This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/b45e4130-0497-38e3-9e94-bc71e24b4c95.roa
File: b45e4130-0497-38e3-9e94-bc71e24b4c95.roa (raw, json)
Hash identifier: x9xEnppRlSL3HuR7rshdjBXfMozqCAaevAt6/wM/bCw=
Subject key identifier: 6E:BE:5A:4A:3B:AC:C2:B8:4A:D7:E5:17:F3:E3:51:4C:91:82:78:D9
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584C6E218DD328352A8B2900D480
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/b45e4130-0497-38e3-9e94-bc71e24b4c95.roa
Signing time: Tue 06 Jan 2026 02:00:31 +0000
ROA not before: Tue 06 Jan 2026 02:00:31 +0000
ROA not after: Mon 06 Apr 2026 01:00:31 +0000
asID: 16696
IP address blocks: 67.221.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:6e:21:8d:d3:28:35:2a:8b:29:00:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Jan 6 02:00:31 2026 GMT
Not After : Apr 6 01:00:31 2026 GMT
Subject: CN=2ae0abc5-d88a-4e15-aa49-fa60374ba5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:20:f6:83:a4:71:0a:64:dc:48:5f:64:db:
ae:3c:6a:3b:a0:c9:6d:f7:fa:98:7d:85:78:b3:97:
30:2d:99:8b:f3:dc:9a:9c:b4:83:8e:58:e9:12:aa:
b0:c0:7c:6f:93:b0:86:b6:eb:6c:aa:1f:23:7a:d7:
95:2b:41:3e:af:d3:1f:bf:65:36:f1:dc:13:c8:6d:
b7:1b:cf:b4:7e:c8:f7:49:f3:f3:01:df:75:c8:3c:
a8:49:15:c5:a8:dc:35:ee:e9:87:73:33:5e:aa:4c:
f8:93:27:62:61:4f:94:dc:16:c0:f0:5e:8a:d3:fa:
4e:20:3c:50:d1:05:7c:d1:04:b3:92:c2:ab:0c:4d:
da:fd:67:9a:81:06:2b:11:0a:5e:30:7f:83:7b:30:
74:35:43:f9:d3:c4:fc:9f:bc:4d:59:4e:8f:9d:35:
ce:38:18:1b:c0:04:9d:02:99:92:28:ee:01:6e:e6:
ef:54:8c:1b:24:58:16:f5:b1:b3:36:48:2f:48:b3:
82:5d:37:fc:0f:ee:b6:a1:0d:ec:75:ca:6a:4b:a2:
0c:42:7e:74:ca:20:5d:4c:5b:63:1f:5a:97:46:ee:
a4:c5:98:2d:0b:a3:89:2b:ec:a9:cf:65:a8:70:23:
c9:83:92:0b:be:d8:c4:5f:6b:3c:8b:c7:48:99:48:
ec:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BE:5A:4A:3B:AC:C2:B8:4A:D7:E5:17:F3:E3:51:4C:91:82:78:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/b45e4130-0497-38e3-9e94-bc71e24b4c95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
67.221.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:bd:e0:dd:51:65:28:07:66:02:48:90:b8:26:16:62:c6:d8:
ce:b9:a7:b2:8b:9f:73:bb:f7:cc:75:58:52:2e:10:b5:1c:cd:
dc:9c:19:26:c6:a2:ef:3d:07:9a:fe:bd:25:67:ac:a4:87:1d:
fc:7f:1d:7c:d0:f8:f9:0f:36:1e:90:7b:51:02:4c:fe:41:2b:
ea:dc:64:2b:81:a1:a5:43:4d:6c:27:46:f9:35:66:4a:27:b1:
e0:1c:f7:28:06:b9:6e:b0:e6:77:ec:b2:11:5f:5d:8d:73:b2:
a5:73:06:21:00:ef:b7:57:51:ba:49:63:95:e5:0e:3d:f2:3a:
0b:3a:76:43:4b:bd:e7:82:cb:15:cb:28:68:fc:cd:d2:a9:a2:
b6:ce:0c:a9:cf:d3:88:88:98:1f:73:43:26:21:f2:0c:69:99:
3e:f9:2e:71:62:d8:15:15:9a:28:f4:ae:78:72:99:4c:7d:2a:
fb:c5:a3:9c:20:d2:ec:21:ae:d7:d0:32:cb:77:4f:40:f5:44:
72:79:01:4d:14:c4:ae:83:93:9f:10:66:3a:f8:a5:24:5b:53:
a1:2e:e7:16:68:08:7c:85:65:89:0f:30:60:5c:62:2d:c2:59:
86:63:0b:00:d7:74:9f:2e:c4:0c:ad:b4:49:76:5c:9a:a8:79:
d9:9d:db:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:16:21 2026 by rpki-client