This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/4b50e3cb-bf61-3242-bd51-7c419281bb0e.roa
File: 4b50e3cb-bf61-3242-bd51-7c419281bb0e.roa (raw, json)
Hash identifier: NjRFhsJgeslGgyUpRwNnoI69UvmCvOliSgRoPQzpP5s=
Subject key identifier: FA:7D:F2:0F:40:2B:10:F6:8E:46:7D:79:CB:48:4D:C0:B7:39:2C:EB
Certificate issuer: /CN=1e38a0af-c492-44f5-88b1-b4dfdb1180f2
Certificate serial: 010D0C9F4328584C602BDE9D539E27EB7AFC3E20
Authority key identifier: 65:A9:BA:30:CA:A9:4B:F4:DD:1C:34:F5:E9:D5:C8:5A:94:81:1B:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/4b50e3cb-bf61-3242-bd51-7c419281bb0e.roa
Signing time: Thu 01 Jan 2026 02:00:31 +0000
ROA not before: Thu 01 Jan 2026 02:00:31 +0000
ROA not after: Wed 01 Apr 2026 01:00:31 +0000
asID: 63440
IP address blocks: 64.16.224.0/19 maxlen: 24
192.76.120.0/24 maxlen: 24
2620:b2:c000::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:60:2b:de:9d:53:9e:27:eb:7a:fc:3e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e38a0af-c492-44f5-88b1-b4dfdb1180f2
Validity
Not Before: Jan 1 02:00:31 2026 GMT
Not After : Apr 1 01:00:31 2026 GMT
Subject: CN=d52187eb-574f-4b3c-b202-199bc590e8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:b1:87:00:86:10:24:98:bd:52:34:2b:b9:
d8:ff:cc:1f:4d:5f:ac:9a:90:88:2e:b6:c5:35:c6:
87:13:7c:9f:02:8f:af:27:e7:04:36:26:fa:d9:ee:
cb:c8:1a:eb:aa:7a:66:f4:05:da:35:fe:fa:be:39:
ce:89:d1:8f:ed:80:5a:63:aa:69:fb:7b:01:8f:15:
2f:bf:a8:1e:69:b6:3e:3e:14:cf:8a:7c:a5:a5:80:
6f:f0:eb:29:fc:15:4b:aa:c8:37:42:7c:7d:79:6e:
4c:5c:f8:b0:5f:22:c5:78:05:4e:a9:5c:24:37:5b:
f6:2b:94:6b:df:5f:5c:b9:03:f4:0e:a6:d2:8e:45:
c9:74:28:a4:a8:66:06:46:6e:61:bd:15:22:8e:62:
0c:35:96:60:fa:df:66:e6:8a:a8:2d:ef:82:66:d5:
70:6f:c0:9a:ac:a4:a8:1d:5b:80:f6:01:ac:95:a1:
50:cf:81:51:fe:48:a9:26:3e:73:22:e8:a5:8a:36:
48:a1:1b:f3:2c:93:11:00:18:dc:b3:95:3b:7e:47:
a2:0e:13:75:e9:02:57:74:fd:c0:8d:76:44:04:b5:
5e:a7:d5:15:10:94:25:88:d1:e6:44:e7:2b:cb:a9:
aa:6e:e7:4f:d5:9b:83:00:e0:9b:35:a6:46:b3:73:
73:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7D:F2:0F:40:2B:10:F6:8E:46:7D:79:CB:48:4D:C0:B7:39:2C:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/4b50e3cb-bf61-3242-bd51-7c419281bb0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.crl
X509v3 Authority Key Identifier:
keyid:65:A9:BA:30:CA:A9:4B:F4:DD:1C:34:F5:E9:D5:C8:5A:94:81:1B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.16.224.0/19
192.76.120.0/24
IPv6:
2620:b2:c000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:14:dc:51:c5:12:cd:38:91:06:ae:1a:2f:f0:70:0a:ce:66:
d4:f9:82:eb:44:eb:60:44:76:d2:0b:fe:53:f7:a7:42:6c:82:
3b:53:1a:9e:eb:a1:34:8c:d3:69:3b:da:a1:59:5d:a3:a8:7c:
6e:29:bb:13:df:da:04:3e:87:d2:e7:57:c3:5a:63:f6:df:81:
70:36:8a:89:5b:c3:eb:03:ff:cb:fe:4b:cf:98:65:b8:2b:7b:
ad:d0:84:0d:a0:b1:ae:ad:cf:66:5f:9f:be:41:32:96:65:f7:
db:33:56:55:b9:4f:6f:2a:24:67:18:0e:a4:e8:9d:62:3f:a0:
ad:b2:06:97:1b:eb:a3:e9:74:30:4e:fb:b0:c8:04:9b:d4:06:
5d:5a:43:e9:c9:d9:49:f1:79:a4:f5:68:0d:fc:38:00:97:f7:
5f:31:c0:91:17:03:fb:90:c3:35:b1:4d:5a:65:b1:e1:bb:d9:
a4:2e:3a:ab:3e:de:54:3b:5b:e4:c8:d5:4a:54:0d:01:15:f2:
7e:57:0f:b4:a3:a2:f3:a2:a3:f3:af:54:39:4d:cd:13:31:14:
68:d5:cf:b2:2f:2b:00:e7:7f:30:50:e4:b6:80:7b:ac:ac:92:
8c:ad:c3:ff:d8:ec:d3:a1:be:06:2d:b3:31:63:bd:b7:24:11:
80:ca:f3:ea
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:04:11 2026 by rpki-client