This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1007617e-6ebf-3839-9dbe-b1c5dc35fded.roa
File: 1007617e-6ebf-3839-9dbe-b1c5dc35fded.roa (raw, json)
Hash identifier: Shx7oceHaUhGf6fmSzQxFUFgJ3ACfNNSX8DUuzLPftU=
Subject key identifier: EB:F9:7A:F1:45:7D:ED:25:B0:D1:09:4B:72:EF:0C:66:4F:BF:87:B9
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584C9EFC5CD06F24FE0506FF0880
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1007617e-6ebf-3839-9dbe-b1c5dc35fded.roa
Signing time: Fri 23 Jan 2026 14:00:38 +0000
ROA not before: Fri 23 Jan 2026 14:00:38 +0000
ROA not after: Thu 23 Apr 2026 13:00:38 +0000
asID: 31898
IP address blocks: 68.233.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:9e:fc:5c:d0:6f:24:fe:05:06:ff:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 23 14:00:38 2026 GMT
Not After : Apr 23 13:00:38 2026 GMT
Subject: CN=20d99256-bf88-4886-aa0e-8b9c28da6291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:28:1b:f5:29:46:ec:20:1e:31:d9:6c:44:6a:
e9:1a:19:da:f5:1d:a4:de:0f:e3:b2:fc:df:71:7f:
a8:bb:50:f9:9b:cd:c3:87:a7:3e:ad:06:89:c4:ef:
58:c2:9c:bd:eb:a8:71:e2:e8:af:76:2e:be:f6:3a:
c5:ca:2c:f9:66:a8:90:82:9c:d6:53:80:27:12:f3:
b5:4d:0a:76:7b:a9:00:d1:2d:fa:68:3c:e8:3a:6f:
27:11:99:a5:4b:a9:e9:65:db:85:ae:7b:cb:63:f5:
f3:fa:cf:1b:1f:89:e9:96:03:a3:c6:83:1a:f5:6d:
40:3b:22:e7:39:7e:c1:e7:f4:ed:12:52:fe:59:1f:
00:f8:6b:b8:00:4a:7b:44:10:86:28:8c:e1:b9:96:
15:3c:4a:5a:ca:8b:61:1e:1c:8a:25:ce:a4:c3:8f:
40:26:c9:b9:91:0a:25:f4:bf:02:2c:71:70:81:61:
2b:d3:61:37:bd:a4:c6:70:82:75:c5:c1:72:ef:63:
db:72:b5:0c:c5:e6:e3:e3:f9:ba:a2:b7:de:3c:22:
d7:2f:ff:06:af:f5:94:f7:8b:8b:a2:2c:4e:cb:eb:
2b:70:59:dc:9d:87:ed:00:98:15:2b:bb:25:30:de:
63:8c:f7:7a:74:33:fc:f1:24:b9:8b:41:fc:6d:96:
27:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F9:7A:F1:45:7D:ED:25:B0:D1:09:4B:72:EF:0C:66:4F:BF:87:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1007617e-6ebf-3839-9dbe-b1c5dc35fded.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
68.233.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:eb:d9:eb:47:a9:9d:d9:12:50:3c:c7:59:ba:38:35:44:df:
94:38:e7:cb:01:c5:4f:cb:d6:67:d0:58:05:14:cf:e9:a3:2d:
4f:73:2e:ab:81:38:27:7f:40:78:50:c7:f8:d8:35:72:36:58:
d4:f7:87:2f:4d:61:29:76:06:83:d1:d7:63:9f:1f:bc:e7:b7:
9a:35:4f:28:12:83:0b:4d:4f:a4:39:97:a5:e2:7b:44:3e:30:
6a:7e:39:84:9c:b6:84:04:00:5a:8d:6b:53:42:48:eb:50:d9:
7d:53:14:ad:66:29:91:93:64:a4:7c:ea:5e:63:a8:4b:a4:6b:
d7:d8:08:c0:ab:28:d3:11:fe:ea:09:af:d5:88:ae:93:3b:87:
09:07:6b:e6:b2:14:53:2d:5a:18:af:67:8f:d4:10:a2:ed:d7:
76:ac:26:d8:b9:51:87:e1:d5:de:a9:43:07:4b:cf:8b:30:7c:
a7:62:34:3e:87:77:2a:ee:b3:33:97:58:eb:ff:0c:15:be:ec:
1c:44:62:65:85:38:ae:35:97:b2:23:8a:8e:ce:26:76:e6:d5:
4f:9c:a9:13:82:e8:c2:60:de:a4:77:30:a4:d1:88:e4:8a:f9:
86:97:f4:17:2f:9d:93:ff:26:cf:ef:eb:a5:3b:32:99:20:fd:
ea:cb:77:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:25:42 2026 by rpki-client