This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8345228f-8d57-3f90-97d1-76ce96dca4d7.roa
File: 8345228f-8d57-3f90-97d1-76ce96dca4d7.roa (raw, json)
Hash identifier: pS6BLRRaKG9PohTjW44ZgnR4bJvIbyuMqJxTotGmGUo=
Subject key identifier: E4:C8:86:2F:28:1A:22:6A:BC:9F:E9:75:CF:DF:56:ED:87:77:44:E0
Certificate issuer: /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial: 010D0C9F4328584C9967186D10D234A78952CA80
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8345228f-8d57-3f90-97d1-76ce96dca4d7.roa
Signing time: Wed 21 Jan 2026 14:00:38 +0000
ROA not before: Wed 21 Jan 2026 14:00:38 +0000
ROA not after: Tue 21 Apr 2026 13:00:38 +0000
asID: 30041
IP address blocks: 199.187.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:99:67:18:6d:10:d2:34:a7:89:52:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Validity
Not Before: Jan 21 14:00:38 2026 GMT
Not After : Apr 21 13:00:38 2026 GMT
Subject: CN=68d7e0be-937b-4d46-b4c3-9077b1a41de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:05:35:a0:bb:fd:af:32:f9:b6:a1:9d:dc:
03:71:d9:0a:b8:79:6b:d9:13:66:4b:84:63:28:b9:
10:89:ce:bc:fa:8b:c5:dd:84:b5:35:db:ca:63:6e:
af:0e:20:99:a7:27:41:b1:e7:e7:9f:45:d5:0a:c0:
4b:86:24:4e:55:e3:8b:d2:c2:b1:7f:51:7e:0e:d6:
6e:18:50:89:88:96:6d:cd:a8:3a:d5:70:e1:74:0f:
17:07:46:49:e6:e4:f3:5c:84:cb:31:06:9c:7f:96:
03:80:09:19:de:c6:8c:cd:11:65:01:00:a4:f3:92:
ec:2e:85:44:9a:30:cc:28:3f:d8:8b:8e:8b:b2:c2:
25:2a:62:7b:87:34:cb:6b:bf:72:0d:2a:3b:18:c8:
13:2c:75:99:09:4d:5b:9a:10:24:42:0e:2f:2d:04:
90:8b:57:13:47:e2:04:91:e3:c7:ce:37:30:cd:43:
05:89:55:d7:ff:3b:8c:84:0a:cc:1d:d6:8e:25:d8:
8a:45:ef:1e:e4:7b:47:b0:73:e9:cc:3d:e1:46:72:
50:1d:d3:82:28:01:f7:b9:1d:be:0f:45:bd:a2:be:
a5:53:c3:1d:c4:24:10:c7:78:3e:8c:27:05:28:45:
39:ef:54:1f:ff:c3:18:97:f1:f8:96:1d:78:23:5d:
47:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C8:86:2F:28:1A:22:6A:BC:9F:E9:75:CF:DF:56:ED:87:77:44:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8345228f-8d57-3f90-97d1-76ce96dca4d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl
X509v3 Authority Key Identifier:
keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
sbgp-ipAddrBlock: critical
IPv4:
199.187.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:a5:b6:1a:44:fe:ff:1a:3d:d2:5c:75:ed:e5:77:8b:9a:b6:
b8:9c:06:65:a1:8f:24:6d:44:ab:7e:e6:c5:b5:c5:d0:a6:b8:
b3:b8:aa:77:90:96:4a:fd:4e:c3:c1:63:1d:b9:ae:00:ae:72:
a0:62:e1:af:fa:1a:9c:dd:f8:bf:f0:e0:3f:88:5f:9f:b7:3c:
33:2b:6b:ab:a7:eb:6e:42:30:1c:1a:a0:0c:58:21:a0:d5:b2:
2c:a2:5d:2b:76:e5:27:75:80:99:7c:fc:04:02:0c:1b:c1:93:
27:4a:4d:48:4b:fa:12:9d:5d:57:92:2c:19:8f:27:4f:da:9f:
ea:08:a9:ab:11:d1:3d:de:7c:1e:02:a3:74:40:6f:bd:15:0a:
cf:7c:fd:6e:0e:19:f0:23:9f:be:9c:2c:dc:56:bd:56:7c:d6:
ba:e1:6f:4e:a8:2c:3b:1b:c1:ac:32:82:96:10:af:37:ed:bc:
9f:13:f2:ae:89:ae:14:54:36:8e:1b:c0:0c:c5:f8:17:37:7e:
ea:da:03:f0:00:cb:4c:cd:ab:da:ea:d9:73:13:43:e6:a0:5a:
ad:c8:e3:dd:48:3c:5c:f7:23:98:68:fe:42:da:b6:6d:f8:e7:
cb:a7:3c:90:65:1a:91:1f:24:f7:c3:cd:fc:97:31:a5:8a:15:
07:5b:c3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:44:58 2026 by rpki-client