This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/470521cd-f789-3745-afc4-d1d3cc6e3d1d.roa
File: 470521cd-f789-3745-afc4-d1d3cc6e3d1d.roa (raw, json)
Hash identifier: zQB1qxUxWAJlh6PYCsCUNU0b8ckKD52ptVmJ9wVCHVE=
Subject key identifier: 6B:A6:66:1D:96:57:74:64:40:27:A8:73:AE:7C:2D:22:0A:75:E7:F1
Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial: 010D0C9F4328584C4B3BCF57E430B0826B15AE80
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/470521cd-f789-3745-afc4-d1d3cc6e3d1d.roa
Signing time: Wed 24 Dec 2025 14:00:40 +0000
ROA not before: Wed 24 Dec 2025 14:00:40 +0000
ROA not after: Tue 24 Mar 2026 13:00:40 +0000
asID: 30037
IP address blocks: 204.194.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4b:3b:cf:57:e4:30:b0:82:6b:15:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Validity
Not Before: Dec 24 14:00:40 2025 GMT
Not After : Mar 24 13:00:40 2026 GMT
Subject: CN=b8fb7ec1-c5cb-4832-a931-38fe0be23bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:18:22:8b:86:d9:e6:f1:ab:e4:db:5a:44:
31:18:ac:64:41:9c:5d:cd:6f:8b:b4:19:6b:81:cc:
dc:32:92:e1:e4:ef:07:22:93:41:5a:ff:97:08:03:
9b:3d:98:40:56:34:92:05:d4:bf:3c:df:ef:e5:e4:
ea:c6:ee:76:a9:53:43:e3:b9:b2:71:4d:fd:d7:e0:
55:ce:a2:21:65:d1:e9:c0:29:6a:45:03:ac:98:00:
8c:35:b0:e0:e3:52:22:b6:4a:05:87:1f:88:f0:4c:
4a:19:b5:d3:e0:95:8e:05:16:87:82:ac:d0:c8:3e:
4e:db:e2:bc:0f:c4:a6:2b:cd:b1:cd:da:b9:79:05:
0a:9a:67:c2:d8:79:4a:e5:6c:6b:62:a8:7a:c0:cd:
68:3d:bb:9c:28:6a:44:79:d2:73:83:40:f9:5b:a3:
f6:dc:8a:82:c9:fd:8d:cd:e7:8a:bf:ad:57:56:e4:
74:86:97:de:b7:a9:64:5a:28:5f:27:6a:d1:94:de:
6a:f7:52:9d:79:05:c1:14:17:70:1b:8b:e6:ee:67:
8f:4d:76:f9:cd:96:df:c8:b0:c9:34:0a:79:9e:8e:
0f:09:18:10:18:be:27:dd:c1:44:08:98:fd:3b:23:
54:b1:3b:03:d1:63:ed:62:d4:88:47:eb:f2:c6:c9:
d4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A6:66:1D:96:57:74:64:40:27:A8:73:AE:7C:2D:22:0A:75:E7:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/470521cd-f789-3745-afc4-d1d3cc6e3d1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
X509v3 Authority Key Identifier:
keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
sbgp-ipAddrBlock: critical
IPv4:
204.194.122.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:3e:8b:e1:1d:c0:82:17:75:7c:10:61:fe:31:23:04:24:2a:
34:13:e7:47:f3:d1:4f:53:3b:ae:38:10:d3:b4:fb:61:7a:0f:
47:d3:06:e0:b3:e3:86:41:e8:17:2a:6f:e9:48:0a:c2:df:5b:
00:12:8a:e3:2e:4a:b6:70:85:3e:f2:df:35:d2:fb:84:4e:d6:
63:c8:30:e2:3d:83:78:91:f1:22:52:96:53:30:15:5c:33:ce:
c4:3d:c3:c1:f2:6e:f9:6b:05:46:6c:8d:28:57:85:0d:18:58:
86:2e:97:4b:40:b9:bc:bb:c5:0b:ab:3c:b1:26:64:f2:aa:48:
93:c2:01:ad:8d:1e:c1:0b:eb:20:33:e7:f0:9e:78:3c:bf:4f:
f1:aa:20:e8:0b:a6:49:a1:92:bb:08:31:39:45:58:f9:e4:2d:
9a:30:a5:a5:c6:cd:3b:9c:08:77:b3:96:8d:ac:46:5e:ba:b3:
02:07:a2:3c:75:b6:4c:01:e3:c4:33:28:96:b1:bf:02:99:c9:
b3:aa:d0:42:70:ff:fe:db:70:6c:3a:bc:84:9c:3e:0a:7c:ac:
ad:cc:7f:30:c4:f7:d5:3d:bc:9c:41:03:3e:bf:16:47:f8:7a:
74:e0:41:b7:fd:1d:1d:f3:83:02:1a:0c:aa:69:82:4b:4c:2a:
a4:ed:78:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:44:44 2026 by rpki-client