This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9872dc64-0988-3b5c-9553-f5d1b290496b.roa
File: 9872dc64-0988-3b5c-9553-f5d1b290496b.roa (raw, json)
Hash identifier: KNJXtYHpD85OtTvC2m9gmTnFi7joaXYJAp4G+bTIdQY=
Subject key identifier: 64:C0:C2:67:AF:1B:AD:58:C4:2C:41:F6:79:DA:21:6C:05:7B:9A:22
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F4328584C619140C721574AEE34F75580
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9872dc64-0988-3b5c-9553-f5d1b290496b.roa
Signing time: Thu 01 Jan 2026 14:00:38 +0000
ROA not before: Thu 01 Jan 2026 14:00:38 +0000
ROA not after: Wed 01 Apr 2026 13:00:38 +0000
asID: 397514
IP address blocks: 208.109.153.0/24 maxlen: 24
208.109.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:61:91:40:c7:21:57:4a:ee:34:f7:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Jan 1 14:00:38 2026 GMT
Not After : Apr 1 13:00:38 2026 GMT
Subject: CN=607e1002-e1ff-4467-b531-22539bec4665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:94:1c:41:ff:65:13:e2:0a:c9:20:0c:0a:e7:
8c:df:6f:6a:ce:a0:ad:47:86:b1:1a:86:77:b6:74:
d2:b1:a5:72:fd:af:9c:db:3a:5c:9d:e0:f6:12:fb:
2d:9f:36:eb:b7:0f:0b:2d:04:08:2e:c1:04:8a:fb:
1f:77:ab:55:ab:b4:6e:d4:03:1d:38:42:df:7b:66:
1b:9f:1b:6a:c2:22:f2:da:fd:dc:6a:58:67:66:32:
91:1c:ed:af:29:9e:a2:e0:e1:d2:72:bc:fc:24:95:
e0:3e:dd:72:a7:75:5a:d3:4a:b1:d1:65:2f:82:e4:
8e:59:5b:58:55:66:a0:d5:67:d3:33:14:42:05:27:
bc:6f:1e:b7:c6:b8:8f:a4:78:9b:c5:9d:90:5d:df:
85:08:28:57:b1:01:6c:73:37:26:b3:79:b1:e6:27:
37:0f:9d:7e:69:dc:1d:be:8a:04:c9:f4:c7:dc:cb:
34:35:e6:f2:6e:b1:95:5e:96:3b:60:2c:ae:c5:f3:
c2:21:35:ca:de:26:c9:17:47:4a:14:a7:bf:7f:24:
f0:ac:9d:d9:8e:5b:8d:eb:72:9f:0e:58:1a:9a:df:
83:b3:5e:a0:c9:c5:2c:75:f1:eb:d9:a2:85:29:c3:
c5:ee:f3:78:37:4e:95:2c:b1:74:81:2d:73:6c:12:
f4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C0:C2:67:AF:1B:AD:58:C4:2C:41:F6:79:DA:21:6C:05:7B:9A:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9872dc64-0988-3b5c-9553-f5d1b290496b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
208.109.153.0-208.109.154.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:85:aa:f9:33:dc:e1:29:ae:74:47:b5:50:78:cc:26:1b:18:
fb:da:de:c9:9a:8a:62:3d:8b:c3:1e:0c:02:34:f0:f8:86:87:
2d:9d:3b:fb:07:75:ff:eb:a3:a6:b5:77:ca:3a:31:89:97:dd:
32:d1:1e:a3:7b:ac:bc:fb:c3:7a:17:3e:a9:d5:7e:21:ab:72:
e8:6e:ea:2f:a5:e5:14:e3:94:aa:21:5b:bc:37:06:e3:99:43:
e7:d2:6e:9b:a5:33:e3:12:b9:c4:68:87:cf:6a:f5:2f:47:ad:
62:5a:ca:58:19:0d:22:ca:86:32:ba:46:54:4b:44:31:53:ff:
80:57:a9:b0:31:60:90:d3:54:44:78:33:92:c6:1e:5c:2d:c8:
70:ce:af:ec:62:09:06:7a:c4:d9:5a:0b:7a:60:8c:a8:3b:e0:
59:0c:21:c3:80:6e:e4:61:be:84:7c:43:ef:2a:10:c2:fb:1f:
19:d2:9d:7d:af:4f:0f:94:ac:c8:6d:4c:bd:c5:96:b6:1f:60:
c5:3c:7f:de:3f:55:02:68:4b:34:39:34:90:e7:91:e0:48:7e:
1f:3f:25:43:f1:b4:d2:00:5f:6f:77:35:cc:5e:ce:78:84:d4:
a5:30:c1:c6:48:48:a7:c5:7a:6b:e9:3f:c0:3d:d2:0b:98:7c:
a2:b2:8f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:24:38 2026 by rpki-client