This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ca3301ff-ced4-3870-be26-89e2cde5a2b8.roa
File: ca3301ff-ced4-3870-be26-89e2cde5a2b8.roa (raw, json)
Hash identifier: UBAStL1c6w0cNYOJQiInY40zXJsr1xqvC2+Kis+oGjg=
Subject key identifier: AB:5B:B4:C1:A8:AE:68:59:F8:55:F9:F8:7F:E8:D8:BD:AB:66:A3:94
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584CAE571B41B1AAB2D9130A7500
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ca3301ff-ced4-3870-be26-89e2cde5a2b8.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 16839
IP address blocks: 149.96.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 11 Feb 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:1b:41:b1:aa:b2:d9:13:0a:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=ea74daec-d3be-4d8f-a78b-74957ca0b4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:13:cf:ea:01:7b:58:60:79:05:11:51:13:2f:
3a:cd:1b:e3:bc:73:81:83:04:82:85:60:66:64:6e:
ec:78:06:d5:b8:dd:18:c2:b1:eb:a2:94:34:64:9e:
ae:b3:20:c4:a4:df:b3:4b:fd:62:0f:9b:33:ec:37:
a7:5c:81:66:fd:fd:76:de:60:4c:ae:37:17:78:26:
41:70:ae:7a:9c:e1:ab:5b:c4:83:cf:17:b6:96:f4:
ac:3c:e5:c1:f3:b2:28:ce:75:77:3b:4a:16:35:01:
72:11:50:8d:77:41:79:f8:85:8f:5b:c3:a7:c5:3f:
cb:ce:59:65:dd:e6:2d:58:3d:eb:8d:14:ba:a3:c6:
36:ce:48:fb:fd:54:af:5f:29:ca:17:14:98:b1:19:
89:f0:39:2f:b1:ed:6f:c2:ab:2c:59:d2:f4:e2:d0:
da:f6:f1:3f:9a:89:2e:d8:43:f4:40:59:a3:41:23:
e7:2c:0c:e1:06:09:3f:bd:f9:73:1e:b7:62:56:63:
74:2d:35:35:66:96:a3:b4:49:a6:e0:d1:f9:63:34:
3e:93:b9:1a:9b:ce:1f:be:56:7c:e7:68:72:71:6f:
19:84:32:c9:c3:35:ac:8d:92:60:28:5f:da:c5:f9:
0f:e8:ce:5c:d3:51:4b:ee:27:1e:68:45:0c:4f:90:
e8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5B:B4:C1:A8:AE:68:59:F8:55:F9:F8:7F:E8:D8:BD:AB:66:A3:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ca3301ff-ced4-3870-be26-89e2cde5a2b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:88:21:0b:a3:a2:fc:6c:02:93:a5:aa:02:b8:60:6e:e0:55:
85:4f:27:09:4b:2b:4c:95:44:1b:58:e6:a6:48:d2:e6:f9:26:
61:46:e4:6b:b9:30:4c:51:9a:f7:26:f1:44:5a:d4:07:73:86:
71:59:76:92:5d:e8:cd:49:f9:2a:4e:ea:5d:6b:5a:ac:eb:37:
a0:36:47:d3:89:bc:33:81:f2:f6:ed:b9:88:c3:96:52:e4:4e:
9e:56:7c:21:f2:d2:5b:a5:8f:2e:54:71:5a:66:7c:de:b3:e3:
55:53:22:1b:a2:56:82:d3:e9:53:cb:21:de:82:c8:e9:3e:d4:
88:72:fd:b4:9b:5e:0c:dc:37:29:22:25:67:4d:27:93:1d:4a:
ee:9c:1b:98:c5:04:99:26:c4:ac:48:0d:43:19:60:52:99:96:
0c:b1:bd:a6:3e:33:4f:c7:4f:77:b3:46:e8:3d:1d:b7:e7:cc:
ba:cb:cf:39:ed:da:0e:76:b6:e3:f5:ee:5f:83:38:c6:90:88:
7f:37:45:0f:2a:1d:c3:a0:1f:b1:e6:df:53:2d:88:71:16:4f:
82:14:62:86:2d:4f:6c:db:42:70:4a:69:4d:24:47:a1:28:06:
13:dd:70:de:7c:a9:de:94:c9:ac:75:25:56:32:00:ed:a5:15:
10:f7:5a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:30:23 2026 by rpki-client