This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/b4d466f2-e962-3689-8bcd-94237c4b2901.roa
File: b4d466f2-e962-3689-8bcd-94237c4b2901.roa (raw, json)
Hash identifier: /nAj9K8SzUNrR48g+oS5GO6Q1F1z35wPyjpF3YpN8+U=
Subject key identifier: CB:25:90:F1:E7:4F:E6:A4:CB:2A:16:3A:39:B9:59:98:8B:36:87:57
Certificate issuer: /CN=0b2e64da-0cf1-4baf-be94-c216b2b81d1b
Certificate serial: 010D0C9F4328584C7D7C3B45862CF75D312C2C00
Authority key identifier: CA:57:B1:59:36:C2:FE:71:4D:AF:90:51:CA:EE:B4:BD:C4:08:AB:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/b4d466f2-e962-3689-8bcd-94237c4b2901.roa
Signing time: Sun 11 Jan 2026 14:00:39 +0000
ROA not before: Sun 11 Jan 2026 14:00:39 +0000
ROA not after: Sat 11 Apr 2026 13:00:39 +0000
asID: 6079
IP address blocks: 157.120.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:7d:7c:3b:45:86:2c:f7:5d:31:2c:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2e64da-0cf1-4baf-be94-c216b2b81d1b
Validity
Not Before: Jan 11 14:00:39 2026 GMT
Not After : Apr 11 13:00:39 2026 GMT
Subject: CN=59f1dcff-61f9-434f-a0b7-9acb4795a9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:a7:83:3d:19:2b:97:3a:64:86:34:78:2a:
6a:51:c1:af:79:e0:d8:11:6c:fd:0c:bf:14:2a:91:
89:99:cf:6d:bd:ca:ac:54:2e:75:18:29:d7:75:b7:
a1:21:5a:5e:c4:9b:b1:9e:6e:18:4d:b0:f2:86:4d:
13:7e:ff:81:e3:9c:34:24:a0:47:fc:07:e1:e5:8e:
2c:d3:bf:33:91:e6:53:00:71:55:7f:2e:e5:29:40:
47:35:1c:f7:c8:0e:ee:e8:18:87:4e:18:c4:1b:d4:
14:3c:ad:df:5b:a9:21:52:6c:67:9f:8d:69:e7:1a:
cb:12:ad:f5:93:4a:fb:6d:f2:96:70:54:93:36:1a:
66:6a:7f:86:02:c8:16:d8:04:30:64:80:90:b7:98:
14:ea:c9:65:67:5c:6e:08:64:1f:1d:da:22:51:b7:
29:d0:d2:95:82:07:86:aa:0d:62:d4:02:6c:58:36:
3f:34:69:fe:30:0a:3b:60:59:80:75:00:a1:92:cc:
93:37:78:6f:25:ad:e1:79:29:0c:47:e1:b2:13:94:
c1:e5:3a:c9:74:5f:5f:2a:a1:26:e4:0c:66:58:e9:
01:af:79:6e:08:01:2f:15:02:c3:51:df:a5:33:dc:
f5:71:1c:9a:bf:a4:79:b0:af:cb:eb:7f:aa:dd:0f:
f8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:25:90:F1:E7:4F:E6:A4:CB:2A:16:3A:39:B9:59:98:8B:36:87:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/b4d466f2-e962-3689-8bcd-94237c4b2901.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.crl
X509v3 Authority Key Identifier:
keyid:CA:57:B1:59:36:C2:FE:71:4D:AF:90:51:CA:EE:B4:BD:C4:08:AB:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.cer
sbgp-ipAddrBlock: critical
IPv4:
157.120.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:3c:0a:18:a5:e7:56:53:dd:1b:61:a4:55:62:b3:ec:d1:84:
59:04:df:d8:b3:7a:ab:b0:01:39:81:38:0c:c8:4a:be:39:eb:
10:3f:64:24:77:13:64:c0:e2:ac:58:0e:e5:e3:99:ff:34:99:
41:03:6a:12:8b:74:d5:c9:18:81:53:41:46:03:fe:3b:54:e6:
53:b1:b5:2a:88:92:4b:f2:3c:51:4f:92:97:2d:43:9e:b4:1c:
1a:fb:4c:bf:cd:9c:39:e4:b2:0d:06:e2:f3:ce:3f:e0:96:6e:
c0:60:7b:dc:64:e1:e5:ae:7a:42:43:95:00:4b:19:d6:0a:2b:
80:93:96:3f:8c:fe:d0:00:9c:f3:8e:d5:05:a3:9e:3d:cf:18:
6b:5e:ac:f1:bd:ac:60:42:cf:88:c2:f4:19:70:35:93:5b:99:
66:7e:d9:dc:b7:eb:a4:77:94:88:bc:c0:b1:6b:97:b9:b1:c1:
7b:90:39:18:48:80:88:81:8e:f8:0e:c7:67:fe:57:78:9d:02:
4b:a0:a0:6d:b6:ae:c0:c1:44:1c:fe:99:78:77:17:fe:44:59:
8a:bf:8c:c8:fe:7f:ab:af:14:b7:f7:06:28:75:18:ac:92:ce:
5c:c0:43:2c:62:17:26:f4:9e:00:96:96:cb:96:d3:e5:f6:29:
2e:16:49:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fDtFhiz3XTEsLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGIyZTY0ZGEtMGNmMS00YmFmLWJlOTQtYzIxNmIyYjgx
ZDFiMB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk
NTlmMWRjZmYtNjFmOS00MzRmLWEwYjctOWFjYjQ3OTVhOWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohmngz0ZK5c6ZIY0eCpqUcGveeDYEWz9DL8U
KpGJmc9tvcqsVC51GCnXdbehIVpexJuxnm4YTbDyhk0Tfv+B45w0JKBH/Afh5Y4s
078zkeZTAHFVfy7lKUBHNRz3yA7u6BiHThjEG9QUPK3fW6khUmxnn41p5xrLEq31
k0r7bfKWcFSTNhpman+GAsgW2AQwZICQt5gU6sllZ1xuCGQfHdoiUbcp0NKVggeG
qg1i1AJsWDY/NGn+MAo7YFmAdQChksyTN3hvJa3heSkMR+GyE5TB5TrJdF9fKqEm
5AxmWOkBr3luCAEvFQLDUd+lM9z1cRyav6R5sK/L63+q3Q/4iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMslkPHnT+akyyoWOjm5WZiLNodXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wYjJl
NjRkYS0wY2YxLTRiYWYtYmU5NC1jMjE2YjJiODFkMWIvYjRkNDY2ZjItZTk2Mi0z
Njg5LThiY2QtOTQyMzdjNGIyOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGIyZTY0ZGEtMGNmMS00YmFmLWJl
OTQtYzIxNmIyYjgxZDFiLzBiMmU2NGRhLTBjZjEtNGJhZi1iZTk0LWMyMTZiMmI4
MWQxYi5jcmwwHwYDVR0jBBgwFoAUylexWTbC/nFNr5BRyu60vcQIq5cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wYjJlNjRkYS0wY2YxLTRiYWYtYmU5NC1jMjE2
YjJiODFkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnXjIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACY8Chil51ZT3RthpFVis+zRhFkE39izequwATmBOAzISr456xA/ZCR3
E2TA4qxYDuXjmf80mUEDahKLdNXJGIFTQUYD/jtU5lOxtSqIkkvyPFFPkpctQ560
HBr7TL/NnDnksg0G4vPOP+CWbsBge9xk4eWuekJDlQBLGdYKK4CTlj+M/tAAnPOO
1QWjnj3PGGterPG9rGBCz4jC9BlwNZNbmWZ+2dy366R3lIi8wLFrl7mxwXuQORhI
gIiBjvgOx2f+V3idAkugoG22rsDBRBz+mXh3F/5EWYq/jMj+f6uvFLf3Bih1GKyS
zlzAQyxiFyb0ngCWlsuW0+X2KS4WSVk=
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:26:40 2026 by rpki-client