This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/959d7c9a-3fbe-3f25-b002-d35c6d74899e.roa
File: 959d7c9a-3fbe-3f25-b002-d35c6d74899e.roa (raw, json)
Hash identifier: hYaXkRcxvBpl0y+crXTe/UKTgt96biEGocRi3m8bXXk=
Subject key identifier: 2C:D3:E2:5A:48:01:9F:2C:21:47:05:85:33:72:7C:40:72:96:62:0B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584C751D7E73354460001D95EA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/959d7c9a-3fbe-3f25-b002-d35c6d74899e.roa
Signing time: Thu 08 Jan 2026 14:00:39 +0000
ROA not before: Thu 08 Jan 2026 14:00:39 +0000
ROA not after: Wed 08 Apr 2026 13:00:39 +0000
asID: 33668
IP address blocks: 98.209.90.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 23 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:75:1d:7e:73:35:44:60:00:1d:95:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 8 14:00:39 2026 GMT
Not After : Apr 8 13:00:39 2026 GMT
Subject: CN=19fdbb7b-0e6c-485a-9549-ec6168d83135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7e:1b:d2:40:58:e1:62:d7:b4:0f:c7:96:2f:
7e:c0:a2:f4:77:b2:14:ba:4d:fd:1e:37:67:7f:2a:
cd:5f:eb:eb:7a:ab:44:f1:ae:c9:e9:f2:d3:6a:c1:
37:f1:d9:11:44:3f:dd:74:7d:59:d4:1e:86:34:90:
42:0c:f7:65:79:fa:b2:cb:a0:14:ac:43:db:80:41:
07:c3:4e:c5:5b:d7:df:f6:5b:7b:14:d8:01:0d:ce:
b1:b6:1c:17:b8:66:0f:e3:65:53:82:cb:01:d0:b8:
41:30:31:18:90:85:79:27:48:b3:d8:e0:c7:a4:10:
c6:c7:d4:29:01:0b:b4:a2:3c:dc:a1:55:ca:5a:af:
c3:03:54:4f:39:e8:26:12:e6:f0:70:e7:df:3c:73:
2a:41:26:b1:7b:06:15:03:b8:cf:de:2d:e3:3b:3a:
ab:b4:3d:28:6f:e0:dc:95:fc:b8:64:2f:cd:cd:1e:
33:89:8c:0f:3a:aa:31:fd:4a:c0:e0:11:b1:fd:11:
82:92:15:c7:5f:d1:53:89:73:2b:f7:d6:6c:33:f8:
0b:06:a7:50:b3:71:c0:f4:be:33:0a:80:86:b5:dd:
e0:4e:12:ba:ab:43:1c:23:66:e2:f5:17:fb:91:4f:
d8:b0:6d:53:3d:71:e8:9b:40:1d:2f:79:dc:4f:e3:
0f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D3:E2:5A:48:01:9F:2C:21:47:05:85:33:72:7C:40:72:96:62:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/959d7c9a-3fbe-3f25-b002-d35c6d74899e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.209.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:16:a1:93:43:6f:38:34:23:39:1e:ae:8b:78:bb:11:6f:3e:
80:52:e7:4c:4c:54:5e:18:bb:fb:5f:31:a7:1b:e0:35:7b:b8:
a9:cd:23:4c:27:e2:b5:8c:5b:62:6a:0c:30:12:88:87:df:15:
0c:fc:82:0d:af:1f:38:0b:7f:64:6e:40:7a:5b:cf:a7:f7:6c:
37:03:39:1f:e2:89:de:4f:3a:7b:29:04:59:ea:d5:d8:37:b2:
5e:4c:58:5f:88:c4:9c:2d:71:e4:c6:69:8b:5b:76:2c:0c:8e:
4d:4b:e5:3e:6c:3a:51:2b:c1:f5:ae:0b:e3:fd:33:f4:fe:7c:
3c:a1:88:b8:2f:d5:f9:2d:4b:10:31:ef:77:2a:8c:c7:74:56:
72:89:85:f6:4b:3d:3c:1e:d6:6e:d8:5b:a9:73:7f:8d:c7:89:
1c:4a:a0:61:af:f3:7a:ea:c6:5d:47:6b:85:ea:80:a0:90:ee:
c3:09:02:0c:40:f0:ef:6c:8a:ee:96:80:ab:d0:bb:cd:f7:87:
76:3a:d0:a5:2b:e9:e8:96:3f:96:77:b8:44:0b:9f:e7:73:99:
1b:15:ad:7b:0e:da:8f:fb:f8:3a:0e:71:70:56:2f:66:4f:4c:
3f:1b:a1:4e:e2:e6:0a:b6:01:05:dc:d2:34:3c:23:8a:00:f2:
69:66:a2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 23:17:44 2026 by rpki-client