This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa
File: 2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa (raw, json)
Hash identifier: fHTZFiapJO+u7aBy4k45F3IvFIxc4OaGiXcuVq2sW0w=
Subject key identifier: 44:4D:EE:35:08:E0:A2:0F:45:CA:B2:51:7F:9B:37:F5:B8:D3:29:87
Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial: 010D0C9F4328584C751C205F0B56F944A1C9F700
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa
Signing time: Thu 08 Jan 2026 14:00:39 +0000
ROA not before: Thu 08 Jan 2026 14:00:39 +0000
ROA not after: Wed 08 Apr 2026 13:00:39 +0000
asID: 16509
IP address blocks: 149.20.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:75:1c:20:5f:0b:56:f9:44:a1:c9:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Validity
Not Before: Jan 8 14:00:39 2026 GMT
Not After : Apr 8 13:00:39 2026 GMT
Subject: CN=320ae813-d2df-4229-b717-089a6a004ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:ac:2b:ff:c8:fd:93:b1:6c:84:50:95:c7:
12:fe:65:00:67:36:2b:17:d0:ce:51:1b:c7:10:12:
9d:6c:a3:d4:ca:99:7b:54:00:f8:4c:9b:d5:8b:2f:
6e:89:1f:62:1b:d8:b5:74:96:a4:98:7a:fb:6f:7d:
3e:e1:97:12:65:52:e3:60:1d:12:eb:ae:39:d3:b5:
f2:49:d3:bb:51:12:72:44:4b:e5:57:71:56:4c:66:
55:0d:0a:c0:56:4e:9b:08:c6:6b:77:94:1d:20:cf:
72:ac:65:3c:57:fe:33:bc:df:32:98:38:12:c2:57:
09:3f:b2:99:26:da:72:e0:98:a8:d4:0d:f9:24:24:
4e:a9:bf:04:f4:38:db:b3:3f:ad:33:8c:e0:90:74:
12:59:d5:1b:73:61:dc:a3:bc:21:cd:df:93:02:45:
d9:db:7d:7d:2b:a2:37:ac:7e:95:9c:41:dc:59:12:
80:c3:11:ca:68:99:3c:a2:5c:20:48:24:91:98:10:
f7:f1:ef:94:38:9e:ef:c1:ed:a2:3a:28:9c:fa:0f:
07:2d:e4:83:7e:68:2d:e3:16:66:72:58:5a:f1:a9:
28:48:30:f0:3e:54:8f:10:d3:d8:05:f4:14:8b:14:
59:1f:0e:78:55:84:ba:7c:7c:51:5f:ac:48:4f:20:
89:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4D:EE:35:08:E0:A2:0F:45:CA:B2:51:7F:9B:37:F5:B8:D3:29:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
X509v3 Authority Key Identifier:
keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
sbgp-ipAddrBlock: critical
IPv4:
149.20.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:b2:a7:93:08:27:ee:91:36:24:d2:9b:6c:de:25:ec:f1:2a:
19:c7:22:02:a3:37:ac:06:2e:a9:ee:e1:66:e6:ca:b9:b9:04:
04:fc:df:89:19:4a:9c:78:e2:3f:ac:24:63:7a:ac:bc:37:4a:
b1:1e:77:0c:66:75:fa:c1:d0:7f:bc:a3:8b:e4:1b:02:3c:fb:
87:70:a3:54:5b:43:9c:94:b6:2f:60:04:f5:21:17:66:ca:ea:
20:43:bd:b4:0e:4b:dc:7e:9f:42:b2:d6:dc:5d:79:85:b1:86:
2e:19:73:03:5d:73:10:f2:88:bc:55:e8:a3:27:a7:33:0d:c8:
b9:c5:fc:4b:02:74:7f:19:0a:1e:9f:66:5a:4e:34:20:5a:09:
8f:f0:5c:60:0c:24:eb:93:1d:c2:e5:75:c6:c7:ff:63:7a:b2:
c5:2f:b5:be:1e:94:c3:5a:d8:90:f4:4e:e3:0f:47:23:16:c9:
e8:f4:a5:eb:e2:95:24:fb:01:76:a5:58:53:0b:88:a9:82:a3:
19:05:8e:a2:e7:2b:27:23:7b:ad:ac:d4:bc:74:33:5e:68:e0:
79:1c:be:1b:54:61:a8:7e:5f:ee:46:28:67:3f:b6:f3:ea:bb:
72:1b:ad:8c:fe:ac:c3:d4:06:d7:57:3b:09:75:e9:af:65:b3:
8e:77:92:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:29:38 2026 by rpki-client