This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa
File: aafbf529-4916-398b-bbf0-e5bb5123a67b.roa (raw, json)
Hash identifier: 9Zag+f9PHFDUNm1Uu/es8H30VE8/0BxxpCY+FwaKuvE=
Subject key identifier: 16:91:B9:4D:53:16:87:C3:39:C5:C5:FD:BD:85:91:05:88:30:7E:CB
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F4328584C6E2181EC8CE5F66ADBEF5100
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa
Signing time: Tue 06 Jan 2026 02:00:31 +0000
ROA not before: Tue 06 Jan 2026 02:00:31 +0000
ROA not after: Mon 06 Apr 2026 01:00:31 +0000
asID: 2734
IP address blocks: 67.212.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 29 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:6e:21:81:ec:8c:e5:f6:6a:db:ef:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Jan 6 02:00:31 2026 GMT
Not After : Apr 6 01:00:31 2026 GMT
Subject: CN=38ecb08a-bd91-40f8-9edd-8ac1ad5c5055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:26:6a:23:c3:c0:14:51:fd:56:89:46:a9:
04:96:0c:01:e3:b4:8f:e9:57:db:e3:a9:0a:fd:b6:
f4:69:49:23:18:f5:f9:9d:41:c5:36:5f:76:9b:f3:
11:7e:a6:9e:d1:d2:04:92:4c:b6:44:08:c5:01:ac:
f8:83:03:c0:25:43:8d:4b:4d:16:8c:20:48:e4:fa:
6d:49:8b:ac:83:c1:10:12:84:d6:11:b5:38:c6:d3:
7e:b5:cf:15:d9:9c:74:53:2b:76:80:46:b0:98:c6:
94:5d:06:e7:d5:df:42:b3:9e:16:66:76:1f:3e:68:
d6:48:dd:b9:1a:db:27:11:da:40:0e:d6:bf:6f:9a:
d9:a2:16:8b:2d:8a:3d:d9:c3:eb:43:5a:3e:71:08:
4f:f2:92:8b:2f:5a:c6:af:f2:48:a3:fd:44:28:d5:
63:90:93:e3:1a:37:88:97:73:7b:6d:94:69:76:be:
a0:a3:91:e4:12:01:eb:1a:6d:73:ba:31:fd:57:a7:
39:fa:42:bc:78:6c:88:44:08:6d:a9:db:a2:42:b1:
c0:b1:ee:86:ec:49:d9:ce:19:65:42:a4:ad:76:4c:
51:f3:d2:00:33:11:1b:cc:59:61:9f:0b:ee:3c:65:
31:4f:a2:9b:33:42:d4:65:1a:86:78:0d:44:0d:9d:
cf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:91:B9:4D:53:16:87:C3:39:C5:C5:FD:BD:85:91:05:88:30:7E:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv4:
67.212.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:1a:71:74:b6:f5:45:61:36:05:95:9b:eb:e4:1b:cc:d8:1b:
c2:1b:2a:bf:01:f7:75:00:b9:f2:c7:2a:20:82:6e:d6:7b:21:
76:e9:39:71:69:c5:74:2a:51:5d:7b:a8:f3:5c:6d:b6:66:34:
9c:77:81:46:dd:08:63:1e:a0:22:a5:55:40:a3:b6:14:08:c7:
e6:7c:cf:d1:44:2f:5d:25:e0:72:92:6a:f8:f9:ce:7a:84:45:
da:12:d9:84:21:fa:ff:c3:2d:46:bf:7f:33:87:41:61:db:0a:
91:71:1f:44:5a:6e:7f:13:4e:70:76:9c:c5:fd:8d:2c:e1:81:
3e:1a:bd:ee:61:9b:7e:3c:01:6f:b4:24:21:4a:28:4f:06:1c:
cf:80:97:a2:34:d7:cb:25:e3:66:55:c0:01:1e:0d:ee:27:da:
9e:5e:c5:64:54:d5:a2:a8:08:84:2c:27:3c:b4:cf:27:0d:36:
b9:f0:69:0a:1c:e6:b7:b0:e2:2d:50:b2:e4:59:e2:8b:da:a0:
67:c1:8b:3e:54:c4:2c:7f:5e:c1:5c:0e:89:3d:c7:c0:5b:32:
86:bc:75:2c:6b:2c:27:96:b3:1f:01:fd:a3:c6:5e:e6:70:33:
d7:54:2a:e0:54:98:a1:41:21:e9:ac:c1:fe:e1:8b:d9:93:96:
c4:31:2e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 07:46:36 2026 by rpki-client