This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/edb1399c-e7aa-36a8-bd44-dfbacba808c0.roa
File: edb1399c-e7aa-36a8-bd44-dfbacba808c0.roa (raw, json)
Hash identifier: xsDdC2QAOaCZ5g5k1pn+my75ZuIdKVOZ3SS6smSWPAs=
Subject key identifier: 68:EB:3B:BB:8B:3F:56:D2:7B:F4:12:82:17:C1:91:CD:D3:31:7B:3A
Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial: 010D0C9F4328584C602BEEAA741525AD0C0E5AA0
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/edb1399c-e7aa-36a8-bd44-dfbacba808c0.roa
Signing time: Thu 01 Jan 2026 02:00:31 +0000
ROA not before: Thu 01 Jan 2026 02:00:31 +0000
ROA not after: Wed 01 Apr 2026 01:00:31 +0000
asID: 1403
IP address blocks: 107.161.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Jan 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:60:2b:ee:aa:74:15:25:ad:0c:0e:5a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Validity
Not Before: Jan 1 02:00:31 2026 GMT
Not After : Apr 1 01:00:31 2026 GMT
Subject: CN=488cdea1-691c-4dda-98e1-3d95ae72950b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f3:a5:20:e2:2a:cc:d1:cb:6e:48:a6:48:47:
5e:7e:e6:ef:64:67:37:bd:34:15:bb:90:ae:ff:9f:
25:2d:8e:b1:87:5b:4f:1d:0c:ed:7e:5d:0f:02:85:
60:46:55:cb:19:0e:08:30:e3:62:2b:94:62:65:62:
23:af:83:58:5a:b1:e2:5f:ee:b2:5c:b2:a5:a9:86:
5a:b1:c8:1b:ce:75:5f:b4:5a:7e:6a:18:40:3c:8c:
b2:34:df:d2:39:f5:0a:95:f5:9f:04:f4:43:f2:43:
86:7d:11:aa:87:25:12:f5:5e:be:58:86:88:e7:0d:
49:9a:b2:16:5e:75:b3:d0:6e:73:c0:9c:3c:3f:c3:
ca:8a:cc:55:24:93:26:6c:2c:1d:80:53:11:34:8d:
c5:76:b8:c0:9c:5a:de:c4:e7:86:6a:16:14:a0:ba:
01:77:c3:e6:49:43:4b:ab:08:44:09:fe:f4:11:5a:
62:1f:43:4a:a5:67:5b:e1:13:87:cf:6e:05:6c:44:
f7:65:70:f1:0b:6b:c9:f6:44:03:37:d8:da:16:a1:
07:04:12:e2:10:67:cd:6c:04:c1:71:84:2b:2a:5c:
44:24:98:ca:af:0f:85:84:2f:8f:db:c8:88:e7:20:
cb:28:cc:2c:e3:c4:62:62:88:08:fe:b0:54:06:92:
28:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EB:3B:BB:8B:3F:56:D2:7B:F4:12:82:17:C1:91:CD:D3:31:7B:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/edb1399c-e7aa-36a8-bd44-dfbacba808c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
X509v3 Authority Key Identifier:
keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
sbgp-ipAddrBlock: critical
IPv4:
107.161.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d0:68:5e:a1:4a:77:4c:1c:5f:bc:6a:c9:83:4c:48:b0:bf:40:
12:16:ff:08:c4:fb:38:1a:6a:a9:00:1c:19:61:fc:ce:e0:59:
6d:c9:37:14:cb:94:b3:2e:c2:3a:62:15:d3:da:f0:ec:3a:52:
b5:62:2a:83:7f:d1:eb:02:8e:c5:a3:3f:99:93:29:c8:3b:b7:
dc:e7:63:ba:8d:55:06:a4:eb:57:f4:6d:58:39:dc:05:3c:9e:
25:d1:a0:d1:3c:85:84:1e:3d:9e:27:18:87:a8:2c:ab:ac:97:
55:ef:e5:d2:8c:c4:a6:43:5a:b0:cc:8a:0d:aa:d8:c1:a5:e3:
fe:c6:8e:48:99:7b:7a:1f:34:9e:fb:3a:35:0f:c4:a9:04:db:
4c:9c:a8:2e:69:27:ba:79:f9:00:bc:4a:80:85:9b:fb:8b:91:
8d:75:32:e1:15:2d:60:85:80:4d:ab:26:55:6c:99:fa:06:a7:
1d:3d:54:a3:7d:0d:78:bd:f1:bc:24:8a:bf:3c:34:8c:15:f1:
ea:2f:cf:58:67:62:7a:20:76:bb:ce:46:30:ae:cd:fa:07:e5:
cb:e0:90:14:7a:1c:ed:c2:e2:34:1c:d9:27:d2:87:96:e4:ed:
18:02:da:d8:c8:f9:79:07:b3:85:8b:f7:a8:79:38:0e:f2:28:
e9:02:42:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 04:56:04 2026 by rpki-client