe0-96eb-1c46ef1b7e9a.roa (raw, json)
Hash identifier: 7p7/nJscKFuSALoUQSQZfMZT7xPX5zVAjc/eGkn3e2o=
Subject key identifier: B6:74:E0:35:F4:34:25:04:C5:A2:D2:04:D0:73:07:37:4F:5A:25:48
Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial: 010D0C9F4328584C3AE63752880A9E2F5C5E1780
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/cfefb2e0-07ae-3fe0-96eb-1c46ef1b7e9a.roa
Signing time: Thu 18 Dec 2025 17:35:23 +0000
ROA not before: Thu 18 Dec 2025 17:35:23 +0000
ROA not after: Wed 18 Mar 2026 16:35:23 +0000
asID: 16740
IP address blocks: 167.254.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:3a:e6:37:52:88:0a:9e:2f:5c:5e:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Validity
Not Before: Dec 18 17:35:23 2025 GMT
Not After : Mar 18 16:35:23 2026 GMT
Subject: CN=3dbbce9d-e503-4046-a78a-1ca6ec3285d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:9e:8d:f4:e9:e9:25:eb:e8:ed:14:cd:d0:
e9:20:36:7e:fb:0b:b8:ff:47:56:3f:de:81:c0:31:
2f:05:4d:43:b4:f4:22:2c:99:dd:50:a3:4b:cc:ef:
c9:d5:e5:0b:9d:13:3d:54:f1:44:66:2a:b3:7e:65:
d1:47:9a:0d:96:cf:54:e4:97:43:3d:8d:e2:f2:4b:
ad:eb:bd:6f:ac:ec:25:ce:57:1d:e0:cd:5e:76:2e:
a5:7a:1a:6b:ca:eb:bd:30:e6:d3:6d:39:9c:a6:f8:
af:9b:4a:e0:7b:a1:7e:14:fc:43:f5:17:0b:f3:5a:
02:98:1a:38:01:1e:21:a9:d6:26:a5:f9:00:83:db:
74:b6:8d:d0:e2:df:4f:18:54:67:6b:54:6e:ad:00:
27:4e:ab:f5:23:e7:aa:4b:8f:7f:6f:0b:a7:87:9b:
5d:59:7c:ae:47:3e:07:a1:67:0d:0b:f2:cf:1e:79:
81:e1:3a:01:47:10:fb:34:c4:92:e3:8a:d4:fa:38:
66:52:c7:89:d3:42:13:5e:89:4f:f5:0b:f8:7c:63:
c4:db:20:d4:83:c2:c5:88:e6:0e:12:90:b2:7e:55:
b1:7d:d0:d1:8a:36:56:41:10:81:50:b1:92:dd:90:
8f:f6:18:3e:ea:3f:3c:2a:2e:19:59:af:d7:ba:83:
a6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:74:E0:35:F4:34:25:04:C5:A2:D2:04:D0:73:07:37:4F:5A:25:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/cfefb2e0-07ae-3fe0-96eb-1c46ef1b7e9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
X509v3 Authority Key Identifier:
keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
sbgp-ipAddrBlock: critical
IPv4:
167.254.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:b7:1f:f6:89:f2:1b:4d:0d:fd:ce:ae:39:ed:c2:a6:47:75:
90:9e:a4:80:77:b2:9e:70:84:62:86:9d:1d:90:bd:d1:fb:f8:
1d:18:11:b3:0e:b1:2d:1d:e8:8c:94:92:25:50:85:0a:df:3d:
a2:52:9e:cf:ed:89:f4:8a:fc:07:b5:3c:e2:2f:c8:c5:59:32:
22:e2:a4:db:f5:a8:0f:dc:18:05:32:66:c2:10:3a:33:c3:a6:
41:d5:8d:1d:0a:7a:09:71:77:15:63:d6:2a:ae:53:d2:80:a0:
d9:da:a2:a2:ac:6c:db:d5:c3:bd:fb:34:42:05:1f:ea:cb:b3:
ae:4a:43:2d:ac:2f:2c:e5:5c:88:34:03:f1:50:3a:e8:61:b1:
2f:f7:d5:3c:01:59:37:bd:39:83:55:23:33:0c:98:94:10:4b:
36:ba:89:c9:79:7d:3b:4a:ca:f1:14:a8:c6:79:f5:a8:e2:80:
84:b8:a9:f9:a4:38:5a:87:1a:88:33:f0:c8:9b:69:bc:df:b9:
48:a4:5f:71:8d:fe:86:71:85:37:61:d9:8b:85:4a:78:be:54:
9d:9e:d9:b6:b6:bf:77:b6:07:9e:f2:be:9e:98:83:e5:2d:d8:
1d:8d:80:d2:d5:f8:7d:1e:3e:5c:84:ab:6b:84:e9:4e:ea:67:
0d:7b:d7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 01:43:30 2025 by rpki-client