This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3a89c06e-a521-389e-bffb-da5a48fb6376.roa
File: 3a89c06e-a521-389e-bffb-da5a48fb6376.roa (raw, json)
Hash identifier: GhGHMavk+UmHTjafHXQ0AeTjkaacqovN+11jxr+brWE=
Subject key identifier: 10:44:84:F2:A7:78:DC:40:F4:07:30:41:48:AF:DD:67:B1:CA:FA:78
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584C7D7C6654075E83D54ED66920
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3a89c06e-a521-389e-bffb-da5a48fb6376.roa
Signing time: Sun 11 Jan 2026 14:00:39 +0000
ROA not before: Sun 11 Jan 2026 14:00:39 +0000
ROA not after: Sat 11 Apr 2026 13:00:39 +0000
asID: 16696
IP address blocks: 147.129.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:7d:7c:66:54:07:5e:83:d5:4e:d6:69:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Jan 11 14:00:39 2026 GMT
Not After : Apr 11 13:00:39 2026 GMT
Subject: CN=ed195132-cd97-4cb7-a161-db610c9f8dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ce:40:80:9d:06:51:35:63:cf:82:d0:58:90:
26:7c:94:49:66:7e:b5:ce:52:12:18:93:42:13:df:
fb:5a:73:4a:04:08:ca:c7:d9:65:3f:c3:ef:ae:7b:
57:8a:87:aa:41:46:3c:e7:8a:60:6c:94:76:92:0f:
00:45:52:76:9a:2e:f2:78:de:c0:e4:f8:92:86:f0:
e8:20:3a:b3:67:9f:f4:ba:d8:2d:7d:ca:a7:63:e8:
e6:d8:73:68:44:4e:ba:ce:0e:99:48:1e:af:de:5e:
aa:a5:cd:40:8a:c6:7f:a0:14:a9:f1:34:f8:e1:2a:
a2:7d:12:b5:32:13:9b:bf:cf:70:3e:61:ff:01:5a:
b7:4f:0a:da:1c:9b:bb:a5:64:3e:2d:b5:9a:a2:db:
fa:c7:6e:ed:a3:4c:e1:04:b0:fb:31:25:4d:9f:a3:
c1:82:a4:e2:ee:a4:b6:b0:80:42:8b:ed:98:da:da:
73:c9:5c:28:5a:18:1e:a4:fe:55:3d:d5:54:69:2d:
c1:de:5a:b3:db:e1:0f:2f:0d:d5:67:92:75:42:a2:
1c:1b:78:64:54:80:9d:7b:3c:cc:49:63:99:10:44:
1c:e7:be:df:d0:bb:a4:10:10:c4:af:7e:43:13:31:
52:f7:d6:ee:c2:6e:ef:9b:28:05:f5:e8:dc:21:ac:
19:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:44:84:F2:A7:78:DC:40:F4:07:30:41:48:AF:DD:67:B1:CA:FA:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3a89c06e-a521-389e-bffb-da5a48fb6376.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
147.129.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:b1:1b:e4:23:24:d5:bc:66:0a:da:c8:00:9b:0c:e8:f0:b5:
c3:59:1c:6a:e7:05:81:b9:c3:b6:d9:24:a7:21:51:46:66:e6:
f7:b8:b8:3c:fa:dd:da:a6:3c:9d:a9:2b:14:b2:77:22:79:cc:
19:46:ae:d2:73:c4:c0:89:48:e7:70:e9:62:ab:1c:46:ee:40:
7e:77:dc:7f:a5:31:d3:06:a6:6d:2a:b8:60:dc:7e:02:7c:0c:
da:2e:52:f7:78:11:5f:fc:22:36:fa:18:4f:53:34:ae:9c:14:
12:f4:fd:e7:85:c2:be:89:e3:0b:00:ed:09:8e:8d:8c:1b:73:
4e:4b:73:00:aa:5a:3e:27:2d:82:f6:98:82:0c:cf:eb:7d:77:
4b:d3:7b:86:ea:ec:15:42:93:a4:44:90:96:21:da:ea:33:00:
7b:2b:fe:00:bb:e7:e6:de:4a:19:67:c7:da:a9:fd:6a:d4:a7:
05:cc:28:94:74:35:5a:6d:d7:e4:69:2a:1b:58:21:6a:6d:fd:
d9:b8:72:0b:74:27:38:df:49:66:34:bd:9d:3c:a0:c4:f6:40:
b2:af:50:02:a0:73:f0:db:ac:b9:52:98:d2:d2:a0:f9:ee:fb:
64:9b:da:b2:e5:eb:df:44:9c:81:41:cb:aa:2b:40:67:88:2e:
5e:89:f6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:16:25 2026 by rpki-client