This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/bd4c0156-1e13-3368-a399-5dcfc75f4825.roa
File: bd4c0156-1e13-3368-a399-5dcfc75f4825.roa (raw, json)
Hash identifier: aVaU9uU+fHbPqXPMt9LheHY+naydPSTpnhFvAbMJleY=
Subject key identifier: A2:70:BF:09:4F:07:9A:BB:55:6D:2B:97:AA:DF:40:85:B1:FC:C4:7F
Certificate issuer: /CN=40d7b3ea-8cf6-44c4-b681-7b6272e688f6
Certificate serial: 010D0C9F4328584C85DC1EA94F1AFE8BB003EBE0
Authority key identifier: FD:2C:6C:4D:10:C9:EC:50:61:C1:EB:5D:84:52:24:3B:62:7B:2E:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/bd4c0156-1e13-3368-a399-5dcfc75f4825.roa
Signing time: Wed 14 Jan 2026 14:00:38 +0000
ROA not before: Wed 14 Jan 2026 14:00:38 +0000
ROA not after: Tue 14 Apr 2026 13:00:38 +0000
asID: 2914
IP address blocks: 23.133.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:85:dc:1e:a9:4f:1a:fe:8b:b0:03:eb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d7b3ea-8cf6-44c4-b681-7b6272e688f6
Validity
Not Before: Jan 14 14:00:38 2026 GMT
Not After : Apr 14 13:00:38 2026 GMT
Subject: CN=4a187049-96d2-4811-8a9f-9ef66fd0ea5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:14:88:6e:41:74:2a:59:f2:ea:0b:e3:5b:31:
44:28:72:d4:0c:9f:d4:df:6c:c4:22:75:4b:47:47:
31:80:ee:67:dd:94:e6:db:4e:70:48:cb:c2:f5:09:
fc:ba:04:8c:83:46:ba:09:57:8d:2f:f2:3d:52:3c:
5c:2c:c1:47:42:0f:20:12:c3:2e:e9:a5:c0:6e:f7:
87:59:6e:59:38:08:0b:96:3d:59:1f:4f:b1:6f:66:
65:16:14:66:21:f4:c8:15:e8:17:71:6e:2c:0f:28:
fe:59:f6:1f:ec:9c:a4:d1:ea:6e:7d:22:3d:7b:29:
03:4a:51:88:b3:75:2c:58:88:bc:af:e9:c0:02:9d:
7e:28:06:52:2e:88:c2:08:55:94:07:bf:f9:44:66:
e5:f7:6e:c6:b6:de:27:ca:a6:dd:b2:00:aa:a7:91:
23:b4:df:9f:26:81:16:15:fd:a4:6b:a3:21:32:9d:
2d:a9:96:aa:f0:81:b7:07:93:ac:89:e9:52:24:82:
e9:8d:6b:7f:1f:8e:a8:49:49:6f:ae:82:0a:d9:7e:
70:ba:9d:21:57:48:6b:57:78:5b:50:37:42:8e:5d:
90:b3:d2:5d:88:ad:d3:ec:3c:9e:93:3e:fe:e0:8b:
b5:aa:c6:34:9a:bc:a1:12:eb:0b:7f:10:67:76:30:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:70:BF:09:4F:07:9A:BB:55:6D:2B:97:AA:DF:40:85:B1:FC:C4:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/bd4c0156-1e13-3368-a399-5dcfc75f4825.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.crl
X509v3 Authority Key Identifier:
keyid:FD:2C:6C:4D:10:C9:EC:50:61:C1:EB:5D:84:52:24:3B:62:7B:2E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:dd:ef:3d:14:81:04:5b:65:aa:45:28:5b:42:92:1b:23:08:
f3:40:87:54:72:a9:68:14:8a:ae:56:c8:29:f4:10:95:0c:c6:
b8:2a:38:b3:01:17:3b:75:cf:a2:62:9b:8d:a8:9c:24:d6:e1:
f6:dc:82:af:4c:26:ff:06:51:26:8e:94:05:0f:76:5f:47:49:
81:81:52:c2:f7:b1:6f:d1:70:0d:7e:99:dc:bf:0f:5d:1c:bd:
4b:16:2f:b5:df:66:ec:cd:cd:39:07:3d:cf:3f:9d:11:b0:04:
30:9f:95:c3:32:51:90:92:94:f5:04:9f:b9:d7:8b:51:25:73:
5c:e6:cb:da:9d:e6:a9:2e:3c:ee:1e:77:a4:d4:25:47:78:3b:
7f:79:b8:4e:d3:59:f7:a1:35:70:1d:3e:44:c3:80:0d:b8:4d:
f8:af:6f:47:85:c0:77:c2:52:64:7f:b1:fe:d2:d0:f4:c9:d8:
28:fe:cf:a2:e3:21:65:4d:74:65:32:c2:4e:48:4b:aa:f3:3c:
c2:bb:cb:c1:1a:75:ef:b9:80:70:c1:59:0e:1c:d8:43:f0:99:
b1:ad:72:2e:6c:33:f5:c0:64:8a:3a:d5:a2:dd:eb:d0:e3:4d:
a0:62:20:fd:b2:17:8f:0f:a7:f7:5f:b4:50:34:48:da:d7:d8:
86:c9:ac:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:02:52 2026 by rpki-client