This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df9b0389-0511-3f33-9eab-3d06768fd88e.roa
File: df9b0389-0511-3f33-9eab-3d06768fd88e.roa (raw, json)
Hash identifier: 0cVoneKpfv2eIIiYaPgt+F3Mp+sc6hnEGxA39y8F4Ys=
Subject key identifier: 58:33:7A:43:AA:21:9A:64:98:FB:01:00:E5:C6:82:C3:39:5D:49:A4
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584C45A7060545416C06B8308840
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df9b0389-0511-3f33-9eab-3d06768fd88e.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 7155
IP address blocks: 172.243.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Jan 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a7:06:05:45:41:6c:06:b8:30:88:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=0dd5976d-82ea-445e-8027-deb70d8178b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:05:55:9d:21:08:c6:97:6c:18:5c:53:fa:94:
4d:90:7e:83:f1:f2:6e:27:c0:2d:07:e2:4b:52:9d:
b8:e1:f5:ec:03:c4:61:a8:be:a3:da:51:58:e4:a6:
bd:cb:df:4c:e8:1e:16:29:8c:68:ad:13:f7:cd:0a:
a3:ea:a1:b2:01:64:3a:11:e5:0b:35:7f:ac:c8:f2:
32:88:3c:84:28:18:a7:07:06:89:6a:8e:35:10:31:
b2:a9:ed:84:28:cd:74:d5:e7:b7:ca:05:c7:f2:82:
9c:41:34:07:3e:60:49:8c:37:32:86:7c:a1:84:c1:
73:ae:04:5a:59:c1:e9:b6:a5:a3:1f:56:2d:a9:ee:
64:c9:10:ea:f4:a4:36:0f:cd:c7:05:90:88:e9:1f:
2c:b8:9b:90:37:96:96:04:d5:f5:2d:c0:ee:50:37:
a1:8a:0a:de:7f:fd:d1:9f:9e:63:ab:66:d1:06:b3:
eb:8e:17:b2:c9:59:3b:0a:9a:73:88:6f:39:d4:ef:
4b:90:b9:39:ac:7f:d9:10:8f:9f:7c:8c:96:17:14:
68:d7:dd:00:05:f4:28:5f:1e:3b:5e:28:a4:ae:3a:
a2:d0:2e:86:db:24:b6:a6:1e:8d:d0:26:d3:7c:31:
3f:a0:52:ff:42:23:4b:ce:66:9f:ad:06:f7:cb:25:
bb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:33:7A:43:AA:21:9A:64:98:FB:01:00:E5:C6:82:C3:39:5D:49:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df9b0389-0511-3f33-9eab-3d06768fd88e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:82:83:1d:65:5c:9d:6b:c7:10:bb:5a:e3:f7:57:29:2c:2d:
f5:b0:b5:ba:0c:05:33:39:d4:35:6d:dd:6d:77:b4:82:18:fd:
b6:59:21:95:c8:56:3c:fb:59:6e:df:42:ea:ff:f6:ae:ad:f8:
fd:a7:1c:d4:a0:7d:ae:53:54:5b:49:14:f4:2d:45:1f:0c:ee:
3c:2b:87:9f:10:93:cd:18:70:fe:a9:1a:e8:65:5d:ec:9f:dc:
b6:35:e6:c5:30:9b:af:af:da:b4:b6:11:84:b4:db:68:80:e9:
bc:50:40:9f:9b:ff:5d:eb:56:10:b6:90:ba:d3:64:8c:60:69:
ad:e6:af:20:8d:7c:7d:21:38:67:07:f6:cd:72:c1:0c:c8:23:
e5:4d:96:c3:47:24:28:42:bf:88:07:4e:08:aa:8a:10:4a:72:
79:5f:ec:ee:bc:eb:f2:6c:f4:cd:42:b1:95:29:e6:47:4e:de:
4f:43:83:b4:27:4d:dc:f5:8b:a1:11:06:81:da:17:ae:1b:c0:
96:34:45:8e:79:e2:a4:8f:e5:b6:3f:b8:77:07:dd:ce:5e:c7:
47:12:10:fe:42:70:d3:ac:04:a0:66:5c:f1:e5:f3:3e:27:ac:
a7:14:4b:8d:e7:65:9b:27:a2:76:b8:cd:e2:7e:86:41:52:95:
13:9b:eb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 02:54:07 2026 by rpki-client