This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f9ad2a5-8547-3650-a790-25df90ed3852.roa
File: 3f9ad2a5-8547-3650-a790-25df90ed3852.roa (raw, json)
Hash identifier: sZwQW1K4dN8uIIF1+3edhBR3GH6w3Hz+8qeC2ZWOcWI=
Subject key identifier: 33:91:B1:DF:5A:8A:B8:ED:AE:E1:22:B5:5F:C2:92:F5:FA:1E:AE:D1
Certificate issuer: /CN=8d34ec60-03b0-4663-8748-fab291e36393
Certificate serial: 010D0C9F4328584C5BFBE26BF537399FE01992E0
Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f9ad2a5-8547-3650-a790-25df90ed3852.roa
Signing time: Tue 30 Dec 2025 14:00:38 +0000
ROA not before: Tue 30 Dec 2025 14:00:38 +0000
ROA not after: Mon 30 Mar 2026 13:00:38 +0000
asID: 395807
IP address blocks: 199.60.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Jan 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:5b:fb:e2:6b:f5:37:39:9f:e0:19:92:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393
Validity
Not Before: Dec 30 14:00:38 2025 GMT
Not After : Mar 30 13:00:38 2026 GMT
Subject: CN=cd028cd8-39ce-4605-901e-5a1cad54dbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b4:79:4b:5a:cb:74:a8:44:3d:85:e7:66:ea:
36:ea:04:f6:f8:25:b3:5d:ba:d0:94:5d:19:a4:5a:
2f:bd:87:33:51:ea:38:87:76:60:9f:05:77:ec:79:
79:dd:4e:15:9c:e4:15:0d:67:f3:6c:c5:f6:72:ff:
0a:3e:a9:27:33:b3:0a:36:c5:2a:90:05:64:f9:fb:
7e:6e:3f:8d:ba:87:91:65:c7:7f:58:1a:3c:ce:1d:
4c:31:5c:77:f0:f4:8e:6a:c3:4d:5a:a3:10:ac:a2:
d3:43:c9:4c:7a:22:4a:01:a4:c6:61:fc:66:28:65:
7a:6a:2c:2a:8c:1a:41:ae:53:82:ee:d1:aa:1c:8e:
e9:31:78:10:b7:6f:81:23:82:e9:6f:4f:a8:21:d3:
c4:c7:c5:5e:6c:c6:e9:cf:b7:6a:f4:11:f2:f7:86:
b7:56:0d:42:3c:12:a9:22:cc:ad:af:1a:29:37:3a:
a6:85:7d:66:c1:e3:e4:4c:f1:52:c1:8a:c7:b5:7c:
5d:28:64:46:50:ff:81:e9:58:79:e6:92:81:89:b0:
9e:00:32:43:b7:2a:b5:6c:87:0e:57:a6:6b:df:b9:
f4:e1:98:44:91:0f:3e:82:8e:09:83:81:1f:1b:fd:
52:ca:6b:75:d4:af:96:4a:b7:c9:98:ae:7b:ab:5b:
4c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:91:B1:DF:5A:8A:B8:ED:AE:E1:22:B5:5F:C2:92:F5:FA:1E:AE:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f9ad2a5-8547-3650-a790-25df90ed3852.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl
X509v3 Authority Key Identifier:
keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
sbgp-ipAddrBlock: critical
IPv4:
199.60.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:a4:66:ae:bd:72:4f:08:64:a5:d9:bb:da:07:a2:f1:2b:a0:
43:a0:70:a3:51:63:96:6e:b5:e8:a1:35:93:5d:fe:dd:3f:cc:
70:d4:10:99:78:c0:bc:a7:ae:00:8f:a6:8d:35:0c:98:52:c4:
5d:ad:c1:4c:73:35:3e:f8:46:58:cc:b5:a5:31:f3:19:07:35:
38:9e:dd:af:48:a1:13:25:76:1c:2b:4a:7f:3e:bb:97:a1:f9:
4d:e9:c2:fc:6d:45:d2:6b:e5:5c:be:97:ff:5c:59:94:89:06:
2b:43:58:84:54:12:eb:6e:0b:e5:ab:4c:99:4f:b5:97:97:25:
80:cb:4a:b0:52:07:51:e1:a2:cb:13:8b:3d:a5:15:91:42:cc:
c9:05:d7:ba:85:62:b9:03:0a:a9:a0:c7:02:05:ec:34:70:15:
e6:35:53:52:4d:77:06:d9:57:be:35:cb:3d:90:bf:2b:14:ee:
7a:30:e5:87:27:23:cc:cc:ff:8d:d1:ac:bc:5e:fc:bb:8b:7d:
ae:52:c2:61:a8:90:ab:c1:5a:b6:3d:23:4a:95:96:e6:05:f7:
df:bd:46:e8:26:62:09:c1:0a:50:9c:45:88:46:1e:3d:20:3e:
75:89:03:ec:f2:d4:31:3f:38:c5:32:35:8c:92:6c:f5:58:21:
6c:f6:b9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 04:58:09 2026 by rpki-client