This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ff94693-17ca-35bc-a3a7-7407daedb027.roa
File: 9ff94693-17ca-35bc-a3a7-7407daedb027.roa (raw, json)
Hash identifier: XzJ48KrdgSjvqP0D+HkkEnFuzMAI4k8xSPsgPid8ppg=
Subject key identifier: C2:52:99:3D:E1:DB:DD:07:38:EA:9E:66:4C:4E:87:19:D7:EC:7B:1E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584C40112DCA924692E9F5E9AFC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ff94693-17ca-35bc-a3a7-7407daedb027.roa
Signing time: Sat 20 Dec 2025 14:00:38 +0000
ROA not before: Sat 20 Dec 2025 14:00:38 +0000
ROA not after: Fri 20 Mar 2026 13:00:38 +0000
asID: 396982
IP address blocks: 107.167.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 24 Dec 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:40:11:2d:ca:92:46:92:e9:f5:e9:af:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Dec 20 14:00:38 2025 GMT
Not After : Mar 20 13:00:38 2026 GMT
Subject: CN=1ef821b1-df5a-4eb4-a631-10d6e784f814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3f:a5:e2:a3:db:71:79:c0:d4:10:dc:ed:b2:
15:f6:00:85:bd:da:9b:c5:d5:c8:22:db:2c:7c:2f:
03:b8:f4:26:2e:b5:29:d4:86:7d:56:05:3d:cb:fc:
1c:a5:7e:fa:83:02:ac:d6:9e:cb:00:1a:73:8c:fc:
5c:b5:26:04:82:f5:b5:72:de:48:f4:4a:ba:9c:23:
2a:00:43:4a:e5:dc:30:2a:bd:ab:dc:3d:f8:55:68:
d8:4e:4a:9b:a2:cb:95:60:53:23:03:37:b4:fb:50:
c7:d9:4f:4d:10:60:93:50:17:18:29:b5:c9:fd:c5:
00:97:1d:75:79:49:33:52:0b:9c:7f:24:e1:df:07:
f1:ec:66:7b:fe:0e:ca:0a:1b:78:ec:90:6f:69:2b:
9e:f6:0f:54:75:d5:78:6e:9d:90:0a:d9:e7:44:d1:
24:43:a3:f4:e3:b2:e5:98:6d:ea:fb:53:c1:57:e7:
e0:65:58:e1:e8:9d:2f:10:d9:c7:f7:80:fa:c6:36:
d1:4e:49:a2:df:ce:fa:d0:ee:d4:60:f2:d1:0a:4c:
14:3f:57:a7:2c:49:be:d1:e6:a3:fb:5d:70:0e:2f:
9e:a3:48:be:93:6a:32:0b:bf:c9:41:74:df:f6:15:
63:32:a4:19:6f:b8:28:25:81:8b:2b:94:5d:20:5c:
80:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:52:99:3D:E1:DB:DD:07:38:EA:9E:66:4C:4E:87:19:D7:EC:7B:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ff94693-17ca-35bc-a3a7-7407daedb027.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
107.167.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:e9:3e:9c:0a:08:53:00:99:07:70:3d:74:d9:76:11:f6:c5:
59:ce:51:15:5f:77:05:bd:fa:bc:72:7e:b1:c4:64:eb:af:7b:
bc:9d:57:4f:1c:00:c1:b3:1f:32:11:00:ad:27:41:ac:09:fe:
0e:65:78:b7:76:da:fe:52:f8:5e:35:d8:88:0c:cf:9b:23:e1:
79:fa:09:23:34:30:f5:0a:00:20:cc:a3:87:2f:f3:eb:d3:0c:
e2:48:d0:da:ff:30:29:15:84:de:c0:0a:1a:61:22:be:a9:99:
e9:7a:1a:88:b7:2c:cd:c2:43:8a:1b:fe:45:ad:1e:b8:66:57:
45:99:4f:f2:5b:27:d4:28:a7:b9:1e:29:76:7d:85:6f:6f:48:
4a:7b:ac:50:4e:02:ca:22:55:d2:9d:84:b9:5e:0b:7a:13:11:
d2:1f:4d:b2:2d:c4:2d:07:06:21:b7:b4:f1:ec:a5:52:13:9a:
d0:d2:70:90:7d:61:5d:a8:e2:e9:83:04:45:34:c4:65:9f:26:
cb:b7:3d:4b:8d:86:ef:64:03:ca:75:b0:33:c4:43:9b:4e:2a:
47:2c:15:6b:30:b4:ef:46:f9:95:f4:5d:15:3f:6f:f7:84:fb:
58:c1:2a:6a:c0:b1:1a:36:95:e9:ab:61:37:8d:55:9c:d9:f4:
8e:c0:5d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 04:00:02 2025 by rpki-client