This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d6101a9b-0f8d-3d9c-986d-288d2703a562.roa
File: d6101a9b-0f8d-3d9c-986d-288d2703a562.roa (raw, json)
Hash identifier: hrLo/MaFgy0QAIZv+Cd5gh6vub2NGoKRO+Wc08sCMmo=
Subject key identifier: E5:6A:21:C3:FC:A4:1E:1C:0E:F0:48:79:3F:06:D8:62:32:69:57:44
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584C8E3C758C6A974A60712DC7C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d6101a9b-0f8d-3d9c-986d-288d2703a562.roa
Signing time: Sat 17 Jan 2026 14:00:38 +0000
ROA not before: Sat 17 Jan 2026 14:00:38 +0000
ROA not after: Fri 17 Apr 2026 13:00:38 +0000
asID: 31898
IP address blocks: 152.67.120.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:8e:3c:75:8c:6a:97:4a:60:71:2d:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 17 14:00:38 2026 GMT
Not After : Apr 17 13:00:38 2026 GMT
Subject: CN=f66021f8-1b43-4fbf-9234-c6a21365cbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1c:ea:75:81:c2:08:5d:32:a4:e4:51:2d:69:
24:32:48:38:04:f8:90:28:45:15:f5:a4:f2:09:ff:
b4:43:96:d1:06:f1:73:79:f4:95:ee:3d:9c:0a:3a:
31:bb:09:2b:62:aa:a3:7e:d8:92:03:23:35:46:93:
36:9d:6d:e9:1a:c3:6e:5f:48:ee:ec:bf:29:58:c3:
a7:ed:c4:ae:0f:2f:2d:ba:52:fa:ee:ff:b7:f4:4a:
d0:ef:1f:1e:82:0c:cb:5a:e4:ab:b9:d6:2c:1e:c0:
3b:9d:4b:02:87:1b:f6:5d:f2:12:1b:96:05:b1:4c:
85:71:3b:dc:bc:45:8b:2b:c2:53:f9:a8:13:cd:95:
fe:58:33:3d:f7:5c:07:28:3b:6b:d2:6e:07:9a:00:
02:cb:d2:52:a4:59:3b:df:8f:6d:38:ec:b3:1c:90:
1f:e0:79:e4:0a:c9:23:9b:f7:df:2e:d3:e4:bf:7b:
56:95:6e:02:da:3b:c6:4f:5c:2b:96:f1:e4:77:48:
6a:10:37:d1:6a:7a:9c:62:67:ef:be:12:9f:d2:69:
aa:f5:f5:78:30:83:ef:09:73:3f:52:76:1c:91:c5:
d6:26:3a:c8:81:27:db:1e:01:f2:06:a1:13:b8:61:
a9:d6:5d:17:b9:9c:b8:c9:16:e0:6b:23:29:fb:1f:
c2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6A:21:C3:FC:A4:1E:1C:0E:F0:48:79:3F:06:D8:62:32:69:57:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d6101a9b-0f8d-3d9c-986d-288d2703a562.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
152.67.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:a3:ac:6f:83:df:74:76:49:8b:ab:86:f2:1c:d1:54:11:6d:
0f:c3:70:df:6e:80:56:df:8d:28:b1:eb:4e:bc:84:fa:d7:29:
61:ea:b2:0b:d4:f4:18:28:df:cd:b0:c3:a8:22:89:74:4f:81:
96:4f:9b:9c:ab:aa:a7:8b:80:14:86:7a:f1:16:33:93:b6:70:
c1:60:c1:b2:c7:3e:90:21:ab:7e:f7:ef:3c:90:78:90:16:e4:
d4:5c:89:2a:a4:05:64:d6:21:d3:ab:74:49:ec:9f:21:cc:0b:
ee:ce:79:83:4f:44:8e:1a:2c:b6:4a:02:74:e1:8e:3d:a3:c2:
e3:a3:28:67:ee:c6:6a:cf:be:8e:7e:3e:d6:9b:33:c1:7d:13:
ed:c4:42:08:64:e6:ca:1d:4f:51:12:1a:10:9f:37:6f:cf:16:
1d:4f:2b:eb:2c:11:56:9a:4a:ad:70:01:b1:49:a3:0b:58:3b:
68:9d:a8:3e:ac:b5:25:ed:b3:d7:a1:d5:27:54:c7:f1:8c:8e:
5b:ee:b4:c2:5f:ef:14:96:e9:24:37:ef:2d:31:0f:31:8e:4e:
c6:08:a8:e1:08:73:fd:18:c3:e3:cd:8b:88:10:e3:1b:08:61:
07:3c:14:16:76:b6:2f:25:f3:8b:82:90:3f:44:90:ef:e4:3f:
0c:21:b5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:54:00 2026 by rpki-client