This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4894f3df-aa63-3248-9184-fd1db1926b55.roa
File: 4894f3df-aa63-3248-9184-fd1db1926b55.roa (raw, json)
Hash identifier: +is1kIJ6OB80uOOMYgCusvSQMXElKcThRW4VIVKzaZE=
Subject key identifier: A2:EF:6E:79:5B:0A:3C:E4:19:22:C4:3F:F0:83:F9:99:98:F6:47:89
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584C7192E9774B8DB1C4F0D62580
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4894f3df-aa63-3248-9184-fd1db1926b55.roa
Signing time: Sun 04 Jan 2026 02:00:30 +0000
ROA not before: Sun 04 Jan 2026 02:00:30 +0000
ROA not after: Sat 04 Apr 2026 01:00:30 +0000
asID: 199527
IP address blocks: 209.213.204.0/23 maxlen: 24
209.213.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:71:92:e9:77:4b:8d:b1:c4:f0:d6:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Jan 4 02:00:30 2026 GMT
Not After : Apr 4 01:00:30 2026 GMT
Subject: CN=c3a8bb6d-a1a8-412c-b78f-883a0523fba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:e1:41:55:43:1d:56:48:97:c7:6e:69:25:
08:4e:fd:ae:73:eb:28:f4:30:3e:11:19:b4:08:e4:
d8:fe:97:c1:4f:22:40:80:db:49:33:14:f5:5d:66:
78:13:b6:ca:c8:6f:e0:ae:fc:c1:bf:28:dc:4f:22:
cc:be:a5:18:32:d7:a3:1d:b2:4c:a5:14:1c:28:f4:
a9:d5:a5:9d:72:8c:7e:b1:8e:18:09:6f:fb:f7:66:
54:28:af:59:35:84:94:75:c2:1a:21:5b:e3:14:ef:
7f:33:33:f8:5f:bc:a5:2a:cd:99:82:22:0e:3a:af:
52:c8:05:a8:25:2c:20:a1:41:b1:f8:ae:70:79:fa:
03:ef:c8:0d:9e:df:94:86:a7:7a:cb:5d:cc:33:3d:
7d:68:c6:d0:72:71:7b:b3:27:b8:a2:a5:ba:45:03:
9a:53:ce:6d:4b:b9:6d:35:81:78:45:b9:5e:b1:39:
cc:f6:5c:43:b5:1e:f9:72:ec:f6:a9:9a:74:fa:0b:
e0:5b:16:96:8b:9b:6e:ee:6f:55:c9:01:d0:36:4e:
9c:d4:bb:d6:dc:4e:73:67:b6:35:5b:f8:cd:c3:0f:
5f:38:77:9d:04:51:8d:cf:9f:a0:dd:2b:a0:81:f8:
51:3b:83:b0:52:2f:32:23:1a:48:33:f3:9f:00:93:
04:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EF:6E:79:5B:0A:3C:E4:19:22:C4:3F:F0:83:F9:99:98:F6:47:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4894f3df-aa63-3248-9184-fd1db1926b55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
209.213.204.0/23
209.213.212.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:0a:ca:2f:4a:15:00:5e:61:ba:27:7e:ce:38:63:b9:9a:2b:
44:ad:87:3c:b4:85:71:11:ae:d3:5d:8a:df:c6:c0:38:7b:50:
27:23:1b:b1:a1:b5:dc:36:62:3d:76:de:9f:93:70:71:77:04:
b1:82:b1:a0:d5:14:d5:2a:15:f4:d9:fb:8c:18:bc:21:0a:82:
bb:8e:e9:85:36:77:01:d5:4b:f3:20:21:61:21:e5:04:e0:76:
06:c1:3a:7c:86:8c:8c:61:fa:4f:45:44:85:c2:56:31:24:3b:
bf:45:7a:cc:29:d7:ab:06:51:70:4b:06:48:4a:81:a3:58:ad:
c1:56:95:df:1e:27:37:f3:f0:1f:0b:b4:c0:fc:aa:4d:87:e2:
a0:7b:98:c9:1e:b6:63:a8:33:4d:c2:9f:14:01:cc:14:96:dc:
56:07:54:39:d4:d7:a8:df:bb:cb:33:09:bd:95:b7:d4:6e:fe:
ec:f6:8c:fc:5c:91:54:8d:71:f5:30:42:7a:5c:77:70:55:ef:
b2:0c:83:d4:b5:29:b5:fa:b9:18:90:1a:48:25:2d:7d:82:35:
42:64:7b:9b:ea:89:50:9c:6e:b1:4e:c1:7f:5f:1f:90:c3:88:
d9:31:cd:4e:3d:12:92:6e:e3:6d:25:57:2c:60:2c:df:6d:65:
bd:e7:85:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 04:27:03 2026 by rpki-client