This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4ff1b49e-042b-3cda-b7cb-47de3fe69efd.roa
File: 4ff1b49e-042b-3cda-b7cb-47de3fe69efd.roa (raw, json)
Hash identifier: WxVZc6E674lCXVuyEU2J0QzErBVE+f0JZFlRxg1PQak=
Subject key identifier: 9B:39:B0:87:9E:DD:31:F8:E0:B3:4D:5A:90:51:F8:58:5A:DC:88:DC
Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial: 010D0C9F4328584C49233C8CE29FE6CC05CBE280
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4ff1b49e-042b-3cda-b7cb-47de3fe69efd.roa
Signing time: Tue 23 Dec 2025 19:59:39 +0000
ROA not before: Tue 23 Dec 2025 19:59:39 +0000
ROA not after: Mon 23 Mar 2026 18:59:39 +0000
asID: 16740
IP address blocks: 74.188.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:49:23:3c:8c:e2:9f:e6:cc:05:cb:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Validity
Not Before: Dec 23 19:59:39 2025 GMT
Not After : Mar 23 18:59:39 2026 GMT
Subject: CN=b640eaba-3362-4225-ad5a-181bb0ac7004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1c:cd:89:a0:f5:22:44:51:c0:bc:c0:66:95:
9e:64:5a:c7:ee:b0:6d:3b:dd:20:1d:28:f5:15:53:
0d:da:cf:7c:34:e7:fd:71:f8:d7:d1:a8:f9:6e:f4:
c8:37:8a:69:35:14:1e:8a:84:c7:65:1e:71:ec:52:
9b:1e:f3:2d:d0:7e:3f:65:5a:05:5a:b9:37:18:e9:
24:1e:ce:ca:e8:ed:54:1e:79:df:14:7b:85:7e:22:
ac:50:5d:96:5e:be:30:d7:79:6b:d2:b7:c3:00:62:
1a:dd:69:e2:03:32:93:9f:2c:72:2c:24:14:b6:20:
b8:cf:9f:8e:be:e0:c7:b2:b0:0f:6d:dd:25:73:7f:
51:7c:b2:ba:86:2b:0c:0e:8a:a2:7c:d9:9a:c6:a7:
4c:eb:21:ed:7e:d2:02:51:f5:18:eb:f7:91:d1:65:
ae:ee:f4:fe:bd:bb:28:a4:c8:15:46:42:87:aa:3b:
10:8a:0e:2f:cf:1f:20:f5:90:44:da:1c:b2:79:58:
8b:8a:ea:63:b4:30:02:cd:49:a7:c0:84:43:11:83:
52:44:ae:99:45:92:99:32:76:a0:73:d8:81:69:45:
46:d7:11:7e:cb:f4:74:27:e2:ee:9d:c0:a3:2c:b5:
16:4d:28:31:33:42:f4:e5:9b:b9:51:70:54:c7:30:
09:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:39:B0:87:9E:DD:31:F8:E0:B3:4D:5A:90:51:F8:58:5A:DC:88:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4ff1b49e-042b-3cda-b7cb-47de3fe69efd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
X509v3 Authority Key Identifier:
keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
sbgp-ipAddrBlock: critical
IPv4:
74.188.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:38:91:9f:ce:c8:25:54:78:f9:ee:c5:4a:94:1b:4e:9b:78:
2f:4b:31:05:e3:35:44:ba:67:b9:1c:4a:df:b6:57:ae:cb:b0:
e6:d9:86:c3:b4:5b:3c:ef:fe:a2:b9:b4:ab:2f:e7:d4:0b:1e:
ab:7f:b1:0e:c9:14:4e:16:79:53:f9:48:9b:3b:e3:e4:1b:a4:
c4:36:f2:c7:9c:73:ef:c7:dd:5f:06:26:fe:95:9c:d0:ff:84:
59:56:c1:c0:40:0e:ca:5c:06:52:7f:f0:8d:3b:46:12:41:5c:
1e:1b:5f:e8:d8:ce:c0:ef:94:9a:ff:d9:45:46:b7:2d:10:3a:
9f:5c:74:37:58:e3:5b:de:90:59:e1:d5:28:4c:76:83:e3:0e:
2e:0b:85:f4:47:f7:5d:db:a1:0d:51:bf:eb:08:c9:d7:3d:51:
1f:38:e4:29:b8:a6:9f:4a:79:cd:1b:62:f1:d8:7a:d4:43:6e:
b8:5c:2a:98:43:76:d4:63:d5:0d:a4:12:33:41:f1:f4:61:f3:
e3:36:ff:19:1d:00:dd:21:b8:4d:91:15:10:73:23:c9:8d:03:
aa:21:5a:3c:c6:05:f7:4d:e2:c2:27:95:21:56:eb:85:ec:ee:
f0:77:da:9a:04:24:78:23:53:de:16:d4:dc:7f:1f:7c:d0:52:
a3:dd:c0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 14:07:02 2026 by rpki-client