This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b/bf1b0011-9218-3bd2-9f8c-eae13a1fd138.roa
File: bf1b0011-9218-3bd2-9f8c-eae13a1fd138.roa (raw, json)
Hash identifier: EgVWLGqk3c8S3BEGJLqMpPcef+IWI9B/jM5zKe6Nois=
Subject key identifier: 7C:92:FE:E8:97:A5:3C:A0:55:D1:C8:84:19:8D:7D:05:80:F6:F2:DC
Certificate issuer: /CN=896203b4-e5e8-4340-a765-a9457a0dfd1b
Certificate serial: 010D0C9F4328584C602BDD6039822474738F3480
Authority key identifier: BB:63:4C:A7:84:28:3F:91:B4:E9:38:4D:13:A9:9F:52:66:53:42:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b/bf1b0011-9218-3bd2-9f8c-eae13a1fd138.roa
Signing time: Thu 01 Jan 2026 02:00:31 +0000
ROA not before: Thu 01 Jan 2026 02:00:31 +0000
ROA not after: Wed 01 Apr 2026 01:00:31 +0000
asID: 55209
IP address blocks: 198.148.152.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b/896203b4-e5e8-4340-a765-a9457a0dfd1b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b/896203b4-e5e8-4340-a765-a9457a0dfd1b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:60:2b:dd:60:39:82:24:74:73:8f:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896203b4-e5e8-4340-a765-a9457a0dfd1b
Validity
Not Before: Jan 1 02:00:31 2026 GMT
Not After : Apr 1 01:00:31 2026 GMT
Subject: CN=ea8756e6-7b00-44ac-97e5-7bfdf1ba1b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:16:1e:7f:8c:b1:c4:9e:8e:d5:b5:18:f7:fe:
1b:bc:89:d2:0f:a9:35:97:38:e8:38:b1:ea:01:f4:
6b:cf:9a:26:64:57:3a:51:65:6a:30:e3:60:1d:ef:
d9:72:54:fe:4b:b7:c6:bd:d5:ef:2b:d6:11:73:65:
ed:2c:f9:04:f8:d9:00:6a:f1:0c:41:e4:15:65:bd:
e0:8d:ba:9e:46:54:50:c1:bf:81:cb:64:65:7a:a7:
4d:0e:17:6d:4e:99:89:0c:23:88:2d:b6:40:70:7f:
6d:11:6a:fb:c6:5e:3b:55:1a:8c:cd:c7:89:34:21:
74:fa:e3:b1:71:88:f7:ae:74:c4:74:f7:eb:10:7a:
b0:29:cd:9f:99:7e:6d:52:31:b7:60:f3:b6:61:33:
26:e3:fe:11:37:f4:5d:74:53:4f:65:e0:0f:f9:43:
7d:31:df:7f:79:2e:de:9a:ba:36:90:34:db:76:d3:
48:fa:5e:ac:fd:06:ce:b2:c8:f2:ba:84:73:81:3c:
bf:19:9d:00:bc:a0:f9:95:91:af:e4:15:d1:d0:5a:
36:c1:70:61:63:d0:c7:e1:ee:62:02:e5:92:ff:5b:
2a:8d:57:7d:50:57:9e:60:d7:5d:fa:06:4d:eb:15:
a1:9d:31:6c:ef:59:d5:22:b0:33:ff:3d:ed:2b:77:
7f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:92:FE:E8:97:A5:3C:A0:55:D1:C8:84:19:8D:7D:05:80:F6:F2:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b/bf1b0011-9218-3bd2-9f8c-eae13a1fd138.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b/896203b4-e5e8-4340-a765-a9457a0dfd1b.crl
X509v3 Authority Key Identifier:
keyid:BB:63:4C:A7:84:28:3F:91:B4:E9:38:4D:13:A9:9F:52:66:53:42:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.148.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:ce:20:b9:e9:7d:40:a7:08:c7:39:64:3b:8a:97:f4:88:9d:
fb:d2:f8:4e:c4:f2:1a:cf:c8:38:ac:0c:15:d0:3b:bc:fd:4a:
f7:df:df:2c:64:bf:68:2a:3c:28:ff:1d:4c:39:a3:17:4f:d2:
dc:86:0c:a6:9b:6c:bd:3e:a9:33:7b:9d:4f:19:d2:a3:33:0e:
3d:3f:49:d0:73:bb:85:50:b8:d0:73:5d:fe:0f:b9:ab:d5:e0:
64:1d:ee:94:95:c2:18:da:8d:87:11:54:f7:be:82:32:f2:5f:
ce:8c:3b:fb:f1:cb:9c:24:1d:00:6c:44:c5:54:e8:1b:be:ff:
3b:1e:9c:d2:a9:ee:6c:07:6c:fb:13:8a:58:91:8a:3e:35:52:
1d:1c:27:28:c3:d7:4b:6a:43:73:e8:ca:b7:92:e6:ce:ea:25:
8b:3b:89:bb:37:2e:cb:c2:96:46:65:5e:7f:9c:b7:85:32:a9:
4a:fc:22:bd:d4:33:94:9c:c4:cb:8d:47:2d:a7:9e:5e:a4:7b:
58:cc:50:28:44:76:10:c3:a7:19:b0:f0:bb:04:3c:04:60:f1:
64:dd:51:da:06:89:12:9d:ad:50:e6:34:8b:a1:dd:1e:b1:87:
74:51:b6:3e:0a:8f:9d:a1:3a:ba:e5:51:47:fe:84:a7:3f:3c:
5f:a2:18:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 04:47:17 2026 by rpki-client