This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa
File: 5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa (raw, json)
Hash identifier: fGdMY93gxZzmv71FeQgfyeHfhitWU7G6MzZ3f2MQtr8=
Subject key identifier: 30:07:92:FD:C2:2F:E5:CB:11:6D:D2:08:26:FC:CA:D2:31:3C:D3:A4
Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566
Certificate serial: 010D0C9F4328584C6B56AA5833E3540D91AA0980
Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa
Signing time: Mon 05 Jan 2026 02:00:31 +0000
ROA not before: Mon 05 Jan 2026 02:00:31 +0000
ROA not after: Sun 05 Apr 2026 01:00:31 +0000
asID: 40627
IP address blocks: 199.68.212.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:6b:56:aa:58:33:e3:54:0d:91:aa:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566
Validity
Not Before: Jan 5 02:00:31 2026 GMT
Not After : Apr 5 01:00:31 2026 GMT
Subject: CN=241481cd-fa04-48a1-99f2-c95a695657ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7e:33:7b:02:43:51:64:59:68:0b:a2:e9:a6:
2e:07:6f:19:02:9f:e8:0b:b0:bb:d8:32:ed:90:5c:
b5:4f:3c:9d:e8:4b:c4:fc:42:48:af:b1:ac:f0:b8:
cc:97:ce:ed:7e:a3:ef:d7:08:79:e9:e7:14:09:d0:
54:e7:17:84:ce:8b:91:4d:7d:53:b5:08:ff:63:37:
1a:1c:ac:56:21:5f:eb:2b:ba:55:3d:03:8d:12:f1:
98:8f:18:0b:74:6d:62:4c:a3:e7:d6:5c:88:60:5b:
9e:11:d4:51:42:83:37:a9:a5:b3:e5:15:12:88:21:
96:07:c1:8f:74:35:78:6a:7a:6e:99:ad:cf:e8:fc:
17:b6:b4:ba:8d:33:25:bb:2d:99:bd:58:ef:9a:18:
15:fa:5f:ca:f8:c9:55:f2:10:fc:e2:ae:0b:a5:9d:
4c:36:97:72:59:f2:38:0c:21:3f:32:ac:c2:95:fb:
cf:01:a0:4e:26:aa:65:c3:32:97:ed:79:49:f0:7a:
ad:d6:fb:c5:90:c9:71:4b:17:87:d4:91:77:d4:99:
72:32:2e:6c:0a:70:bc:b4:dd:16:68:3c:bc:4f:56:
68:bd:d8:23:5f:b9:06:90:88:5a:33:7d:7b:8b:a0:
34:35:c5:7d:fc:a3:f9:b0:01:5b:e4:9c:46:d2:83:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:07:92:FD:C2:2F:E5:CB:11:6D:D2:08:26:FC:CA:D2:31:3C:D3:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
X509v3 Authority Key Identifier:
keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
sbgp-ipAddrBlock: critical
IPv4:
199.68.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:ee:3b:98:b7:7c:5e:a6:8e:bf:0a:7a:f2:1f:19:e0:1e:9b:
2d:9a:0b:a4:0e:0c:ad:cd:28:3a:4e:95:c9:b4:11:fe:79:a3:
0e:17:5e:11:91:73:5b:a1:23:82:e2:af:e8:9e:14:53:13:24:
49:39:94:38:1e:8e:73:ba:88:91:9b:df:7a:92:9f:0e:6f:10:
10:67:f0:b2:d9:2a:85:8a:85:92:e0:5c:bd:dc:48:5a:4a:67:
86:f1:b3:4c:f1:3d:a6:6c:b7:cf:36:d3:2d:04:85:0d:6b:db:
f3:67:47:4b:f3:46:2a:97:5c:74:f4:34:68:56:6b:ed:c5:0a:
8e:75:74:6b:29:97:fb:d9:f5:75:f5:a2:17:ec:9b:e7:93:f5:
18:af:72:46:2b:ee:08:69:93:8a:8d:5d:b7:e1:58:64:e6:e9:
90:f6:17:12:4c:cd:17:b1:3f:0e:50:93:c6:66:80:b9:be:5f:
5d:26:d4:02:bf:48:2e:c0:d2:92:96:c5:85:7a:57:48:fd:0e:
ab:c7:bf:91:d0:5a:12:5d:7e:01:eb:19:65:09:3a:c2:21:77:
ac:3d:53:38:39:02:e5:3e:4a:5a:b0:f8:5f:0c:89:b2:6c:f0:
8e:1e:d7:37:e1:f4:51:69:52:0e:79:06:41:c2:f7:1f:f4:54:
32:cc:a9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:21:31 2026 by rpki-client