This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2422d923-49e5-33e4-9aed-5bf5006dde0a.roa
File: 2422d923-49e5-33e4-9aed-5bf5006dde0a.roa (raw, json)
Hash identifier: lx53Vg5bpauC88ZiZiEZ2gsci8DyoqHSZp4i5oFAskI=
Subject key identifier: 18:C0:52:87:D7:54:CF:1F:B7:B3:24:9B:07:27:FC:4B:F6:A7:1C:E9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584C751EFC457166376F6B9351C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2422d923-49e5-33e4-9aed-5bf5006dde0a.roa
Signing time: Thu 08 Jan 2026 14:00:39 +0000
ROA not before: Thu 08 Jan 2026 14:00:39 +0000
ROA not after: Wed 08 Apr 2026 13:00:39 +0000
asID: 33668
IP address blocks: 68.60.68.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 23 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:75:1e:fc:45:71:66:37:6f:6b:93:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 8 14:00:39 2026 GMT
Not After : Apr 8 13:00:39 2026 GMT
Subject: CN=85f5dcd9-0393-4eef-bbe2-be16fda3d9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bc:98:00:5b:5e:73:77:11:0d:fd:ed:37:0d:
37:fd:35:87:ec:b7:22:fd:90:05:9d:a5:ba:09:52:
70:30:7b:ba:3c:d3:13:47:2f:9f:82:a7:31:4d:4a:
7c:c7:cc:03:3b:58:aa:74:43:75:90:db:73:fa:dc:
fb:e1:a8:46:0b:94:5c:9c:90:a6:bf:cd:05:71:a1:
a8:73:f3:5f:d3:ff:73:7a:12:fd:df:fe:94:f3:92:
bc:9b:f8:93:bf:67:19:aa:b1:1e:cb:65:b0:01:6d:
94:e4:8c:65:30:2d:e9:8a:24:39:72:ee:38:ab:a4:
5f:ec:f6:e2:78:6a:8c:7c:be:76:79:4c:1b:ea:2d:
49:1b:2d:dc:a5:26:c8:f2:fe:e0:37:ab:f0:43:6c:
ba:e2:11:08:fe:03:82:41:2f:21:ea:2b:ca:47:94:
e2:5d:6b:00:68:ba:30:8c:8d:b5:c2:86:a5:5e:aa:
63:d8:b3:64:55:72:b8:9d:a5:ae:a7:7c:f0:34:5d:
b2:d0:0c:2e:8b:d5:99:69:65:c2:a3:82:7d:8e:f9:
dd:50:46:72:7b:6f:d4:a6:1c:66:c7:c1:38:fb:44:
d3:92:cc:d9:93:21:77:8b:b2:80:38:48:8d:6c:e9:
aa:09:b3:40:00:f6:6a:84:96:f1:44:54:ff:f7:da:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C0:52:87:D7:54:CF:1F:B7:B3:24:9B:07:27:FC:4B:F6:A7:1C:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2422d923-49e5-33e4-9aed-5bf5006dde0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.60.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:fa:0a:b3:16:f0:30:8a:47:88:52:08:ce:b7:22:70:0f:38:
e3:dc:8f:9b:9a:02:d8:66:f0:ef:98:b3:e0:67:6b:3d:94:06:
0a:dc:dc:c6:fa:c6:e9:32:64:b3:7b:59:ac:c4:0a:19:0f:8e:
5d:06:57:19:bb:49:2a:e9:20:b0:ab:c2:05:39:93:1c:03:98:
ba:c2:ca:c1:06:24:88:3f:37:03:4d:c8:80:69:bc:cb:fe:bf:
7e:49:67:68:fd:06:66:88:2e:30:59:64:e2:e7:8d:6a:e1:d3:
f3:bd:d2:6a:71:05:14:c3:58:f6:11:b7:78:78:35:75:30:6d:
42:bf:59:a7:8f:41:ac:3b:ff:4b:40:2b:02:45:d8:75:a9:6d:
0d:9c:3a:0d:f6:89:95:55:47:5f:20:e4:c5:95:91:64:2e:d2:
a5:bd:1b:2c:a6:bb:21:67:af:60:4d:51:fb:d8:ef:50:f5:23:
85:c5:10:36:26:73:15:93:4a:bc:d8:63:83:a3:9f:f3:f0:e0:
74:a1:d5:d1:b1:b6:26:ac:9c:f2:b5:e7:45:22:09:9b:7b:dd:
a5:55:01:64:2e:c8:2e:fa:1e:e0:cc:09:a8:ae:18:5c:42:ce:
7e:89:2f:b3:1c:3d:da:50:3d:2d:72:79:4a:8f:0f:be:bd:a7:
7c:59:d4:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1HvxFcWY3b2uTUcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk
ODVmNWRjZDktMDM5My00ZWVmLWJiZTItYmUxNmZkYTNkOWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37yYAFtec3cRDf3tNw03/TWH7Lci/ZAFnaW6
CVJwMHu6PNMTRy+fgqcxTUp8x8wDO1iqdEN1kNtz+tz74ahGC5RcnJCmv80FcaGo
c/Nf0/9zehL93/6U85K8m/iTv2cZqrEey2WwAW2U5IxlMC3piiQ5cu44q6Rf7Pbi
eGqMfL52eUwb6i1JGy3cpSbI8v7gN6vwQ2y64hEI/gOCQS8h6ivKR5TiXWsAaLow
jI21woalXqpj2LNkVXK4naWup3zwNF2y0Awui9WZaWXCo4J9jvndUEZye2/Uphxm
x8E4+0TTkszZkyF3i7KAOEiNbOmqCbNAAPZqhJbxRFT/99odtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBjAUofXVM8ft7Mkmwcn/Ev2pxzpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjQyMmQ5MjMtNDllNS0z
M2U0LTlhZWQtNWJmNTAwNmRkZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDxEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGb6CrMW8DCKR4hSCM63InAPOOPcj5uaAthm8O+Ys+Bnaz2UBgrc3Mb6
xukyZLN7WazEChkPjl0GVxm7SSrpILCrwgU5kxwDmLrCysEGJIg/NwNNyIBpvMv+
v35JZ2j9BmaILjBZZOLnjWrh0/O90mpxBRTDWPYRt3h4NXUwbUK/WaePQaw7/0tA
KwJF2HWpbQ2cOg32iZVVR18g5MWVkWQu0qW9GyymuyFnr2BNUfvY71D1I4XFEDYm
cxWTSrzYY4Ojn/Pw4HSh1dGxtiasnPK150UiCZt73aVVAWQuyC76HuDMCaiuGFxC
zn6JL7McPdpQPS1yeUqPD769p3xZ1Gc=
-----END CERTIFICATE-----
Generated at Tue Jan 20 21:21:21 2026 by rpki-client