This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ef37b5e7-b2bd-3b07-a4b2-0ff6d7c2f107.roa
File: ef37b5e7-b2bd-3b07-a4b2-0ff6d7c2f107.roa (raw, json)
Hash identifier: /0/rsMvI8MAiWY30iXVvaj5Iu8jIJd4Ek/ya2xlVgcs=
Subject key identifier: 9C:C6:3A:08:61:BF:5C:A2:92:F2:61:1D:18:4E:E2:79:90:44:DB:69
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F4328584C8E3C30A3E708191524FF2100
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ef37b5e7-b2bd-3b07-a4b2-0ff6d7c2f107.roa
Signing time: Sat 17 Jan 2026 14:00:38 +0000
ROA not before: Sat 17 Jan 2026 14:00:38 +0000
ROA not after: Fri 17 Apr 2026 13:00:38 +0000
asID: 12189
IP address blocks: 131.153.104.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:8e:3c:30:a3:e7:08:19:15:24:ff:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Jan 17 14:00:38 2026 GMT
Not After : Apr 17 13:00:38 2026 GMT
Subject: CN=e16c03d6-233c-41f6-8930-ff5b70552510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e4:27:85:7e:0a:79:e9:29:1c:58:00:17:be:
30:4c:95:7c:10:5d:d8:54:37:03:0d:2b:bc:ef:94:
37:e9:d2:61:95:4b:b8:5b:ac:1f:a1:e8:5b:32:a1:
cb:cb:79:37:45:1a:9c:52:15:0f:fb:bb:35:73:b0:
92:d2:39:17:63:0c:69:02:62:ea:f0:8a:16:e7:92:
8b:aa:96:19:a8:6f:44:09:2f:57:83:c3:4f:81:de:
65:37:8b:de:9a:84:d4:80:93:af:4a:84:db:99:a5:
23:9b:92:da:91:3a:27:e8:3e:12:ec:49:42:e6:6b:
c4:25:65:bc:c2:c6:7b:8a:bd:26:9d:76:7f:58:59:
f6:70:23:77:48:16:80:05:33:6d:04:d4:7a:4a:c1:
7d:7e:74:8b:9b:aa:6c:21:92:a3:a2:06:4d:52:f4:
67:e7:1e:f1:16:81:45:a7:ac:ba:f8:7c:d8:46:d1:
68:55:07:1d:ac:97:ab:f4:d1:7a:aa:92:bb:a8:d9:
bc:32:7e:da:03:d8:ca:36:e3:56:5e:25:50:11:0f:
08:48:50:9b:a0:7a:d4:6b:09:6c:35:c1:62:cd:04:
c7:e6:9e:cc:3e:63:a9:10:e0:27:92:2f:2f:cf:e5:
89:85:c7:55:1a:e6:1d:51:c3:96:21:f0:3b:2f:a0:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C6:3A:08:61:BF:5C:A2:92:F2:61:1D:18:4E:E2:79:90:44:DB:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ef37b5e7-b2bd-3b07-a4b2-0ff6d7c2f107.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:6c:df:73:86:19:b7:4d:a1:4c:15:e4:83:19:25:16:c7:33:
ef:29:8f:d0:d7:98:ba:5a:81:c3:2f:82:41:5c:c7:5d:d6:4d:
8c:4b:dc:a1:47:66:c4:ec:b3:21:06:80:6f:fd:84:ef:64:5c:
b9:66:05:6d:1f:30:27:e0:eb:75:19:73:ee:39:15:3d:8e:5e:
ad:d8:24:10:ba:89:9c:4b:d1:f9:ca:ea:56:96:a5:6c:17:70:
e1:eb:67:e5:f1:5c:b0:db:f0:39:3a:20:4c:b1:da:36:38:35:
36:48:a0:f8:14:a8:8d:83:7c:45:72:49:98:7d:8d:6a:ef:1f:
fe:75:90:62:04:7e:cb:8e:43:2d:0f:fe:75:d6:b2:cf:47:6a:
de:36:49:44:e0:56:e3:fe:69:ee:08:e9:3b:e4:3a:b6:6c:ae:
dc:dc:c2:f8:65:f4:fc:54:65:77:c9:91:a9:d7:1a:d4:9e:9d:
ea:b7:19:2d:b6:59:db:df:1b:e7:29:4f:f9:9f:8f:ae:a3:94:
79:5c:0f:84:3f:fd:c9:4a:98:d4:41:3c:4b:21:bc:4a:65:af:
48:a9:81:91:d6:94:7f:f1:52:4a:55:7b:78:27:3c:c5:17:71:
e7:d8:aa:e3:2b:54:2b:b9:e2:9b:b4:00:2f:48:10:9f:8a:bd:
8b:40:d4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:25:42 2026 by rpki-client