This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13ff08b9-6e87-3ed6-acd3-e05dd6a22932.roa
File: 13ff08b9-6e87-3ed6-acd3-e05dd6a22932.roa (raw, json)
Hash identifier: 5Y5DsZxMCH7y1QvcK11j6Lrze6jZk3DuFRMYDwxje9M=
Subject key identifier: FD:E4:2D:1E:17:79:98:AE:F6:D6:22:59:6A:2A:0E:91:98:95:1C:53
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584C751C42CD94E07179C5F8B228
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13ff08b9-6e87-3ed6-acd3-e05dd6a22932.roa
Signing time: Thu 08 Jan 2026 14:00:39 +0000
ROA not before: Thu 08 Jan 2026 14:00:39 +0000
ROA not after: Wed 08 Apr 2026 13:00:39 +0000
asID: 33490
IP address blocks: 67.189.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 23 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:75:1c:42:cd:94:e0:71:79:c5:f8:b2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 8 14:00:39 2026 GMT
Not After : Apr 8 13:00:39 2026 GMT
Subject: CN=3887d63b-a050-42b4-83fa-07e543b9b036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:4c:8d:67:17:26:f9:c0:84:35:62:8c:4c:
9b:92:e5:49:01:e1:ac:41:bc:28:94:a8:4f:32:70:
28:e3:e8:c5:a5:a9:fb:37:c4:b7:21:f5:b8:17:52:
6a:6e:42:8c:0a:00:92:56:1a:df:a1:1f:c4:88:4b:
90:c8:88:10:ab:9e:e9:f1:85:3a:e3:ac:2d:71:05:
3c:4f:e8:48:69:b2:44:9b:5e:22:54:50:2d:22:1d:
fb:c3:37:fe:89:65:9a:d5:1a:8e:84:fe:1a:2d:9d:
40:c9:bb:24:cc:52:b1:d1:09:1e:7a:95:93:5b:65:
ba:da:9f:87:0d:9c:5b:6b:74:a4:c1:ee:f8:22:60:
e5:d1:27:15:f2:c2:16:3f:21:d6:67:52:54:a2:00:
28:3e:bb:19:63:06:46:6f:af:64:af:78:58:7d:04:
d6:1c:c1:1d:d1:bf:13:d1:09:c3:db:54:65:01:06:
a6:96:97:5f:16:c9:7a:8e:94:7d:95:bb:68:de:bd:
99:2c:dc:15:84:2c:ad:91:e4:f5:93:05:5f:50:70:
de:6b:1c:76:f0:09:f2:0c:25:ea:6c:52:6a:7f:6c:
17:7f:cb:2f:4c:a6:ef:bd:4b:f6:50:97:c6:35:e1:
3d:ea:b2:ce:ea:e6:e1:02:a3:a4:16:04:63:a0:8f:
e6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E4:2D:1E:17:79:98:AE:F6:D6:22:59:6A:2A:0E:91:98:95:1C:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13ff08b9-6e87-3ed6-acd3-e05dd6a22932.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.189.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:69:28:c1:57:32:32:05:60:71:8f:f0:50:c5:1d:13:0e:13:
90:12:23:86:0d:05:77:62:f2:54:c5:ed:8b:48:23:d9:73:2e:
e8:18:74:dc:ad:4b:a8:d0:76:cd:31:10:26:26:b7:f6:37:84:
b7:fb:e4:59:dc:b2:80:66:f4:0e:7a:54:5e:5e:34:5a:b1:44:
6e:0b:bc:03:7e:f6:71:e6:03:53:f3:3c:db:87:a2:bc:2f:c9:
71:a6:02:58:03:42:8a:2c:56:12:1d:67:90:ad:24:5e:8b:f7:
b1:82:5e:a3:91:c9:23:ee:b6:72:af:64:95:bb:89:42:e5:7c:
59:70:ea:bf:cf:ec:94:71:d4:38:67:52:a8:c0:b1:13:b9:04:
2d:c5:40:1c:59:54:ef:29:00:29:26:27:75:ab:73:41:f1:90:
bc:a0:85:0b:51:a0:43:86:1d:14:59:49:f3:dd:cb:c5:16:b5:
41:de:be:ad:e3:90:7a:08:b7:52:62:0c:7d:e3:8a:af:88:89:
75:75:04:71:ed:b8:83:c1:83:d0:0d:e3:d0:3f:b4:6f:15:6f:
e4:80:14:59:d2:b5:66:a2:ec:6c:93:db:df:f1:3f:90:26:8b:
f3:6d:d8:55:8d:fa:ef:57:4c:3c:de:b2:21:31:2f:2a:79:0b:
77:84:47:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 17:14:35 2026 by rpki-client