This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9e81f3eb-9d61-3a5b-8c2c-219fe8fdd0d4.roa
File: 9e81f3eb-9d61-3a5b-8c2c-219fe8fdd0d4.roa (raw, json)
Hash identifier: VG7PeiQpvuZ444zYFYEzokSirj7/jYNG+9v9GNdpirs=
Subject key identifier: D2:DA:40:AB:A7:AC:25:CA:2E:1D:75:2C:55:46:7F:AE:23:90:8F:6C
Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial: 010D0C9F4328584C5F44E065821E21E7FEC20A00
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9e81f3eb-9d61-3a5b-8c2c-219fe8fdd0d4.roa
Signing time: Mon 01 Dec 2025 14:00:39 +0000
ROA not before: Mon 01 Dec 2025 14:00:39 +0000
ROA not after: Sun 01 Mar 2026 14:00:39 +0000
asID: 46841
IP address blocks: 199.87.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:5f:44:e0:65:82:1e:21:e7:fe:c2:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Validity
Not Before: Dec 1 14:00:39 2025 GMT
Not After : Mar 1 14:00:39 2026 GMT
Subject: CN=4f34fae6-3507-475d-bec1-fe92a40a3c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:c7:3d:e8:66:7b:34:7c:d9:c1:6a:94:c2:
cc:4c:d6:2d:8a:7b:69:f8:55:58:4c:40:93:ed:7f:
b4:82:f5:ef:b1:64:64:11:b9:0d:f9:17:96:b9:7e:
6b:57:6a:83:b4:34:ff:6f:68:52:27:20:94:8b:1a:
0a:9d:f1:e4:47:7a:ac:4d:5b:2a:0c:45:ef:56:9e:
f8:26:9d:e1:db:34:95:2c:8c:5e:01:7c:f9:5c:ac:
86:ca:24:00:aa:2f:d2:74:11:89:32:2f:76:4c:32:
23:dd:96:08:8e:6b:44:78:37:66:26:61:5a:07:b3:
f9:e6:63:94:fa:92:8e:10:89:78:45:0a:c2:9b:c6:
5a:af:24:28:71:f0:10:b7:23:da:04:ab:67:ef:f5:
19:79:71:91:d7:ee:69:e8:73:12:6e:27:e5:f8:c0:
1e:c1:1e:59:90:3f:99:13:da:b7:3b:7a:68:00:7a:
52:8a:dc:35:d2:49:61:bb:3a:f0:43:49:79:b2:96:
63:89:9e:6f:f5:4c:89:53:74:cc:fe:bb:f7:98:59:
9b:03:83:c4:d7:41:6f:1b:d9:36:4c:6e:03:6f:89:
36:87:fc:c3:a2:37:29:a2:bb:2c:9a:bd:56:49:6c:
85:70:e8:c3:7e:f0:ab:0f:a7:08:4b:da:ab:12:d4:
89:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DA:40:AB:A7:AC:25:CA:2E:1D:75:2C:55:46:7F:AE:23:90:8F:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9e81f3eb-9d61-3a5b-8c2c-219fe8fdd0d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
X509v3 Authority Key Identifier:
keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.87.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:09:92:3d:48:2b:f0:66:48:d0:78:1b:af:36:d6:be:e7:62:
72:16:dd:34:1e:96:a8:8a:94:d4:37:52:1c:3b:9c:61:73:88:
fb:3d:d4:2a:e9:0c:58:39:aa:29:6e:22:a8:1c:bc:60:39:76:
02:08:a7:be:87:c2:2a:af:16:3a:24:f4:6d:27:53:b4:6c:cc:
1b:23:86:29:75:51:eb:69:34:41:1a:92:64:73:65:06:b7:73:
27:25:ce:94:d2:42:35:aa:bd:50:d3:98:bc:59:26:d5:49:ce:
04:b8:5f:9c:20:07:44:1c:ae:b4:e3:06:19:ae:2e:fc:77:9e:
a5:3c:af:53:5c:44:ab:02:72:8b:7b:79:cd:9f:f4:3a:b1:1e:
2c:61:55:0d:94:56:63:4b:4a:92:23:66:3f:e2:26:99:a6:43:
fd:dc:67:ba:0f:c4:75:68:0c:fb:ef:0c:7e:f1:41:70:cd:cd:
b3:57:3b:cd:86:1e:33:b9:dc:6f:d0:37:14:b4:ff:16:08:f4:
d6:92:b1:a2:ec:3d:3c:82:5f:d2:e1:a2:8c:bd:6d:61:3d:16:
aa:21:2d:37:8d:f3:b1:ab:22:e8:b5:36:20:26:3b:84:48:29:
0f:aa:94:84:9b:76:e3:6a:4d:84:5b:81:c6:3f:39:d4:f9:be:
24:ea:27:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:54:05 2026 by rpki-client