This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40242586-5c6a-3e3a-bf51-9363bb879d47.roa
File: 40242586-5c6a-3e3a-bf51-9363bb879d47.roa (raw, json)
Hash identifier: miZECYtskAABAUD19Yg5DBub1KeUe/8QcqTQHAArqhM=
Subject key identifier: C6:CD:6E:1C:D8:4D:6A:09:B2:39:F0:22:38:94:7A:EB:45:0D:51:31
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584C8E3C74D1EE4B87513D769900
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40242586-5c6a-3e3a-bf51-9363bb879d47.roa
Signing time: Sat 17 Jan 2026 14:00:38 +0000
ROA not before: Sat 17 Jan 2026 14:00:38 +0000
ROA not after: Fri 17 Apr 2026 13:00:38 +0000
asID: 31898
IP address blocks: 152.67.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:8e:3c:74:d1:ee:4b:87:51:3d:76:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 17 14:00:38 2026 GMT
Not After : Apr 17 13:00:38 2026 GMT
Subject: CN=cf709041-59d2-4a9b-a908-3a43d0d80a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:50:5a:3b:64:08:54:58:05:4a:fa:ec:20:
de:01:22:40:8a:6d:df:16:a5:98:07:b4:73:f6:f8:
a8:58:18:10:97:dc:d2:77:8b:ad:1e:69:e5:b8:d0:
f0:97:79:d4:0c:57:7c:95:6a:f8:2d:46:4a:c4:52:
ff:8e:7e:ec:da:49:d5:80:c2:39:df:4b:19:04:ea:
48:6c:49:ab:13:31:bb:98:f3:f4:44:8a:bd:7d:2e:
c7:92:ce:7c:f2:5a:01:42:0b:72:74:87:9e:e8:50:
28:8a:f8:49:ff:aa:d7:56:19:9d:6f:2f:d5:b0:a1:
da:e9:67:23:9a:79:ef:61:4a:b0:15:01:f2:a7:45:
dc:39:f2:6b:6e:8a:ea:97:9e:de:1e:6a:1d:82:6b:
3e:e4:ad:c6:74:33:c9:eb:70:e8:42:f6:0f:70:0f:
9d:a2:62:81:0d:24:31:42:2a:96:6a:d8:97:e5:52:
c4:7d:46:36:65:28:66:7b:48:5e:ee:d1:cd:b8:e4:
a4:fe:fa:c0:24:dd:45:19:b4:17:39:33:60:49:9e:
c7:bd:d9:2a:f5:de:af:1b:37:fb:48:0e:1c:14:fd:
1e:71:4d:98:54:c0:52:f5:8f:0b:84:35:a7:05:9e:
e0:a8:88:22:34:bb:d7:b7:2e:1b:36:e3:76:0d:bc:
e5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CD:6E:1C:D8:4D:6A:09:B2:39:F0:22:38:94:7A:EB:45:0D:51:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40242586-5c6a-3e3a-bf51-9363bb879d47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
152.67.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:1a:69:b7:91:3b:c8:0d:54:49:3c:16:b6:54:5b:0e:5c:81:
0f:aa:08:62:4c:f5:af:b8:af:1b:92:9c:c2:5a:9d:26:d7:8c:
2b:a0:65:44:1b:3e:b9:01:0d:97:fe:44:35:51:b7:03:ac:69:
09:47:33:bd:6d:d7:d1:90:b7:e5:e6:7b:74:d1:de:ad:7e:2b:
fa:b0:2c:12:89:d3:d8:35:55:91:e5:f2:a3:17:d6:a1:c0:7e:
f9:21:44:80:f6:aa:f2:eb:75:3a:8c:a4:d4:53:e4:5e:11:14:
07:85:d4:6d:6a:18:12:d6:50:eb:61:6e:a4:4d:ef:6c:90:39:
83:48:04:92:61:d5:97:89:df:97:d4:63:f4:be:64:aa:cd:3e:
5e:13:48:02:b9:70:ad:43:7b:fc:c5:ef:7f:76:f1:ec:13:95:
44:83:30:ad:56:73:fe:b8:49:08:57:af:68:ee:83:9e:b9:a4:
6e:e6:2e:7b:ce:64:58:cf:c7:1f:03:0f:b8:2c:48:d8:9d:9c:
40:54:3d:0f:31:39:de:b3:0d:1c:2a:cd:37:ad:f1:8c:a4:c3:
5b:5e:d5:af:7d:1d:95:ea:07:c5:c2:c8:02:21:03:43:40:f9:
0d:eb:b9:da:ad:9a:f8:4f:be:1b:8c:fa:31:de:eb:3b:b6:b6:
46:f3:a2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:35:56 2026 by rpki-client