This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba0fa38f-85f5-3fd1-bc3e-8a5763800917.roa
File: ba0fa38f-85f5-3fd1-bc3e-8a5763800917.roa (raw, json)
Hash identifier: XdxaJabAifkvnShj52VW1FudAHbEnYEBuczScAYAPM8=
Subject key identifier: 61:2D:A2:4B:26:09:E0:1D:6B:90:3D:A8:D5:D1:D0:2C:80:97:F7:69
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584C751D4FA0D0D18D06631AAC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba0fa38f-85f5-3fd1-bc3e-8a5763800917.roa
Signing time: Thu 08 Jan 2026 14:00:39 +0000
ROA not before: Thu 08 Jan 2026 14:00:39 +0000
ROA not after: Wed 08 Apr 2026 13:00:39 +0000
asID: 33668
IP address blocks: 68.48.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 23 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:75:1d:4f:a0:d0:d1:8d:06:63:1a:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 8 14:00:39 2026 GMT
Not After : Apr 8 13:00:39 2026 GMT
Subject: CN=325cde89-f8a9-4ef3-be96-8bba5b66972b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ee:c1:04:6b:34:48:2b:01:97:9d:c1:8d:bb:
98:25:d3:29:85:5a:3f:f4:12:d7:21:80:26:1c:aa:
f0:69:8a:be:57:9e:49:97:89:c8:7c:f8:6f:8b:19:
3d:ac:3d:92:d9:82:c8:e8:bb:13:15:3d:04:48:82:
02:be:95:8d:62:a9:bd:eb:49:8b:88:f7:cd:63:f7:
83:17:54:c0:d6:83:3a:e3:3b:d1:de:c3:cf:ba:ec:
2f:21:59:6e:48:7c:7c:c0:1f:ba:b5:36:89:43:2e:
2b:47:a2:e3:fe:c3:af:33:17:d8:f2:ec:66:0d:64:
04:bc:c2:5e:e4:7c:4b:ee:99:e7:be:3e:ac:60:45:
b8:4a:9d:cb:dc:83:ac:5d:99:69:46:ba:43:15:6b:
98:1e:c4:e9:72:43:5d:18:4d:e9:af:45:b9:a3:45:
27:1c:9d:73:8c:96:af:63:67:c5:1a:14:12:3d:c8:
6d:1e:3c:fc:fa:5c:0d:01:0e:1a:04:4d:ef:6c:79:
70:24:f5:68:4b:29:e7:c4:84:fe:4a:c8:62:cb:06:
36:c1:5d:39:78:6d:4e:ad:c6:5f:61:07:74:de:3b:
46:da:21:81:33:54:34:23:f8:eb:cf:4a:ef:6e:55:
0e:10:9c:20:ff:12:a2:31:52:fc:2b:60:b1:08:af:
46:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2D:A2:4B:26:09:E0:1D:6B:90:3D:A8:D5:D1:D0:2C:80:97:F7:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba0fa38f-85f5-3fd1-bc3e-8a5763800917.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.48.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:86:77:70:51:c4:6f:8e:aa:ab:f5:fd:cf:09:8d:65:46:5f:
4b:5a:00:14:f3:20:ce:f6:57:6a:a7:6d:70:fe:6c:f5:0b:5e:
e4:af:62:15:54:7c:a0:ca:80:f5:ca:ed:89:cc:55:b3:98:a4:
59:a3:14:07:08:43:5d:6f:3b:f4:cc:4d:52:ec:08:66:2a:3c:
38:45:32:7a:d9:91:07:25:3d:27:25:e4:a3:e1:c6:32:48:43:
ac:c7:17:4a:01:4c:8f:a3:65:c3:eb:55:55:fd:d5:79:dd:1a:
1b:18:1e:7d:c4:b7:8e:79:04:95:b5:d8:8e:a4:f6:4e:ad:d4:
a9:90:c2:d8:07:9e:7e:5a:43:61:0f:8f:fc:d2:de:b2:0f:5a:
e8:4a:c7:18:f6:bc:38:9e:aa:b1:6c:59:22:27:7f:af:51:08:
b9:56:45:1d:fa:08:61:f9:dd:5d:87:7c:1e:d6:e4:ce:cc:67:
35:26:ba:2d:83:33:b8:9e:81:7d:29:1e:58:39:b8:31:c0:8e:
9a:96:9e:e5:3b:b5:b3:a1:59:3c:db:ad:4b:d0:b4:dc:63:ba:
64:6e:c2:8c:00:c7:76:a3:5c:f3:eb:a8:69:c3:4b:d3:44:53:
4b:79:78:13:8f:03:97:91:7a:53:f4:bb:0a:8d:df:45:73:7c:
d5:f9:b8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 18:42:23 2026 by rpki-client