This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/eae85ad0-1277-36ff-9059-3ed1f569e35e.roa
File: eae85ad0-1277-36ff-9059-3ed1f569e35e.roa (raw, json)
Hash identifier: +Jel15b2AMrwEkzyM8clpkteTGwVe/6jvZt0/8LD148=
Subject key identifier: EB:98:FE:72:D1:F0:AA:A4:7F:2B:30:A1:D4:E0:0D:EE:AF:71:95:D8
Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial: 010D0C9F4328584C9ACC485159F89C54E9172A00
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/eae85ad0-1277-36ff-9059-3ed1f569e35e.roa
Signing time: Thu 22 Jan 2026 02:00:31 +0000
ROA not before: Thu 22 Jan 2026 02:00:31 +0000
ROA not after: Wed 22 Apr 2026 01:00:31 +0000
asID: 22765
IP address blocks: 72.20.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:9a:cc:48:51:59:f8:9c:54:e9:17:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Validity
Not Before: Jan 22 02:00:31 2026 GMT
Not After : Apr 22 01:00:31 2026 GMT
Subject: CN=42fb7539-de22-45c3-92ae-de9b4d73d54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0c:ac:03:ac:96:14:b0:c8:c2:bd:ce:7a:cc:
4a:8a:2e:40:44:58:de:f3:8e:5c:2f:47:e6:f6:77:
2f:73:70:e7:30:ee:63:02:ba:13:c9:5f:56:fa:05:
09:42:ad:9c:88:99:3e:51:27:16:d9:00:06:06:fe:
2d:31:6b:c8:87:2b:cd:7c:5d:e7:05:ec:62:b8:44:
12:6d:53:d1:fb:95:b9:42:e6:53:94:d7:15:30:23:
af:aa:a0:8a:ee:77:88:96:6b:be:cd:00:3b:ba:bf:
24:dc:cc:23:32:22:d6:54:f0:bc:6a:ad:79:8a:62:
da:4d:16:e4:be:b1:f0:b9:46:4e:83:c7:23:7b:20:
6c:74:6d:65:7f:d7:e0:57:b0:10:15:0e:21:87:9c:
df:5c:d9:27:18:c7:86:e2:ed:30:e2:6e:01:72:fc:
20:00:bb:fa:70:49:9f:12:38:df:93:49:25:43:30:
30:95:65:c2:b0:11:7c:d6:63:c1:1e:3b:e8:fb:c9:
75:48:27:c2:0f:6c:db:9e:88:e4:83:60:cc:d2:45:
44:54:85:81:d4:c6:8a:b2:41:6c:98:72:a4:0c:bf:
87:33:b1:8d:02:98:45:7b:18:46:0e:4f:df:49:d7:
4e:51:cb:d1:db:1f:c2:35:89:60:22:5f:51:81:a9:
71:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:98:FE:72:D1:F0:AA:A4:7F:2B:30:A1:D4:E0:0D:EE:AF:71:95:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/eae85ad0-1277-36ff-9059-3ed1f569e35e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
X509v3 Authority Key Identifier:
keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:29:25:3c:fd:5a:fd:7c:20:15:01:15:65:a9:71:7d:b1:5b:
dd:fd:b3:dc:ab:90:b9:4c:4b:82:d9:5c:1b:07:e8:0d:26:6a:
3c:66:84:f2:b3:5d:a0:00:3f:49:4c:28:37:32:a7:91:89:11:
21:3e:9a:0b:51:33:0a:91:12:d9:e3:4a:8a:0d:c9:d4:58:75:
83:c1:d7:7b:40:d8:35:93:11:d8:29:45:b7:cc:6a:2d:88:d3:
56:35:90:bd:cc:d8:4c:75:8f:94:5c:6c:a0:8b:82:17:aa:a7:
db:25:ac:ad:8d:6d:08:ab:dc:2b:bf:6c:69:c0:fc:55:dc:35:
37:5c:b9:5f:58:6e:be:6c:a2:b3:df:97:fe:b9:36:43:a8:ca:
ac:38:39:d3:c8:b9:4c:47:3d:95:3d:13:07:c2:a9:e1:fa:41:
0d:c1:0a:0d:2c:8b:07:dc:a4:bf:4b:1d:75:9b:e2:e6:b0:61:
09:c5:1f:9e:0f:c5:34:bb:4b:90:60:6e:82:75:83:82:f3:8e:
f6:d0:57:07:e2:66:c3:5a:a6:e8:2b:6e:fa:9d:9f:24:ed:d9:
3a:03:d9:31:fb:f9:d5:60:87:22:57:f6:cc:f7:2e:62:35:aa:
c4:6e:a1:31:4d:f4:d9:43:3a:52:41:a8:0e:aa:3d:26:3a:74:
d9:72:b4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:58:56 2026 by rpki-client