This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5c40c786-0e1b-3874-9a87-874454033895.roa
File: 5c40c786-0e1b-3874-9a87-874454033895.roa (raw, json)
Hash identifier: 1rVIJjI3oBfpzo9236U4E4a8SZqcOMS4o8h7tco1y94=
Subject key identifier: A0:2F:8A:A8:6C:84:D4:B3:A2:CA:52:DD:EA:96:44:46:CB:EF:41:DF
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584C8E3C7314574E57B8EA60AC00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5c40c786-0e1b-3874-9a87-874454033895.roa
Signing time: Sat 17 Jan 2026 14:00:38 +0000
ROA not before: Sat 17 Jan 2026 14:00:38 +0000
ROA not after: Fri 17 Apr 2026 13:00:38 +0000
asID: 31898
IP address blocks: 158.101.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:8e:3c:73:14:57:4e:57:b8:ea:60:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 17 14:00:38 2026 GMT
Not After : Apr 17 13:00:38 2026 GMT
Subject: CN=862bccb9-c8e8-456c-bcd2-b9a06564f42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:b4:a1:64:ee:80:0d:f5:e3:63:c6:7f:45:
c5:83:20:15:89:9a:24:bb:53:58:d9:bb:c2:22:35:
58:72:9f:4f:a5:af:51:e8:10:cd:5f:b0:a8:19:b9:
7d:aa:61:ad:52:35:51:94:5d:30:5c:9c:a5:07:ce:
eb:cc:54:84:f5:d8:27:3c:c8:5a:33:7e:23:73:5d:
f7:c0:a5:6a:d8:44:ce:34:55:a6:f0:9c:b4:b4:c6:
af:e4:4d:bb:ae:58:1b:c4:90:a3:67:36:05:b7:5e:
fa:17:84:56:50:c0:20:b9:b4:71:84:ee:27:ff:41:
a2:a3:81:8a:0f:03:8b:c5:43:e2:fb:a9:63:15:4e:
af:2e:91:d1:94:83:e3:c8:ca:23:7b:73:92:c6:fe:
3f:56:e7:cf:09:8a:8d:76:b5:9d:2a:fa:9f:10:b0:
cd:0e:74:31:68:29:ca:93:89:2c:a0:97:57:a3:72:
ab:1e:1f:c7:fd:6e:df:91:7c:8f:21:00:4a:5c:36:
c0:47:b6:e4:45:81:67:ea:13:e8:67:44:46:7b:cd:
84:87:0a:5b:2d:81:a8:41:dd:5e:7c:ff:6e:87:35:
a0:4b:8a:a2:05:63:6d:be:e5:3d:07:27:15:fb:61:
23:ed:8b:50:a6:75:b7:87:de:38:3e:21:f6:58:2b:
f8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2F:8A:A8:6C:84:D4:B3:A2:CA:52:DD:EA:96:44:46:CB:EF:41:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5c40c786-0e1b-3874-9a87-874454033895.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
158.101.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:9c:9b:d4:bc:64:a4:b9:b8:3e:96:01:c4:1c:8d:c4:05:6f:
a2:d5:17:79:c2:82:0c:c4:09:8f:f7:69:cf:60:73:08:0e:bb:
6e:d7:1f:a3:83:f3:a3:4c:45:55:90:2b:8b:19:32:68:fa:0b:
1f:cf:f4:c7:3c:78:4a:82:26:8f:b2:f7:2c:7f:ca:ca:a9:53:
45:3f:60:6f:41:a5:45:b5:59:84:70:31:30:d7:aa:c5:57:d6:
7f:99:57:7b:53:47:f6:22:2f:b3:0b:b9:d7:f6:2e:9f:0c:cc:
03:9c:b5:e7:cc:77:f5:16:d0:70:73:e7:fd:a8:87:7b:4c:38:
24:19:73:ca:4a:2e:6b:39:28:86:b6:61:93:43:fa:d7:15:38:
b3:be:a7:23:86:36:c0:93:7f:1f:55:b1:97:59:33:00:c2:cb:
07:13:14:e4:59:95:36:f7:c6:0d:9b:63:6c:38:98:c9:77:cf:
b3:27:84:dc:90:3c:26:5f:53:98:cc:a1:b2:ba:30:ae:da:2e:
07:4c:08:37:39:b3:84:4a:55:a9:83:72:63:55:d6:3e:96:42:
eb:ed:ad:61:b0:23:52:63:54:1a:c8:c7:3d:35:a9:b1:0f:6d:
0e:25:66:f3:4b:1c:38:1a:63:6a:ef:97:54:57:30:8f:0a:5c:
22:31:fa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:26:18 2026 by rpki-client