This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/891a56d6-529d-32d8-8783-7890a703fdec.roa
File: 891a56d6-529d-32d8-8783-7890a703fdec.roa (raw, json)
Hash identifier: AHONwf2AQLQz+kWlssU4/e2SLElEcVK7/LcDLdCOzUY=
Subject key identifier: C7:38:7A:51:FA:D2:AB:FD:49:F1:1D:6B:01:3D:22:8E:C1:72:E5:D0
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584CA32CA20BFD0AF596D22FC400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/891a56d6-529d-32d8-8783-7890a703fdec.roa
Signing time: Sun 25 Jan 2026 02:00:31 +0000
ROA not before: Sun 25 Jan 2026 02:00:31 +0000
ROA not after: Sat 25 Apr 2026 01:00:31 +0000
asID: 22394
IP address blocks: 2001:4888:803b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a3:2c:a2:0b:fd:0a:f5:96:d2:2f:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 25 02:00:31 2026 GMT
Not After : Apr 25 01:00:31 2026 GMT
Subject: CN=9b908b4f-c381-43f0-9bf9-985b1ca9a617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:b4:12:a2:59:8d:be:53:21:b6:9b:fd:a8:
85:6e:78:84:5c:36:f1:63:d0:69:d3:7b:57:99:be:
32:ee:c2:d6:e6:d8:c9:6f:65:a6:ab:01:26:69:84:
0b:a4:60:1e:40:f6:cc:00:2e:5b:43:5e:ef:2f:9b:
00:eb:ee:94:d7:c6:44:f0:f2:9b:20:88:44:82:ae:
a1:32:4d:02:d2:97:a4:82:01:20:d9:42:93:55:12:
c9:e7:88:4e:ce:70:f2:28:32:b8:27:88:2f:e9:66:
5a:36:df:18:3c:3a:2f:57:e3:2a:4e:d3:f2:2e:2b:
55:74:92:d9:e0:24:a0:41:6c:1d:01:db:4b:96:6d:
91:81:6e:06:48:7b:42:c8:f0:d0:db:2f:d6:b5:31:
26:2f:1d:58:ff:9a:61:2a:b2:98:ec:69:2f:41:53:
57:25:c1:30:5c:5f:6b:6d:e2:8d:d6:aa:c1:74:df:
22:ea:4c:d1:6d:1c:75:fc:c6:1a:de:ec:04:48:b1:
c9:c4:2a:b1:bc:fb:0e:e1:0b:0a:c1:4c:22:c1:1a:
1a:3a:bc:8a:b9:e4:18:e2:ea:cc:95:cc:48:db:27:
d8:bc:ee:f1:5f:a0:95:88:98:3e:39:b1:4d:c2:2c:
77:19:eb:53:34:23:85:1a:a9:6c:87:25:0a:f3:75:
cf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:38:7A:51:FA:D2:AB:FD:49:F1:1D:6B:01:3D:22:8E:C1:72:E5:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/891a56d6-529d-32d8-8783-7890a703fdec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4888:803b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:72:0b:23:d3:ca:49:f5:5b:a2:ca:4e:40:8e:21:81:7f:7f:
b4:71:d1:11:14:8d:f3:44:67:fb:bf:33:a3:62:42:c7:1a:7c:
d9:b0:76:a2:79:60:93:77:b6:a3:ec:1e:d4:d3:f8:5b:e0:b4:
6b:7d:ab:ad:11:fa:33:b6:78:a0:6f:c8:0a:02:aa:3d:c3:18:
b0:45:eb:8d:68:e1:d9:57:19:ae:41:65:a5:1f:ec:5b:4e:07:
c6:52:c4:dc:c8:1c:22:67:50:ea:70:30:2c:7e:68:de:d3:31:
bc:44:53:ea:65:a7:f6:16:07:fb:5f:df:37:e5:4a:1a:4e:7b:
03:5b:34:db:b6:8e:7e:8a:cf:6c:f6:0a:fa:08:b9:5c:69:98:
87:91:53:7f:15:8d:d7:90:45:39:b3:e9:8d:55:69:5b:a4:19:
8e:3b:0d:f6:40:38:4a:e8:b7:df:9d:4d:c8:02:0e:bd:f9:97:
21:8b:f2:eb:0f:bd:cd:d0:38:8e:c1:c7:ab:70:df:eb:45:1d:
e0:b0:a4:f3:f5:cf:be:b9:24:1f:5e:76:91:1a:c6:d9:fa:fe:
8f:d7:30:9f:be:6f:f2:7d:ac:ef:0c:e7:2a:e1:20:f2:51:69:
83:0a:ee:e6:57:9b:9a:c0:07:1b:2d:41:b4:8b:71:4b:71:ac:
c1:d1:6c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:00:53 2026 by rpki-client