This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8aba4da5-d74e-3f32-95bd-5eada832d181.roa
File: 8aba4da5-d74e-3f32-95bd-5eada832d181.roa (raw, json)
Hash identifier: 0cCJAgDtHbRTK1m7mAKED3ExyqRh7FXPSfeR5s0yixk=
Subject key identifier: 1D:25:0C:03:B2:A3:EF:4F:8E:00:DF:2F:82:9B:68:D8:5B:81:E6:DA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584C751D5C6FF1F34332B14BCDC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8aba4da5-d74e-3f32-95bd-5eada832d181.roa
Signing time: Thu 08 Jan 2026 14:00:39 +0000
ROA not before: Thu 08 Jan 2026 14:00:39 +0000
ROA not after: Wed 08 Apr 2026 13:00:39 +0000
asID: 33668
IP address blocks: 68.58.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 23 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:75:1d:5c:6f:f1:f3:43:32:b1:4b:cd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 8 14:00:39 2026 GMT
Not After : Apr 8 13:00:39 2026 GMT
Subject: CN=51d80ab9-4b84-497e-b4c9-fa061c2df8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:be:83:bc:42:2d:a2:1c:95:c2:e5:d2:eb:
be:61:63:45:53:b3:ac:d9:f2:9b:d4:14:ce:42:31:
7e:da:ac:15:f6:c0:50:cb:a5:34:a3:a2:6f:ff:5f:
7f:41:ec:ae:ec:0e:87:0f:99:87:f1:6e:cc:51:58:
09:98:91:52:66:d5:d8:fb:d2:cb:94:17:d0:f7:b7:
4e:59:8a:8c:66:e4:fd:7e:6c:22:0b:c9:47:9d:07:
7f:89:d8:f7:88:77:cf:c8:d5:6e:1c:df:47:d2:17:
e6:0e:3d:6a:b9:53:85:0d:e6:f4:5b:6a:9a:53:e1:
78:ee:a4:49:14:2f:79:4e:56:a8:19:85:f3:9b:19:
25:97:14:6f:e3:1a:70:e9:d2:0f:d8:df:68:cd:80:
23:44:12:08:95:95:1c:3b:09:9d:3e:37:d2:0b:ff:
19:1b:73:b4:21:54:d4:3e:67:07:67:88:e2:72:b5:
3a:aa:ef:e5:bd:62:dc:e8:a1:54:08:c6:f4:cc:c0:
91:70:51:04:72:62:4a:3c:32:80:d0:97:d0:49:63:
f8:26:b0:33:e3:5a:d8:c9:bc:06:87:46:1b:87:70:
c3:08:c7:74:74:17:b9:11:41:80:82:e3:fd:fe:2d:
bd:eb:00:ea:4c:bb:2b:eb:6a:bd:3c:ca:12:33:34:
e0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:25:0C:03:B2:A3:EF:4F:8E:00:DF:2F:82:9B:68:D8:5B:81:E6:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8aba4da5-d74e-3f32-95bd-5eada832d181.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.58.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:ab:1b:50:b1:ba:66:5b:6d:15:3a:0c:33:70:93:43:38:45:
52:af:3f:06:f0:88:74:db:89:57:84:b8:fe:4c:a4:fa:48:e6:
7b:9d:79:fc:70:3c:c0:c1:50:44:7f:ea:c5:d3:f8:39:9d:70:
e6:a8:c9:39:a3:78:60:8f:ec:ae:fb:76:aa:dd:07:2b:68:54:
dd:b1:8e:92:c6:48:84:81:d2:42:f5:20:e8:a5:34:35:af:c6:
cf:f1:ba:35:4e:2b:99:d1:e2:ce:0b:06:31:8a:28:5a:4d:b8:
fd:89:c9:8d:e9:75:53:19:ea:41:b4:02:6a:45:ff:fa:c4:a3:
49:cf:1a:2a:cd:68:15:39:69:8e:48:56:b8:eb:15:e3:93:7f:
24:1b:87:52:5f:ac:0d:aa:6f:f2:9d:41:14:95:57:d4:8c:79:
e3:f7:eb:45:d2:5a:10:2c:f8:fe:be:3a:2f:25:35:b0:19:af:
56:fd:82:d3:de:a8:46:56:80:22:56:2c:04:bb:0a:dc:b5:6b:
8a:5e:b3:a6:b9:1d:33:cc:d4:7c:42:92:67:b3:ba:3d:32:01:
28:df:d7:fa:fd:82:5f:b1:52:a6:96:92:cc:03:8f:75:b3:d9:
19:af:36:40:e8:37:95:0e:b7:c0:2a:1b:fc:4e:49:48:7e:e6:
ec:2f:23:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1HVxv8fNDMrFLzcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk
NTFkODBhYjktNGI4NC00OTdlLWI0YzktZmEwNjFjMmRmOGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz++g7xCLaIclcLl0uu+YWNFU7Os2fKb1BTO
QjF+2qwV9sBQy6U0o6Jv/19/Qeyu7A6HD5mH8W7MUVgJmJFSZtXY+9LLlBfQ97dO
WYqMZuT9fmwiC8lHnQd/idj3iHfPyNVuHN9H0hfmDj1quVOFDeb0W2qaU+F47qRJ
FC95TlaoGYXzmxkllxRv4xpw6dIP2N9ozYAjRBIIlZUcOwmdPjfSC/8ZG3O0IVTU
PmcHZ4jicrU6qu/lvWLc6KFUCMb0zMCRcFEEcmJKPDKA0JfQSWP4JrAz41rYybwG
h0Ybh3DDCMd0dBe5EUGAguP9/i296wDqTLsr62q9PMoSMzTgYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB0lDAOyo+9PjgDfL4KbaNhbgebaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGFiYTRkYTUtZDc0ZS0z
ZjMyLTk1YmQtNWVhZGE4MzJkMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDr9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIGrG1CxumZbbRU6DDNwk0M4RVKvPwbwiHTbiVeEuP5MpPpI5nudefxw
PMDBUER/6sXT+DmdcOaoyTmjeGCP7K77dqrdBytoVN2xjpLGSISB0kL1IOilNDWv
xs/xujVOK5nR4s4LBjGKKFpNuP2JyY3pdVMZ6kG0AmpF//rEo0nPGirNaBU5aY5I
VrjrFeOTfyQbh1JfrA2qb/KdQRSVV9SMeeP360XSWhAs+P6+Oi8lNbAZr1b9gtPe
qEZWgCJWLAS7Cty1a4pes6a5HTPM1HxCkmezuj0yASjf1/r9gl+xUqaWkswDj3Wz
2RmvNkDoN5UOt8AqG/xOSUh+5uwvI3A=
-----END CERTIFICATE-----
Generated at Tue Jan 20 17:09:27 2026 by rpki-client