This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/0efc4f36-0ed2-3543-8c0f-1224f3640d65.roa
File: 0efc4f36-0ed2-3543-8c0f-1224f3640d65.roa (raw, json)
Hash identifier: BYPOVnRa1LbqNCywLkBFrI4eQ7Q1MbjX81B6lWqvd+c=
Subject key identifier: 50:90:37:04:BE:DB:97:7C:C5:5A:1C:A3:67:CC:8F:7A:73:85:7B:4F
Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial: 010D0C9F4328584C72A76726C69DF28E2EE8E260
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/0efc4f36-0ed2-3543-8c0f-1224f3640d65.roa
Signing time: Wed 07 Jan 2026 16:54:05 +0000
ROA not before: Wed 07 Jan 2026 16:54:05 +0000
ROA not after: Tue 07 Apr 2026 15:54:05 +0000
asID: 198584
IP address blocks: 72.9.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Jan 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:72:a7:67:26:c6:9d:f2:8e:2e:e8:e2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
Validity
Not Before: Jan 7 16:54:05 2026 GMT
Not After : Apr 7 15:54:05 2026 GMT
Subject: CN=89a29277-f464-4823-8e07-6de6ba2243b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e8:74:53:09:5a:32:55:cf:b5:fa:a2:84:58:
77:79:cf:6d:91:9b:1d:c2:92:1f:3b:65:80:13:02:
d5:c1:a8:36:91:bf:83:71:7f:85:3e:c4:2f:f0:d0:
12:5c:29:05:ee:ef:96:75:9c:a1:1d:b3:86:8e:f2:
e6:5b:4e:e1:61:28:09:31:9c:ca:41:0a:c7:6c:78:
b6:83:fc:5b:ad:fe:c0:33:68:c5:09:e4:e3:45:db:
22:da:f4:29:5d:16:60:d0:4f:72:3d:17:6d:b7:aa:
29:97:c1:da:37:ec:f4:28:45:93:b4:6d:fc:3e:f5:
bb:b1:ff:9d:c5:a6:9b:2e:f7:0e:15:04:a8:ca:c9:
25:0f:b9:76:cd:d6:b7:36:2c:b8:65:68:96:04:73:
87:4d:37:80:9b:b6:c8:5a:19:1b:12:79:1d:30:5e:
8e:f4:74:68:4b:65:f7:1f:4e:a2:b4:97:12:8d:90:
97:19:49:d9:55:17:8a:33:18:39:46:3f:f9:ee:ae:
50:73:da:17:1a:dc:dd:b7:9b:fa:76:5b:92:0a:68:
51:ce:e2:52:61:db:07:d7:af:60:91:d4:f5:2d:69:
96:86:69:44:6d:20:8d:1f:78:14:f1:b2:9e:28:4f:
07:90:c9:66:0e:3e:85:12:72:9a:94:1c:ed:0f:85:
23:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:90:37:04:BE:DB:97:7C:C5:5A:1C:A3:67:CC:8F:7A:73:85:7B:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/0efc4f36-0ed2-3543-8c0f-1224f3640d65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
X509v3 Authority Key Identifier:
keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
sbgp-ipAddrBlock: critical
IPv4:
72.9.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:c0:8d:39:36:24:b8:1b:13:da:1c:67:5d:6a:67:fb:df:db:
43:e8:97:9e:f3:39:02:64:92:9f:f6:ea:f7:a7:cd:ba:df:f0:
e8:7e:ac:1b:d2:13:33:4a:14:cd:3f:ec:da:e1:35:12:01:2d:
9e:68:80:7b:ea:0d:3b:4a:c0:f5:32:31:a6:3b:e2:e1:bb:88:
b4:6d:95:c8:f0:69:c6:37:0d:0a:19:32:43:00:a7:6e:54:ef:
1b:b5:99:17:8b:a6:9d:04:ed:15:f3:76:bd:4a:27:f8:a2:8f:
f9:a0:ad:ae:5d:3c:9a:36:cf:bc:97:57:9f:0c:fc:99:37:79:
37:dd:0b:08:1c:fe:df:89:95:7b:5c:23:db:7d:28:b3:a1:bd:
fa:ca:93:94:07:46:38:ec:fe:b3:29:25:d2:01:75:d6:be:b6:
3e:c5:17:49:5b:42:3d:58:d7:9e:98:49:4f:2c:10:6f:bc:c9:
a1:5a:80:50:12:ae:db:c1:05:c3:4f:6a:c5:c4:2c:fc:42:72:
7e:e2:21:a9:2b:d4:7f:bf:47:be:01:35:70:70:5a:78:6f:30:
f0:a7:52:aa:8b:3f:b6:80:5e:eb:f5:4c:f6:df:0b:6d:fd:b2:
a2:fa:40:69:81:22:e0:ad:d4:ec:59:19:01:c9:93:50:1d:52:
3f:35:f2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 22:32:54 2026 by rpki-client