This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/48aa2ac1-aac8-3382-92a2-8a030207b08b.roa
File: 48aa2ac1-aac8-3382-92a2-8a030207b08b.roa (raw, json)
Hash identifier: KFRmaaFtA7MOoil6e1FxV69bFBHNqd7s5mVc+q2FMMo=
Subject key identifier: ED:C1:FA:CC:D3:7C:78:21:2A:97:18:B2:67:2E:49:52:E6:A7:2D:FC
Certificate issuer: /CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55
Certificate serial: 010D0C9F4328584C8A0C197E213B5B632740E840
Authority key identifier: 54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/48aa2ac1-aac8-3382-92a2-8a030207b08b.roa
Signing time: Fri 16 Jan 2026 02:00:31 +0000
ROA not before: Fri 16 Jan 2026 02:00:31 +0000
ROA not after: Thu 16 Apr 2026 01:00:31 +0000
asID: 12186
IP address blocks: 199.168.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:8a:0c:19:7e:21:3b:5b:63:27:40:e8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55
Validity
Not Before: Jan 16 02:00:31 2026 GMT
Not After : Apr 16 01:00:31 2026 GMT
Subject: CN=5bac46b4-01f3-4ee5-8aba-ec53584848d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:a8:13:96:59:9e:31:79:20:60:a3:f4:8e:
be:96:fe:58:c7:49:f9:12:22:7f:00:a4:eb:c2:72:
a9:ab:55:28:8d:8c:84:8e:67:72:7a:59:d2:96:55:
b3:23:5d:b3:d3:f2:1d:a6:92:04:55:17:91:3e:c4:
a0:2f:20:e1:b2:57:4b:36:04:a0:e3:36:61:be:58:
6a:fd:4e:97:ce:27:fe:76:bf:97:db:84:63:c1:63:
4f:25:0b:67:12:17:eb:82:2f:e1:e7:86:0b:2f:07:
dc:e1:a1:ec:f1:d9:56:81:f5:c7:9c:bc:33:1a:f9:
16:8f:b0:97:37:3f:5c:02:97:e2:79:58:c5:9f:70:
f0:87:b1:ca:f4:93:ae:07:f6:24:19:d5:8c:08:b2:
bf:b3:07:de:0b:90:4f:4a:5c:6a:96:ce:b9:6b:dc:
18:c6:0c:ca:93:be:f3:15:c6:80:9c:f7:55:ad:85:
62:6c:9a:f8:66:9c:22:46:08:6c:73:f5:d7:30:00:
c9:2d:8b:18:46:b6:bd:1d:8a:a4:20:93:dd:10:50:
28:59:ff:eb:8f:c4:81:5d:cf:9d:29:6c:c1:d8:6b:
b1:c3:9d:b8:a0:f5:21:bc:d9:ec:e2:d3:b5:86:34:
a3:94:03:0b:5d:37:64:2f:00:b2:22:64:fb:98:8a:
c4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C1:FA:CC:D3:7C:78:21:2A:97:18:B2:67:2E:49:52:E6:A7:2D:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/48aa2ac1-aac8-3382-92a2-8a030207b08b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.crl
X509v3 Authority Key Identifier:
keyid:54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer
sbgp-ipAddrBlock: critical
IPv4:
199.168.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:52:6e:b8:dc:d3:f7:d1:96:2f:69:77:47:8c:d3:a8:bf:72:
fb:7a:31:a9:27:37:8f:0d:bc:7c:ba:38:5c:c2:e2:bf:61:f7:
d9:6c:d5:b2:31:52:63:ca:55:63:39:0a:54:4f:87:71:f4:d6:
7f:bd:61:1b:c8:58:de:97:e2:2a:ab:79:0d:6d:a6:15:14:3f:
7c:e5:c4:43:b8:75:7a:d7:04:f9:33:d5:f8:bb:c3:07:da:55:
13:32:ee:5a:1b:b7:78:45:ad:79:7f:67:3f:42:22:22:f3:25:
70:fb:b8:85:42:06:d7:e1:53:e0:45:b2:a5:f7:31:13:06:2a:
0c:2a:26:43:06:b2:0c:5f:82:71:a8:a1:c6:1d:36:90:06:b5:
67:9d:f3:01:62:76:96:3b:ad:ab:fd:c4:b6:cb:de:ab:41:6c:
fd:7a:d8:30:97:39:04:69:6f:dd:56:ff:25:cb:ff:6b:98:f0:
b9:4f:86:42:14:c8:e5:fa:a3:63:42:15:44:c7:70:5a:24:d4:
e9:79:db:d9:2d:8e:ad:45:0e:f0:ef:cb:ff:58:74:13:3b:28:
5e:39:ba:c6:2b:56:03:3c:70:69:3d:bd:2b:d2:d5:fe:fe:38:
35:01:1b:91:1f:75:07:d5:e2:c8:4c:c0:e1:7a:54:13:6d:38:
e9:53:ea:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:29:10 2026 by rpki-client