This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/431d6262-5c18-3bbe-989a-e3bf39351b0f.roa
File: 431d6262-5c18-3bbe-989a-e3bf39351b0f.roa (raw, json)
Hash identifier: V5ygHt20Y0/6W5dM3FPCAJdD3hKvMF8Z2zSbnVFBw3M=
Subject key identifier: 2F:4A:F7:63:DE:28:E5:07:0E:74:AE:C5:3D:7B:2E:3E:6C:97:FF:AF
Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Certificate serial: 010D0C9F4328584C794C30439C8ED70DFF291480
Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/431d6262-5c18-3bbe-989a-e3bf39351b0f.roa
Signing time: Sat 10 Jan 2026 02:00:31 +0000
ROA not before: Sat 10 Jan 2026 02:00:31 +0000
ROA not after: Fri 10 Apr 2026 01:00:31 +0000
asID: 399106
IP address blocks: 136.228.0.0/19 maxlen: 32
139.60.200.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:79:4c:30:43:9c:8e:d7:0d:ff:29:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Validity
Not Before: Jan 10 02:00:31 2026 GMT
Not After : Apr 10 01:00:31 2026 GMT
Subject: CN=cfadbc06-7f43-4f86-b5e4-3a9009579a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:c0:74:a1:29:5a:80:81:c4:0b:5c:07:53:
ba:2b:84:c5:ba:b3:76:a7:87:52:ea:67:3d:f4:cf:
7a:c0:f5:6b:76:51:40:d6:56:0e:17:69:2e:3b:12:
5d:31:7d:9b:5d:cd:9f:ed:09:c7:3a:27:10:98:44:
ec:d8:36:81:01:5c:67:e5:9a:ea:33:5a:06:51:97:
4b:a7:89:84:6d:58:91:bc:e2:d6:e1:e7:bf:b0:e2:
14:cf:5e:e0:b2:eb:cd:b8:45:17:34:7d:30:57:2d:
ee:82:c0:f7:c4:3c:67:dc:15:7f:78:e0:32:f0:77:
66:f2:0b:72:e3:80:75:73:1b:31:86:36:d3:89:c5:
1d:e5:59:87:a7:d7:e2:32:f6:ab:8f:50:a0:34:60:
1c:c0:47:e9:07:19:ab:66:54:60:7d:c7:54:42:79:
c1:31:1a:01:8a:f9:42:64:d8:ed:7c:6c:53:e9:ee:
94:2c:a1:ba:54:0e:35:0a:58:4f:81:30:70:2b:9c:
f0:cb:34:75:77:67:d5:09:60:06:b7:91:e5:b2:10:
19:b3:02:7b:2d:69:a3:52:9b:92:ba:f7:75:b4:7e:
7e:eb:dd:ff:32:54:48:d9:87:60:ec:e0:25:0b:77:
d3:b2:4a:52:52:b8:f3:5c:f7:c9:3d:47:ce:c2:eb:
8e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4A:F7:63:DE:28:E5:07:0E:74:AE:C5:3D:7B:2E:3E:6C:97:FF:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/431d6262-5c18-3bbe-989a-e3bf39351b0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl
X509v3 Authority Key Identifier:
keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.0.0/19
139.60.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:54:63:05:73:1a:16:79:1e:f7:69:ba:14:79:8a:23:c2:20:
43:6a:8e:97:21:e1:1a:54:af:76:fd:10:98:58:04:e7:4f:b0:
de:59:c8:71:38:56:56:a7:47:69:b9:8c:22:42:f2:02:c5:e3:
43:2d:bd:c0:57:87:70:d1:f8:a4:35:a9:76:fd:9c:3a:1f:c2:
1c:ff:28:67:8c:38:e0:f9:ff:d6:bb:58:b8:fd:ad:70:65:24:
bc:8a:b4:cf:b9:bd:65:8a:2c:3a:f6:24:1d:63:05:34:d6:37:
fb:a4:b9:95:a8:68:f1:27:0d:9a:7e:5b:eb:25:c9:69:55:80:
05:1a:08:00:9e:41:95:1a:6d:04:84:22:4d:86:d5:0f:95:79:
2f:79:70:5c:ee:07:45:0b:8a:ea:5c:55:c6:7f:00:bf:9a:d1:
58:e9:7b:77:a7:e4:cf:d7:fc:9b:67:86:9d:1f:fe:75:0d:e4:
86:91:6a:33:99:4d:c2:f9:4f:cb:2b:1f:73:2c:79:a6:3f:59:
03:da:8b:31:6c:bd:43:27:aa:22:72:ae:ab:d0:cb:22:71:09:
12:77:69:6f:9a:3d:28:49:74:c0:6d:02:7d:38:94:da:69:6c:
bd:88:b9:91:9d:a8:14:fd:3c:56:95:a5:1c:77:1a:8e:0e:85:
dd:8a:83:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:33:55 2026 by rpki-client