This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4bd855b1-c38a-3d74-a029-75f51f88be98.roa
File: 4bd855b1-c38a-3d74-a029-75f51f88be98.roa (raw, json)
Hash identifier: 3nN/SKJlRrRpIjHdCXlQZ6Qc1rj36o7wjQSPFnjhdgM=
Subject key identifier: 45:52:F0:D5:16:A7:FF:60:B6:6D:D2:A1:31:5F:A0:C7:AC:C5:DD:F2
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584C95370BB40F2FFD502F90C540
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4bd855b1-c38a-3d74-a029-75f51f88be98.roa
Signing time: Tue 20 Jan 2026 02:00:29 +0000
ROA not before: Tue 20 Jan 2026 02:00:29 +0000
ROA not after: Mon 20 Apr 2026 01:00:29 +0000
asID: 23473
IP address blocks: 66.253.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:95:37:0b:b4:0f:2f:fd:50:2f:90:c5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Jan 20 02:00:29 2026 GMT
Not After : Apr 20 01:00:29 2026 GMT
Subject: CN=be63cf7f-0cdf-4fef-811a-222ea0afd3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:8e:0d:ef:f1:e3:cf:4b:9f:aa:f9:1f:6f:
90:c3:38:0f:6f:b6:49:cc:a3:54:75:66:71:cb:0f:
99:2a:b3:44:62:e9:eb:e1:e1:2f:f1:98:f1:1e:d3:
b1:94:75:af:c0:fc:1b:37:a0:c9:5f:22:8e:f3:7a:
d8:67:05:0c:2c:6f:5c:34:0d:ef:6f:d7:63:84:e0:
9c:70:30:82:29:ca:a1:09:4c:39:3d:21:da:83:49:
62:18:b8:ef:2c:c2:f1:a4:fd:91:82:9f:f1:ae:58:
a7:ea:bb:54:96:4d:ea:31:b7:77:7d:d3:c1:10:38:
97:25:c7:03:0a:ae:43:81:50:97:80:2d:aa:61:47:
e1:15:c9:0c:2d:3f:8c:54:19:d3:b7:d3:0d:fd:61:
29:d8:00:1d:66:69:1e:56:a6:25:a2:82:14:ce:52:
0f:00:09:3b:dc:f8:2f:c8:25:13:d3:6c:a5:20:aa:
73:8e:b4:94:8d:38:4e:99:23:7e:08:7d:40:80:72:
fa:16:62:d1:e8:89:d6:d0:15:ee:36:02:d3:91:1f:
29:51:10:d0:51:d1:51:9f:7a:8c:03:a9:93:1e:82:
62:10:09:6f:70:f2:2c:d5:75:3c:22:e0:bf:7e:72:
bf:4c:04:3a:f3:c1:d9:31:36:aa:72:2c:3a:a4:38:
e0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:52:F0:D5:16:A7:FF:60:B6:6D:D2:A1:31:5F:A0:C7:AC:C5:DD:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4bd855b1-c38a-3d74-a029-75f51f88be98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.253.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:f2:f4:fc:75:92:27:dd:9d:07:b2:3c:c6:a7:4a:d9:17:de:
15:68:b0:f5:1c:a5:dd:ea:c4:84:6d:b6:55:59:10:05:e2:df:
b5:13:9f:78:f2:eb:8e:a5:bb:7b:c6:1c:a3:e7:42:12:a0:70:
c4:34:41:ee:a9:dc:b5:83:a2:69:fb:2e:59:e4:ea:11:e3:40:
da:10:12:9c:47:24:1f:0e:7d:34:1f:26:bd:8d:de:0a:a0:a2:
e1:6a:18:81:0b:ef:73:bc:e8:a4:8a:9d:0c:b4:95:b7:e5:d6:
cf:8b:dc:4f:aa:d8:79:33:a9:1c:cc:4f:54:0b:0b:12:41:eb:
b2:1f:ff:71:2d:6f:69:c4:a3:e8:12:ff:e8:4a:43:b6:79:93:
a6:39:6f:3c:cb:9f:51:d5:51:d9:1a:94:dd:bc:01:0d:39:2c:
47:eb:5a:13:8e:68:9a:18:5d:27:6c:cd:ab:51:26:72:e0:46:
0c:6e:ef:3c:5b:0b:d9:ba:b3:c6:f5:fe:8b:81:95:7f:f3:2a:
57:bc:bf:38:c0:fd:1c:54:ab:50:5a:0d:9a:64:48:f1:4a:9b:
28:b1:90:84:13:19:fc:9c:bd:28:6e:0d:f0:f2:19:78:70:ef:
d6:cc:b1:fc:46:33:22:5b:fe:4f:93:c5:ed:3b:a5:4b:7d:37:
b8:ea:d6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:22:03 2026 by rpki-client