This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/dffe03ae-d1a0-30d8-b959-4a08e6f46f04.roa
File: dffe03ae-d1a0-30d8-b959-4a08e6f46f04.roa (raw, json)
Hash identifier: TbXZ+zzwsSmE9obYx2kJaP2qLgWrwn2dWeVMrfbp6hg=
Subject key identifier: 0E:2C:C7:90:94:DB:F3:9F:5E:03:A9:7F:0E:8E:DA:F8:D2:7C:6D:A2
Certificate issuer: /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial: 010D0C9F4328584CB3657AB5F552A2BDB075AD00
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/dffe03ae-d1a0-30d8-b959-4a08e6f46f04.roa
Signing time: Fri 30 Jan 2026 21:28:48 +0000
ROA not before: Fri 30 Jan 2026 21:28:48 +0000
ROA not after: Thu 30 Apr 2026 20:28:48 +0000
asID: 393559
IP address blocks: 156.70.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Feb 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b3:65:7a:b5:f5:52:a2:bd:b0:75:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
Validity
Not Before: Jan 30 21:28:48 2026 GMT
Not After : Apr 30 20:28:48 2026 GMT
Subject: CN=8dc02224-5481-4c54-84d0-cd3b3f1f1130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:33:1b:3a:2a:48:70:1f:ba:97:65:b0:eb:
78:b6:7f:fa:30:6e:ae:2c:68:b8:c4:e5:09:3c:11:
a3:ff:86:68:98:12:6d:6a:9a:1c:28:5f:df:91:36:
05:8a:4b:29:89:a2:a2:09:be:8b:15:63:6d:f7:58:
5f:70:95:de:cc:ad:db:a6:df:5f:ad:9e:d0:7a:c3:
71:e5:e1:1e:5b:24:8b:fb:75:e1:7c:5d:42:56:44:
49:ca:08:e7:5d:46:5b:e2:5f:c7:8b:39:b5:db:72:
fe:ae:dc:58:78:41:64:0f:bc:e0:9a:69:f6:76:b7:
87:ae:8b:38:8c:76:f4:8d:2d:4d:04:62:ad:c9:12:
32:e7:6e:e5:15:fb:52:ee:ea:47:98:82:96:69:fa:
ea:aa:de:bc:42:67:2d:a9:dc:7f:c0:a4:3b:dc:bf:
4e:95:ce:03:1d:93:5f:2d:b0:6c:04:c8:7a:b5:59:
24:63:db:91:6c:bd:16:0e:32:33:ab:af:89:80:7c:
5e:88:91:16:70:c2:43:49:0d:42:45:1c:8c:4b:c3:
1d:e3:40:b5:66:a9:29:43:b7:01:1b:9e:59:02:74:
45:0d:68:a8:9c:56:6c:99:12:36:26:07:84:1d:ed:
d3:fd:ee:8b:1c:40:4e:05:ee:0e:8a:28:7a:c5:ac:
28:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2C:C7:90:94:DB:F3:9F:5E:03:A9:7F:0E:8E:DA:F8:D2:7C:6D:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/dffe03ae-d1a0-30d8-b959-4a08e6f46f04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
X509v3 Authority Key Identifier:
keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
sbgp-ipAddrBlock: critical
IPv4:
156.70.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:c0:72:9f:d2:2e:e3:95:e3:2b:6b:0c:dd:8b:ad:ac:84:7c:
b3:6b:e5:2b:c6:b4:59:89:91:ac:3f:8c:12:0b:3d:97:1f:f2:
76:91:c7:83:7f:d3:5a:32:e5:66:a5:d6:2d:70:84:98:49:dc:
44:2f:93:60:74:d1:9a:e1:ae:00:1c:7f:14:f8:0d:ff:66:ef:
07:ee:8d:ea:eb:3a:1f:15:a3:b2:14:a0:47:27:a1:b3:3e:40:
da:a8:a5:73:45:66:43:9d:db:0d:75:f9:0f:08:30:4c:7f:87:
31:7a:31:9d:0f:52:27:b5:59:31:b4:00:5d:29:4e:8e:8a:f4:
34:ef:e9:32:40:db:e1:84:d0:a0:64:a5:20:3a:33:f0:3a:f3:
01:01:d7:04:d1:58:b2:19:1f:9d:43:52:8d:ce:45:98:f6:1e:
f3:37:0c:a6:e0:38:79:fb:b3:be:23:cb:37:36:e8:55:3c:fe:
a6:84:a0:f8:ee:1c:a9:46:3c:22:4d:a7:9f:92:64:b3:2c:bc:
13:b3:e5:6c:99:92:75:b5:13:34:06:b6:42:da:38:36:13:41:
c8:15:d1:20:3d:c1:ea:5c:6d:ee:40:88:5e:35:1f:ee:da:de:
3e:75:7b:7d:38:d0:65:6e:9e:ce:50:69:23:a6:12:64:8c:09:
58:62:a3:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyzZXq19VKivbB1rQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw
YWVlMB4XDTI2MDEzMDIxMjg0OFoXDTI2MDQzMDIwMjg0OFowLzEtMCsGA1UEAxMk
OGRjMDIyMjQtNTQ4MS00YzU0LTg0ZDAtY2QzYjNmMWYxMTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09YzGzoqSHAfupdlsOt4tn/6MG6uLGi4xOUJ
PBGj/4ZomBJtapocKF/fkTYFikspiaKiCb6LFWNt91hfcJXezK3bpt9frZ7QesNx
5eEeWySL+3XhfF1CVkRJygjnXUZb4l/Hizm123L+rtxYeEFkD7zgmmn2dreHros4
jHb0jS1NBGKtyRIy527lFftS7upHmIKWafrqqt68Qmctqdx/wKQ73L9Olc4DHZNf
LbBsBMh6tVkkY9uRbL0WDjIzq6+JgHxeiJEWcMJDSQ1CRRyMS8Md40C1ZqkpQ7cB
G55ZAnRFDWionFZsmRI2JgeEHe3T/e6LHEBOBe4Oiih6xawouQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA4sx5CU2/OfXgOpfw6O2vjSfG2iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl
OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvZGZmZTAzYWUtZDFhMC0z
MGQ4LWI5NTktNGEwOGU2ZjQ2ZjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0
M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy
MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2
ZGZiMjBhZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnEZgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEHAcp/SLuOV4ytrDN2LrayEfLNr5SvGtFmJkaw/jBILPZcf8naRx4N/
01oy5Wal1i1whJhJ3EQvk2B00ZrhrgAcfxT4Df9m7wfujerrOh8Vo7IUoEcnobM+
QNqopXNFZkOd2w11+Q8IMEx/hzF6MZ0PUie1WTG0AF0pTo6K9DTv6TJA2+GE0KBk
pSA6M/A68wEB1wTRWLIZH51DUo3ORZj2HvM3DKbgOHn7s74jyzc26FU8/qaEoPju
HKlGPCJNp5+SZLMsvBOz5WyZknW1EzQGtkLaODYTQcgV0SA9wepcbe5AiF41H+7a
3j51e3040GVuns5QaSOmEmSMCVhio6k=
-----END CERTIFICATE-----
Generated at Tue Feb 3 21:08:29 2026 by rpki-client