This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e5d960c-34c7-3f52-80b0-8329b6185303.roa
File: 8e5d960c-34c7-3f52-80b0-8329b6185303.roa (raw, json)
Hash identifier: BGYncpDvvFvFXVBgSM/UZ3gtveC3nG5Cmp+P24Ww2O4=
Subject key identifier: 8E:64:C7:81:33:0C:4F:71:7D:D0:56:EF:A2:D1:B3:FF:26:AC:37:B2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584C751D7E20CF4F8D828AC9C980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e5d960c-34c7-3f52-80b0-8329b6185303.roa
Signing time: Thu 08 Jan 2026 14:00:39 +0000
ROA not before: Thu 08 Jan 2026 14:00:39 +0000
ROA not after: Wed 08 Apr 2026 13:00:39 +0000
asID: 33668
IP address blocks: 98.209.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 23 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:75:1d:7e:20:cf:4f:8d:82:8a:c9:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 8 14:00:39 2026 GMT
Not After : Apr 8 13:00:39 2026 GMT
Subject: CN=32514ae1-f408-41ab-af3b-dbefc2e82f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:be:d1:da:33:c9:21:9e:1b:94:84:fe:c2:
0e:1b:75:9d:e9:f2:84:e3:4f:d2:33:19:44:1d:d1:
d2:bd:e5:b7:f8:0f:2a:57:c8:ed:98:82:0f:9d:12:
93:93:fb:4d:e9:f0:ce:14:b5:0c:4f:8b:2a:a8:9b:
d0:2d:f5:4d:1c:e5:9c:0d:68:cd:de:41:ed:dc:1b:
ce:47:1a:34:54:32:09:78:97:51:94:a2:54:fc:c8:
08:5e:96:c2:6c:9e:55:3f:66:6d:19:52:a2:29:d2:
d7:eb:df:2f:26:86:e9:f5:2f:b4:12:a2:9b:1d:ac:
7b:0e:6b:7b:45:34:6b:94:fb:8b:fb:66:94:c3:0f:
bb:de:9f:4c:dd:90:b3:c8:ea:42:36:96:66:42:29:
92:aa:e0:5b:e6:c1:53:2f:a3:2e:8a:ea:4d:5d:a9:
df:d7:b9:31:2f:fe:41:f7:18:10:37:64:dd:5e:11:
a5:bb:80:cb:7b:bb:30:83:a3:fc:b9:ca:1f:4b:8e:
59:5e:a4:f6:f2:a7:d5:34:e8:1c:e5:87:d7:4f:80:
f0:79:7d:ec:7d:f0:c5:8d:34:0d:7e:06:8b:f3:c3:
f3:a7:1e:d2:b1:50:fe:2e:47:56:bd:74:e5:e8:35:
50:88:d2:35:85:0c:6b:77:ef:77:f9:8f:1e:87:de:
14:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:64:C7:81:33:0C:4F:71:7D:D0:56:EF:A2:D1:B3:FF:26:AC:37:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e5d960c-34c7-3f52-80b0-8329b6185303.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.209.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:b3:9e:36:1f:87:e9:24:79:66:73:ed:9e:ff:b5:23:72:ec:
f7:55:9a:15:75:d4:b1:89:83:e4:6a:1b:08:4f:82:45:26:da:
a7:28:40:4a:e0:f5:0e:e9:ab:fb:aa:01:73:ce:af:3a:e8:ab:
3f:6f:59:f2:44:98:7e:45:f0:2f:ca:f9:f0:3f:8a:ba:16:c5:
67:c0:e3:21:c3:67:56:8f:8d:b1:9b:b3:6e:67:03:de:9e:b5:
5e:db:b0:19:dc:0d:86:9c:ac:23:b6:5f:ad:3f:9c:7d:9d:42:
d0:35:df:e3:89:e7:3c:19:6c:b3:6f:02:5c:f3:1c:58:75:0f:
c0:91:a6:c5:e1:6c:e7:25:67:fc:9e:fc:7a:9d:76:4f:02:4e:
be:ee:5c:1a:0a:a7:39:01:19:70:9e:c2:33:84:ea:78:5e:15:
2c:54:65:0c:84:f1:ae:39:91:2f:ab:ab:fd:88:7b:9c:e0:04:
44:c7:79:a1:5d:aa:f6:06:68:e2:a2:76:8d:41:a7:75:3b:7e:
46:66:07:ed:e0:a4:61:40:de:e3:a5:ee:d6:58:f8:9d:35:69:
f4:5c:d4:53:b2:dd:83:e4:19:2c:67:21:ec:27:39:da:7d:e7:
27:36:c4:1a:08:65:18:7a:43:e2:bf:e5:69:3b:4c:5c:1b:eb:
11:45:0a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 17:20:57 2026 by rpki-client