This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d81c4fd-71fa-3e80-a36e-352020379721.roa
File: 3d81c4fd-71fa-3e80-a36e-352020379721.roa (raw, json)
Hash identifier: AXojDLzhtPHmairb3YZXUSop6vEYmyreAhOlBuJ/QrY=
Subject key identifier: D4:1E:E9:AF:C3:8E:C6:FE:AA:22:37:03:8B:B9:AD:FA:17:E2:A2:D9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584C751CC13B35CA243116083EC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d81c4fd-71fa-3e80-a36e-352020379721.roa
Signing time: Thu 08 Jan 2026 14:00:39 +0000
ROA not before: Thu 08 Jan 2026 14:00:39 +0000
ROA not after: Wed 08 Apr 2026 13:00:39 +0000
asID: 7015
IP address blocks: 73.149.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 23 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:75:1c:c1:3b:35:ca:24:31:16:08:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 8 14:00:39 2026 GMT
Not After : Apr 8 13:00:39 2026 GMT
Subject: CN=35ff57fc-ffe5-4c16-b72a-650d88a247c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:59:5a:a5:16:6f:73:34:92:db:31:60:21:66:
b4:68:29:ad:63:ca:ff:4d:a4:45:cc:88:91:e4:2d:
d4:b2:36:88:58:d3:e9:7b:cd:46:26:a7:22:45:20:
8a:10:6e:5e:03:44:2f:18:43:8d:94:30:cd:4f:ea:
14:58:65:e5:cd:12:f8:b9:fe:36:89:f7:53:c7:88:
d3:04:1a:65:eb:67:3b:49:b2:fc:b2:a4:c4:9e:99:
6e:e2:49:50:91:9d:c1:16:53:a8:8f:a3:34:48:d0:
24:e4:70:47:02:06:91:d6:86:b2:fe:4c:01:30:ff:
c0:52:d9:53:ec:8d:fb:5f:1a:ed:3c:b1:f6:9b:c8:
d9:b4:77:31:8b:f5:73:02:62:91:47:b8:94:d8:2f:
61:e4:ee:08:1f:25:2e:d3:20:d5:00:cc:7e:6b:cb:
71:1d:7d:a4:7a:57:cc:81:18:0c:e8:63:94:d6:8a:
c3:d0:86:36:c3:26:cc:2d:b4:38:c8:3d:94:80:67:
68:9b:0e:cf:8e:31:db:f3:98:4f:49:a8:f2:17:fd:
b5:68:ca:3f:0f:65:b9:c8:87:c2:8a:77:56:a2:d2:
ad:2d:e9:2d:39:28:41:78:ff:57:2c:46:e1:56:b7:
b8:34:0d:44:a1:0f:c6:e8:c7:7f:af:63:40:8a:c1:
20:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1E:E9:AF:C3:8E:C6:FE:AA:22:37:03:8B:B9:AD:FA:17:E2:A2:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d81c4fd-71fa-3e80-a36e-352020379721.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.149.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:32:a8:73:d4:29:75:8e:4f:31:e3:d6:36:19:1d:03:16:9d:
c1:38:a3:72:2e:31:23:7b:a6:2a:2a:64:60:5f:4a:9f:8e:25:
d3:eb:cd:81:75:5f:3b:89:37:29:7c:04:c9:9e:77:08:57:73:
23:33:03:3e:a2:f5:17:bf:5d:9f:50:8b:4c:be:7d:15:2e:26:
08:05:17:b2:1b:92:8f:0b:3a:99:94:2e:a9:16:66:e7:5f:4a:
fa:2f:bd:69:08:61:dc:46:59:79:72:72:38:3c:5f:4d:d8:0f:
20:3c:8a:6b:dd:ac:ee:c6:40:5c:31:18:fc:3b:e4:c5:14:42:
36:78:3c:39:df:a4:7a:82:df:62:04:8d:39:34:3b:9d:92:f1:
6e:17:3c:78:69:86:dd:97:74:e4:17:fb:6f:de:6b:88:8b:00:
6f:89:08:01:28:88:b9:1d:71:94:06:b0:df:7e:5c:a4:9c:e1:
34:e3:e0:0e:13:5c:1e:59:53:8f:e1:9a:76:b1:03:f2:ae:9b:
2b:15:7b:85:2b:48:52:52:21:9a:2a:8f:e5:e1:bf:37:a4:de:
66:cc:6b:df:29:6e:eb:29:e1:27:ae:30:47:f6:20:29:d7:b0:
16:54:df:23:75:0f:5d:fd:c4:a1:c2:3a:b1:0f:f4:98:56:5b:
e8:db:d3:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1HME7NcokMRYIPsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk
MzVmZjU3ZmMtZmZlNS00YzE2LWI3MmEtNjUwZDg4YTI0N2MyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1lapRZvczSS2zFgIWa0aCmtY8r/TaRFzIiR
5C3UsjaIWNPpe81GJqciRSCKEG5eA0QvGEONlDDNT+oUWGXlzRL4uf42ifdTx4jT
BBpl62c7SbL8sqTEnplu4klQkZ3BFlOoj6M0SNAk5HBHAgaR1oay/kwBMP/AUtlT
7I37XxrtPLH2m8jZtHcxi/VzAmKRR7iU2C9h5O4IHyUu0yDVAMx+a8txHX2kelfM
gRgM6GOU1orD0IY2wybMLbQ4yD2UgGdomw7PjjHb85hPSajyF/21aMo/D2W5yIfC
indWotKtLektOShBeP9XLEbhVre4NA1EoQ/G6Md/r2NAisEgFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNQe6a/Djsb+qiI3A4u5rfoX4qLZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Q4MWM0ZmQtNzFmYS0z
ZTgwLWEzNmUtMzUyMDIwMzc5NzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZX8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMUyqHPUKXWOTzHj1jYZHQMWncE4o3IuMSN7pioqZGBfSp+OJdPrzYF1
XzuJNyl8BMmedwhXcyMzAz6i9Re/XZ9Qi0y+fRUuJggFF7Ibko8LOpmULqkWZudf
SvovvWkIYdxGWXlycjg8X03YDyA8imvdrO7GQFwxGPw75MUUQjZ4PDnfpHqC32IE
jTk0O52S8W4XPHhpht2XdOQX+2/ea4iLAG+JCAEoiLkdcZQGsN9+XKSc4TTj4A4T
XB5ZU4/hmnaxA/KumysVe4UrSFJSIZoqj+Xhvzek3mbMa98pbusp4SeuMEf2ICnX
sBZU3yN1D139xKHCOrEP9JhWW+jb0zw=
-----END CERTIFICATE-----
Generated at Tue Jan 20 21:57:05 2026 by rpki-client