This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/312a9b01-284f-3e9a-b0b7-7b02008fb992.roa
File: 312a9b01-284f-3e9a-b0b7-7b02008fb992.roa (raw, json)
Hash identifier: DMtazg23RH93NGmRDRlBB14KmIG6K+Qelc3Bpm6Yl5s=
Subject key identifier: 1A:24:3C:59:E5:28:B2:F8:4C:6F:FC:2F:3D:61:33:71:AA:58:6C:C9
Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial: 010D0C9F4328584C6B568FDED8C8B87D1173B460
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/312a9b01-284f-3e9a-b0b7-7b02008fb992.roa
Signing time: Mon 05 Jan 2026 02:00:31 +0000
ROA not before: Mon 05 Jan 2026 02:00:31 +0000
ROA not after: Sun 05 Apr 2026 01:00:31 +0000
asID: 6079
IP address blocks: 68.209.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:6b:56:8f:de:d8:c8:b8:7d:11:73:b4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Validity
Not Before: Jan 5 02:00:31 2026 GMT
Not After : Apr 5 01:00:31 2026 GMT
Subject: CN=cf07287a-6e01-4574-ba7a-175a3d5d90af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3c:4f:91:e8:bf:44:97:ce:f0:3b:70:2e:f7:
22:0f:5d:44:97:c5:f5:4c:99:39:b0:6e:6f:63:84:
77:65:a7:09:e2:7a:85:45:61:62:6b:c5:c1:0a:8a:
80:89:6d:7b:4c:04:55:d1:78:25:da:ac:35:c6:23:
61:84:e5:fe:f5:f7:f9:88:e5:32:a6:38:37:a3:72:
44:7e:a2:d6:d7:43:ce:6c:c7:5a:2e:51:ea:46:1f:
89:37:6a:74:04:7b:e5:e4:e6:85:52:81:fe:dd:75:
07:e8:44:49:a4:5e:7d:6a:f4:28:25:90:28:84:f4:
55:50:42:01:39:b7:4f:22:81:d7:15:5f:b1:42:9d:
d2:e0:94:6e:38:52:67:f5:d8:50:84:a5:87:aa:c5:
a0:ff:a0:73:e0:b1:fe:b7:a2:90:9b:9e:fb:d9:cb:
6e:95:49:57:14:44:89:6e:10:e5:66:13:93:98:7e:
31:b1:7d:94:ef:dc:b3:6b:ac:f0:d7:dc:c7:e4:b4:
62:52:db:a2:07:ef:cf:7c:7a:d5:2c:a9:d1:95:a3:
a6:24:17:4a:d2:85:6d:13:b5:d8:58:a7:ea:07:a3:
58:17:98:5d:38:a8:1f:86:5a:db:c8:53:8f:75:70:
e4:94:47:4d:ad:e5:30:15:a8:00:fa:be:4e:60:b4:
b2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:24:3C:59:E5:28:B2:F8:4C:6F:FC:2F:3D:61:33:71:AA:58:6C:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/312a9b01-284f-3e9a-b0b7-7b02008fb992.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
X509v3 Authority Key Identifier:
keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
sbgp-ipAddrBlock: critical
IPv4:
68.209.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:05:73:9c:6c:b9:eb:6d:81:dc:8f:96:89:14:5e:96:27:c7:
8e:2a:f5:fc:f0:58:ac:cd:a1:e7:90:4e:aa:e8:3d:9d:a9:a0:
40:49:d1:58:96:c7:97:34:1d:cd:4b:c5:34:fd:34:1e:03:26:
fb:a3:35:96:72:dc:6f:5d:4d:10:5f:fd:12:16:44:01:aa:71:
ea:16:d9:8c:1b:20:35:11:1e:ba:13:7f:79:be:ba:48:ee:50:
e9:80:db:c5:89:f8:d6:6d:26:d8:f5:b9:25:1c:92:0e:84:05:
a0:9f:86:64:b9:ad:24:07:54:17:34:36:cc:b7:ee:02:fd:1a:
39:d8:47:50:82:0b:77:f4:40:f0:b2:68:de:58:d9:33:8c:91:
6a:3f:0c:88:aa:d6:6d:3f:7e:fd:69:5b:2a:80:26:5f:c1:18:
8d:7d:39:cf:ea:04:79:c5:2e:a3:d2:13:e7:2d:a7:2b:dd:1d:
af:44:16:80:12:41:d2:9f:38:dc:1f:82:b0:ac:fa:69:a0:a0:
4e:c2:d0:79:f3:d3:70:35:38:57:97:f4:e4:64:8e:3a:6e:7a:
b3:ee:ef:78:73:f9:46:04:bd:21:90:41:90:cd:cf:04:88:c7:
87:5a:71:b4:c4:bf:35:57:50:99:fd:19:84:97:e4:7a:46:a4:
b4:02:f6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 16:29:59 2026 by rpki-client