This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/1a3867f1-c270-3c9c-a033-c26bb00a910e.roa
File: 1a3867f1-c270-3c9c-a033-c26bb00a910e.roa (raw, json)
Hash identifier: Kc8PYVXNPppkt8h3sSMVCFCcxUPCGni0Ka1wd5bHRgY=
Subject key identifier: 51:DF:0A:9E:0E:9B:61:96:BA:76:C3:4D:61:9E:BC:82:B4:D2:ED:DD
Certificate issuer: /CN=590468a2-be81-410c-b887-a35157322fb1
Certificate serial: 010D0C9F4328584C602BEB53930F54729D14D740
Authority key identifier: CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/1a3867f1-c270-3c9c-a033-c26bb00a910e.roa
Signing time: Thu 01 Jan 2026 02:00:31 +0000
ROA not before: Thu 01 Jan 2026 02:00:31 +0000
ROA not after: Wed 01 Apr 2026 01:00:31 +0000
asID: 393891
IP address blocks: 207.229.98.0/24 maxlen: 24
207.229.110.0/24 maxlen: 24
207.229.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:60:2b:eb:53:93:0f:54:72:9d:14:d7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590468a2-be81-410c-b887-a35157322fb1
Validity
Not Before: Jan 1 02:00:31 2026 GMT
Not After : Apr 1 01:00:31 2026 GMT
Subject: CN=e96ba716-da5c-49d7-8116-40158635d6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:30:1c:9e:21:51:d0:91:82:34:d6:a4:72:0a:
f0:96:72:a9:a9:5b:0d:4f:48:cf:5e:dd:1b:48:60:
d4:0f:8d:26:2d:7c:1a:9c:36:9b:bf:f9:22:65:54:
c9:a6:9e:d3:e6:e9:ea:d1:54:a7:04:9a:af:5e:4c:
cb:27:e5:d1:51:da:9c:70:31:42:8d:af:51:f5:4a:
1c:2a:08:65:2f:88:9b:ed:9f:75:f5:4d:c4:ed:48:
bb:11:67:b4:d4:ad:b3:9c:d5:30:d1:41:d4:ed:49:
d7:4e:5f:6b:57:51:03:b8:e2:91:8b:fb:20:49:6a:
e5:27:a5:09:57:56:bb:00:03:91:48:1d:5e:39:7a:
9f:04:1f:7a:2d:64:7f:e9:8c:22:24:45:eb:57:57:
b1:22:4b:ee:6a:e7:90:9e:8d:0d:76:9f:de:79:a9:
aa:f1:8b:28:9f:49:de:a2:60:3c:07:5a:4d:6a:ce:
32:1a:b6:a4:c7:13:26:2f:11:bc:1e:82:9f:ca:75:
d8:ae:89:e1:89:d8:bb:94:cc:70:24:0d:c6:6a:6f:
71:0b:2e:08:75:4a:b0:4d:ce:46:db:d6:3f:7c:55:
95:af:17:ba:f6:fe:80:37:ee:a2:74:db:f8:68:dd:
21:cb:c0:36:36:54:39:7b:4e:69:0c:fa:ce:c9:94:
26:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DF:0A:9E:0E:9B:61:96:BA:76:C3:4D:61:9E:BC:82:B4:D2:ED:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/1a3867f1-c270-3c9c-a033-c26bb00a910e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl
X509v3 Authority Key Identifier:
keyid:CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
sbgp-ipAddrBlock: critical
IPv4:
207.229.98.0/24
207.229.110.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:82:9c:44:7f:38:c5:e1:a9:50:d2:bf:9f:e6:d1:77:e5:21:
12:61:7f:22:99:c0:23:9c:47:98:c0:2a:b0:02:dd:ef:a3:17:
68:0b:57:9e:ce:83:a8:1d:91:12:fb:a5:91:6f:a0:5e:60:5c:
70:df:d1:de:12:64:24:8d:79:ea:7e:5a:c2:f3:5c:2c:0c:7a:
57:0c:bb:e7:ef:e7:3c:d0:79:e7:85:79:aa:51:66:f4:6f:c2:
cc:23:8b:3d:0a:4f:33:e4:af:73:7c:13:35:34:d0:f9:10:07:
e0:9c:5c:c6:96:bc:52:03:91:8c:e5:26:64:c5:0f:ed:0f:b9:
3a:0d:70:99:b4:a9:59:44:63:83:21:e8:28:c1:0f:a1:ec:68:
22:88:18:0d:c7:b8:25:e7:3b:fb:2d:6c:40:31:fa:4a:40:ca:
e8:18:69:db:cc:21:52:49:5c:f5:1b:d8:b6:6e:c5:16:48:74:
9d:90:a5:5c:12:55:c1:99:c9:c9:11:9b:16:35:d8:4a:48:49:
20:ae:ed:4e:37:ee:d1:38:8d:fd:74:bb:f5:91:3f:64:61:42:
83:c5:27:b3:c0:c3:42:93:b5:f6:9c:ac:67:41:79:a3:a5:84:
db:db:6d:f5:f9:6d:bd:8b:bd:fb:75:57:92:65:3f:01:fe:a0:
81:dd:bb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 03:59:25 2026 by rpki-client