This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/27ef1240-e400-35f4-a885-bf4a8fb3d7f3.roa
File: 27ef1240-e400-35f4-a885-bf4a8fb3d7f3.roa (raw, json)
Hash identifier: bs6kCqT1eDvj4Efzs/Jl8rPIb80kef3Q//1gi2oroIk=
Subject key identifier: 71:D9:3A:E1:96:59:31:75:56:B0:D8:86:80:F9:21:B3:9C:DA:DA:CB
Certificate issuer: /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial: 010D0C9F4328584C99D9A22AEBE2E7140110E890
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/27ef1240-e400-35f4-a885-bf4a8fb3d7f3.roa
Signing time: Wed 21 Jan 2026 17:51:49 +0000
ROA not before: Wed 21 Jan 2026 17:51:49 +0000
ROA not after: Tue 21 Apr 2026 16:51:49 +0000
asID: 198949
IP address blocks: 67.20.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:99:d9:a2:2a:eb:e2:e7:14:01:10:e8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Validity
Not Before: Jan 21 17:51:49 2026 GMT
Not After : Apr 21 16:51:49 2026 GMT
Subject: CN=6219bcf3-e932-4e9d-9a28-98d45d255986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:74:f1:26:2b:0c:4b:a6:89:47:96:69:b6:
6d:1e:6b:c8:8f:eb:a1:b0:65:a6:2c:f7:ee:b9:64:
0f:97:64:2a:2c:55:2d:c4:20:cb:9c:27:f7:8e:bb:
d1:3d:14:99:2e:0e:2c:ec:dd:cf:01:65:f2:03:c9:
de:a1:f6:00:2e:c8:6f:d4:71:59:c8:1b:50:cf:de:
3e:d4:15:55:13:ec:b9:7c:f0:2e:c1:c3:cf:1a:37:
77:3b:f6:05:57:81:34:65:1f:69:63:34:02:04:1a:
91:ec:84:ff:26:1b:46:54:1a:33:f8:d9:ba:db:c4:
26:75:37:13:aa:10:49:5c:c6:6c:bd:dd:41:17:20:
9d:2a:1b:be:28:8d:23:86:bf:ac:27:4a:b6:23:df:
6e:2d:70:86:53:54:a7:b3:8f:7c:ed:98:f7:b3:9d:
80:85:57:23:94:77:cd:95:e7:9d:2f:c8:6e:1a:23:
91:d7:ca:9a:4e:c0:80:7a:3a:80:5e:3c:ec:e0:fc:
42:21:b7:40:fe:b4:e8:c9:16:f7:96:9c:61:93:7c:
18:17:b3:1f:2e:27:a7:65:92:e8:62:a7:d0:e5:aa:
92:f0:c3:a4:f9:85:b6:69:18:42:e6:7d:fb:81:a3:
eb:d2:99:5c:ce:22:70:61:2e:72:51:a8:fc:9b:ad:
be:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D9:3A:E1:96:59:31:75:56:B0:D8:86:80:F9:21:B3:9C:DA:DA:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/27ef1240-e400-35f4-a885-bf4a8fb3d7f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
X509v3 Authority Key Identifier:
keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
sbgp-ipAddrBlock: critical
IPv4:
67.20.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:dd:ff:52:94:b8:7f:2a:07:b3:e4:59:61:60:fa:24:2f:dd:
bb:57:67:f2:73:15:da:5b:b7:da:c7:94:c9:f7:45:de:5e:0d:
f0:5a:40:f4:22:c1:ec:04:0e:cc:1a:e1:98:b3:42:04:2b:4c:
68:36:56:71:37:eb:59:e9:08:eb:ab:50:d5:ac:b4:63:37:49:
11:44:6c:f3:e1:bc:34:ad:58:3b:c6:fa:90:4a:f3:6e:5c:b6:
2a:6e:e1:4f:e4:05:f0:7a:87:42:68:8c:06:da:50:3b:8c:fe:
68:2e:2e:64:b1:d5:7c:ab:19:ba:c2:cf:b8:d0:0c:73:8e:c5:
f3:91:6f:fa:c2:5b:7a:c0:8b:b6:41:3a:95:66:a2:c8:2f:24:
45:93:81:a0:b3:b7:92:8f:af:43:4a:61:06:d3:76:9a:fe:74:
34:36:0e:5f:9b:6f:11:f9:5d:a5:fb:4a:a5:e9:3c:71:75:1a:
fd:89:ff:d0:c4:f7:63:3d:0f:ec:dd:d5:c5:d6:4b:c4:4e:5a:
88:52:b6:a2:7b:63:7c:17:75:b1:df:2c:5e:04:4e:43:c4:4b:
17:7d:3d:89:eb:28:fa:3d:6b:e5:d2:3e:fb:86:7d:59:57:e8:
51:b6:f5:11:65:47:45:01:63:cb:db:3b:eb:89:f3:3a:da:ab:
3a:88:60:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:39:26 2026 by rpki-client