This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9caa7aa3-b255-3974-b8be-616a9cf7b8f2.roa
File: 9caa7aa3-b255-3974-b8be-616a9cf7b8f2.roa (raw, json)
Hash identifier: UmX+HXlYOj20FxvqflRI9MJuUmuO0XkkwomLI5e76Fw=
Subject key identifier: 99:2B:16:9F:96:E8:B2:B5:75:6D:E9:44:E2:76:4B:2C:EE:AC:4F:63
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584C6191DE1EDF2F60EB8E785380
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9caa7aa3-b255-3974-b8be-616a9cf7b8f2.roa
Signing time: Thu 01 Jan 2026 14:00:38 +0000
ROA not before: Thu 01 Jan 2026 14:00:38 +0000
ROA not after: Wed 01 Apr 2026 13:00:38 +0000
asID: 20115
IP address blocks: 68.189.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 21 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:61:91:de:1e:df:2f:60:eb:8e:78:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Jan 1 14:00:38 2026 GMT
Not After : Apr 1 13:00:38 2026 GMT
Subject: CN=2290be87-ad6d-4004-a5d8-c2d4380531dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ba:79:e6:9d:79:94:e2:70:92:1f:b4:dd:c9:
f9:6f:dc:76:55:7f:0f:e6:31:ab:24:af:ba:8c:c8:
83:7f:96:13:3d:7a:92:39:ed:be:8a:24:a2:b8:e2:
f5:c0:70:3d:e0:ea:ae:9e:11:b2:08:1c:4a:63:03:
f0:3f:ba:63:0f:fb:3f:29:0d:c5:81:1c:c0:f1:0a:
7b:51:f5:69:3f:e4:5a:fb:91:79:fc:42:9c:e4:3e:
56:45:c3:86:7a:a8:02:6f:49:70:36:61:20:60:d4:
f2:c7:1e:70:c9:33:04:d1:d1:65:06:91:5f:8b:b9:
6e:36:5e:d1:39:f1:e3:4e:06:9e:f8:a7:cb:15:07:
19:78:31:e1:5c:e5:b0:78:d8:38:42:0b:e3:d7:bb:
9e:19:4c:db:95:36:5f:38:07:5f:62:cb:8e:24:99:
48:68:08:d5:4b:62:f0:08:18:7f:21:e9:e4:04:05:
da:5b:d2:11:0d:e2:5f:75:9e:4f:82:6c:76:e1:be:
7a:61:60:0d:9a:72:d9:32:7e:83:c6:97:f1:bd:87:
23:37:61:14:bd:d9:b0:ff:c2:1e:b4:b0:f1:29:16:
1f:76:ac:02:52:cb:83:7f:83:17:12:0e:fd:a1:56:
e9:22:6b:fc:9b:ec:ab:79:23:54:b2:50:54:0d:8d:
05:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2B:16:9F:96:E8:B2:B5:75:6D:E9:44:E2:76:4B:2C:EE:AC:4F:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9caa7aa3-b255-3974-b8be-616a9cf7b8f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.189.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:cf:25:ec:2f:b7:38:80:f0:77:51:50:19:ea:cb:b2:d6:12:
33:94:b1:71:f5:db:a0:99:93:ff:36:5d:2b:fc:67:3c:46:bf:
d6:a6:73:51:25:8f:a6:2f:08:0e:a9:3b:9e:92:b8:58:68:2b:
66:4c:bc:29:e0:19:e0:79:db:1b:60:d5:23:9e:c6:ba:1b:2b:
0d:52:93:a2:81:38:74:af:ab:0f:a7:6f:d1:87:69:18:0e:45:
1d:43:e0:2f:0f:25:87:53:75:d8:d2:06:a9:d4:29:45:f9:be:
8e:7f:1d:37:9f:17:f9:43:f9:38:ab:73:cc:20:12:cd:d2:31:
7e:f7:cb:66:be:c4:db:a4:7d:73:c9:29:aa:c1:e8:62:c8:f3:
83:0b:83:c1:36:75:8f:03:68:8d:8e:14:6c:0f:72:e9:a3:e1:
42:9d:58:c8:19:0a:0a:66:72:09:c6:5e:e4:95:08:9a:1b:58:
09:29:a9:f6:09:c6:a1:55:62:4f:20:dc:8d:86:a9:ac:8d:83:
86:5a:30:0b:71:01:de:c2:41:70:07:6c:be:69:af:7c:f6:10:
7d:0f:ba:aa:53:76:e5:ac:22:2e:8e:7c:65:86:70:e9:d2:dc:
77:57:99:25:03:b7:fd:c0:c7:4f:4a:56:98:a1:e1:5b:33:a1:
c3:e2:72:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 12:29:04 2026 by rpki-client