This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/86d1aa82-ca30-364b-9964-c0fddb5b0af7.roa
File: 86d1aa82-ca30-364b-9964-c0fddb5b0af7.roa (raw, json)
Hash identifier: uVLHocgUKlYnF40rTjGoDV3SBesejWRF25aWSw0zO1E=
Subject key identifier: 4C:63:55:4C:C3:43:31:AA:D4:13:8E:3D:FD:74:02:FF:7A:DF:C9:D4
Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial: 010D0C9F4328584C602BE62B920BD023AC420A00
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/86d1aa82-ca30-364b-9964-c0fddb5b0af7.roa
Signing time: Thu 01 Jan 2026 02:00:31 +0000
ROA not before: Thu 01 Jan 2026 02:00:31 +0000
ROA not after: Wed 01 Apr 2026 01:00:31 +0000
asID: 1403
IP address blocks: 104.163.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Jan 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:60:2b:e6:2b:92:0b:d0:23:ac:42:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Validity
Not Before: Jan 1 02:00:31 2026 GMT
Not After : Apr 1 01:00:31 2026 GMT
Subject: CN=23d5163c-2bd8-4923-b149-1e9c9321a19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:25:bb:f7:3e:01:83:ad:44:93:cc:4f:a0:85:
dc:3b:7b:e7:a4:c6:cc:e8:34:18:23:c7:13:fd:34:
b9:52:03:40:f6:a4:7e:fc:79:5c:78:0b:10:b7:23:
7b:1a:32:7d:13:e1:20:5b:cd:80:72:97:23:ed:c6:
b2:a2:4a:78:8b:80:a7:6c:68:ec:a4:5c:28:9a:e4:
79:5c:9b:5c:da:e8:14:97:b4:b4:bb:f1:af:90:6a:
9d:c3:73:60:a2:62:cd:de:1d:02:d8:5d:57:aa:10:
f9:dd:a8:6b:1a:50:87:34:8f:dc:d9:51:cb:d2:68:
c0:b3:62:72:04:72:a7:22:8d:08:38:93:b0:a4:55:
38:ce:17:74:60:85:36:fc:36:d4:28:af:dc:96:0a:
14:4c:2b:2f:f5:36:30:cb:be:17:a8:75:03:cc:bb:
44:99:c1:06:0b:f2:48:cb:4c:67:37:1b:f5:48:dd:
a5:8b:be:5a:75:aa:cf:7c:6d:c3:b2:d3:e9:7f:0b:
95:f4:d4:0d:75:c6:13:23:a9:71:e3:44:e6:98:4d:
a7:da:40:aa:79:0a:d6:79:f4:08:f8:0d:c0:fe:5c:
f3:b5:eb:10:62:d6:c7:87:b5:55:56:c0:04:57:27:
f2:aa:86:85:70:e8:66:2e:96:81:75:a3:d8:3c:4b:
67:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:63:55:4C:C3:43:31:AA:D4:13:8E:3D:FD:74:02:FF:7A:DF:C9:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/86d1aa82-ca30-364b-9964-c0fddb5b0af7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
X509v3 Authority Key Identifier:
keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
sbgp-ipAddrBlock: critical
IPv4:
104.163.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:71:75:92:14:a1:a4:d3:4b:d6:fc:f9:f2:2c:2f:d8:7b:b2:
29:53:1f:3e:a2:a7:b9:f4:9d:bb:df:b4:c9:8a:0a:f9:f4:6e:
55:b8:7d:99:8e:75:50:10:9d:3b:d3:a1:84:6d:17:7d:7b:c0:
ab:6d:2d:31:b4:17:58:ff:4c:73:6e:fd:7d:33:a4:b5:90:cc:
b7:c1:12:44:f4:ce:64:ef:d5:77:b3:67:91:0d:3e:c4:e4:02:
d2:94:ca:bb:a8:5d:3f:7e:d8:24:9b:5d:3f:6c:3e:97:ac:28:
49:b7:90:33:a9:8d:c4:cf:f5:5a:c3:ed:ea:37:62:4d:72:6e:
f0:6e:94:8f:96:0f:22:24:f5:52:65:89:80:40:e5:c7:7c:ec:
c5:19:09:56:5d:2d:93:f7:66:6e:fa:6f:ac:61:08:38:3a:f3:
37:79:6c:45:23:63:8c:48:30:f6:51:45:17:67:c8:45:47:ae:
6d:2f:56:bc:3a:9d:1b:9c:fb:c9:7c:4d:38:f3:cf:fc:08:84:
0e:a4:19:b7:df:99:bb:a6:f4:65:3e:dc:d1:83:6e:d6:ae:e2:
fa:79:c9:7d:d1:b8:26:7a:b0:35:14:5b:97:41:b0:ab:35:d0:
ff:f4:99:1e:64:62:12:a1:53:46:fe:6b:e0:81:2f:66:89:03:
7f:c2:4e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 04:56:46 2026 by rpki-client