This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa
File: d474896b-8f19-3b64-a77d-131cf6524395.roa (raw, json)
Hash identifier: TsdBbXVNgll0xcvGfZpbS5hXeuPAe00znEfjAfzDTeE=
Subject key identifier: 57:DC:7C:78:82:91:F6:F6:F4:42:99:2D:63:A5:59:26:55:06:49:BB
Certificate issuer: /CN=7b840891-ef20-464d-970d-ffec736f7949
Certificate serial: 010D0C9F4328584C9536D7B32A73B06272CEB000
Authority key identifier: 54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa
Signing time: Tue 20 Jan 2026 02:00:29 +0000
ROA not before: Tue 20 Jan 2026 02:00:29 +0000
ROA not after: Mon 20 Apr 2026 01:00:29 +0000
asID: 30500
IP address blocks: 74.123.68.0/22 maxlen: 24
198.134.28.0/22 maxlen: 24
208.77.196.0/22 maxlen: 24
208.123.208.0/24 maxlen: 24
208.123.210.0/23 maxlen: 24
208.123.212.0/22 maxlen: 24
208.123.216.0/22 maxlen: 24
2605:e680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:95:36:d7:b3:2a:73:b0:62:72:ce:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b840891-ef20-464d-970d-ffec736f7949
Validity
Not Before: Jan 20 02:00:29 2026 GMT
Not After : Apr 20 01:00:29 2026 GMT
Subject: CN=6c9cd30b-ec9e-46f6-85b6-8796684c59be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:79:25:41:c9:ba:88:a3:7d:2b:75:46:bb:b1:
c1:fe:65:08:9d:85:6f:09:f2:9d:45:1a:2a:f5:62:
28:20:34:d2:7d:df:04:c5:85:04:75:37:6e:9e:7e:
b9:b1:31:9c:5c:bb:68:6a:30:1d:0d:aa:cc:d4:31:
25:2a:be:93:be:5f:8a:b2:ab:71:db:fa:26:54:fe:
9e:e0:67:e8:73:ea:27:fe:c8:7c:16:43:54:20:05:
5e:d9:fd:1a:7f:7c:c6:ae:57:09:f0:e6:74:2d:96:
b7:42:35:d8:0e:7a:af:46:27:33:85:8a:21:6e:46:
0a:ea:79:7e:25:a0:a6:e5:6b:6d:6a:0b:b0:12:59:
4f:9d:c4:c3:be:26:1e:95:3d:97:38:3b:e6:85:0b:
2b:6a:26:76:11:6e:c3:e9:0f:fa:03:eb:c0:4a:52:
16:8f:b5:56:a1:43:75:42:01:a6:8e:a4:57:06:94:
d3:41:bf:4f:03:69:43:04:14:57:a5:f8:c3:4b:6f:
34:4a:37:4b:4f:cf:ea:01:fd:f8:c8:92:93:f8:c0:
a4:67:d6:e5:5c:a9:05:cc:db:ba:a7:20:26:71:3d:
50:80:17:3c:16:0d:3c:f1:23:07:37:96:d7:b7:f9:
48:19:51:d1:38:29:e8:4e:99:08:65:0e:b8:42:71:
17:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DC:7C:78:82:91:F6:F6:F4:42:99:2D:63:A5:59:26:55:06:49:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl
X509v3 Authority Key Identifier:
keyid:54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer
sbgp-ipAddrBlock: critical
IPv4:
74.123.68.0/22
198.134.28.0/22
208.77.196.0/22
208.123.208.0/24
208.123.210.0-208.123.219.255
IPv6:
2605:e680::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:9d:07:67:ea:31:5e:3a:5c:1f:19:04:f9:9f:4a:53:63:8a:
05:9f:e8:e7:9b:34:41:8b:d5:81:f2:a9:c8:f7:ef:b2:73:e0:
73:f8:cc:32:f0:e2:f9:1a:5f:76:03:1e:da:e3:03:a7:e2:e9:
86:e2:29:b8:0f:2f:b7:76:a8:af:5e:ce:4c:1a:64:a9:0e:52:
41:5f:3d:6c:91:b1:e6:c0:a1:4b:55:95:b2:6a:3f:a2:1f:37:
65:49:ea:00:27:a9:3d:25:88:2b:f8:3a:6a:6a:10:75:97:bf:
b4:bf:d2:b4:fe:e8:12:5f:b5:8d:04:cc:1c:9d:14:ac:9e:db:
ab:c1:9c:e3:d8:3b:20:cd:40:63:cd:cb:95:77:b5:b8:c8:8e:
cf:4e:3b:dd:28:b3:c0:72:a2:22:99:3e:4b:0a:31:f8:e8:56:
41:7c:6e:d8:4e:6a:9d:b7:a6:c4:97:40:c9:2e:bd:55:43:3c:
48:d3:df:f9:1b:54:1a:c4:b7:ec:f7:a9:fc:bb:ce:b8:97:00:
01:06:8a:a2:d7:83:d7:8a:3b:89:ef:09:56:ba:84:50:26:ca:
23:6b:b8:6e:50:a8:98:55:88:d3:ad:77:7c:2f:bf:77:ef:6e:
6e:55:21:c0:46:75:0a:a2:b4:87:70:44:85:e0:db:f5:04:bd:
8e:7e:b0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:29:18 2026 by rpki-client