This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/7e99d816-22b1-3e48-9631-581900f6f89f.roa
File: 7e99d816-22b1-3e48-9631-581900f6f89f.roa (raw, json)
Hash identifier: K5ocI2Vs3OsadqDp6Wrp7JviHfjUfmyAo4+q8HTJ9m4=
Subject key identifier: 8D:13:BE:26:4E:10:91:CA:D6:B1:1B:54:66:D1:50:55:EF:3A:EC:41
Certificate issuer: /CN=03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee
Certificate serial: 010D0C9F4328584C768156232177E1176E254480
Authority key identifier: 08:C8:1D:91:33:1A:4C:6E:FB:89:78:75:38:B0:AF:2E:2B:95:FB:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/7e99d816-22b1-3e48-9631-581900f6f89f.roa
Signing time: Fri 09 Jan 2026 02:00:31 +0000
ROA not before: Fri 09 Jan 2026 02:00:31 +0000
ROA not after: Thu 09 Apr 2026 01:00:31 +0000
asID: 32039
IP address blocks: 209.196.248.0/24 maxlen: 24
209.196.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Jan 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:76:81:56:23:21:77:e1:17:6e:25:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee
Validity
Not Before: Jan 9 02:00:31 2026 GMT
Not After : Apr 9 01:00:31 2026 GMT
Subject: CN=bd4aa5e0-80de-4b27-bae2-1b97dd97add3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:e1:4d:71:31:11:ba:17:3e:9e:1b:9b:06:
3f:cd:f5:4c:0f:07:ba:af:73:b1:c9:9b:f2:45:7c:
80:aa:95:2e:ae:28:4b:c9:18:e6:49:26:a4:00:c1:
81:9b:f3:2d:14:3d:26:d0:d6:0b:7b:53:b5:d7:92:
35:79:7c:65:9e:76:50:1b:98:bb:81:a4:27:c7:a0:
b5:04:21:4b:42:fa:ec:18:fc:71:01:65:ef:cb:3b:
71:43:e1:66:cd:27:aa:4c:46:ec:d8:11:08:28:9e:
92:53:7c:61:92:2f:d9:fe:c0:f4:3c:b3:57:1d:23:
aa:cb:12:a6:bc:63:a3:7a:47:56:b2:7b:02:26:a1:
15:22:33:28:35:6b:9e:9d:93:95:26:a0:6c:9a:3e:
dd:23:c8:9f:e1:2c:95:34:cd:c0:a5:71:6b:87:9a:
60:59:b8:08:16:cb:52:f6:70:8b:29:47:db:92:4d:
f1:bc:c6:f3:33:c3:f1:b2:96:c3:cc:ca:43:65:66:
b3:d0:f6:61:0b:28:dc:c9:4b:b6:76:ed:d7:97:66:
ea:49:37:c1:df:cc:8f:c0:a7:8c:3f:39:62:a1:db:
13:e5:be:a5:28:cd:c9:95:82:78:88:02:f2:2f:2a:
2b:e9:9c:f0:3c:5b:91:05:50:0a:0b:1c:b0:a1:f0:
e1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:13:BE:26:4E:10:91:CA:D6:B1:1B:54:66:D1:50:55:EF:3A:EC:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/7e99d816-22b1-3e48-9631-581900f6f89f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.crl
X509v3 Authority Key Identifier:
keyid:08:C8:1D:91:33:1A:4C:6E:FB:89:78:75:38:B0:AF:2E:2B:95:FB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.cer
sbgp-ipAddrBlock: critical
IPv4:
209.196.248.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:c1:04:1d:8c:d6:ac:7d:04:a5:5c:46:1c:21:2d:cb:2e:f6:
dd:10:aa:75:25:2b:e1:f2:f8:47:a0:d8:9c:ec:ca:37:31:89:
e0:9a:56:66:74:8f:11:fc:2c:d2:a3:bf:78:12:95:ab:f9:2e:
b6:3a:47:a5:94:82:12:f5:44:e3:d1:cb:a7:44:76:5e:30:fe:
3a:0e:e7:00:1c:cd:0b:4b:69:55:f0:1f:f1:40:d3:d4:01:88:
54:9f:c5:dc:f6:55:75:08:4c:4e:bf:28:08:14:64:a2:95:c4:
d5:79:c1:38:01:72:59:17:f6:93:22:8a:a8:d5:3b:e8:61:d9:
9b:cf:9a:65:f4:3b:b7:56:32:71:a5:1a:44:23:7f:25:06:55:
a4:4c:ab:a1:13:5d:f0:df:51:31:7b:62:62:e3:60:3e:01:72:
e2:99:ad:45:ad:57:5b:0e:31:d3:11:35:39:5c:6a:2f:9c:e1:
f9:9c:d2:2d:b6:06:df:c0:cd:1d:c8:b8:65:21:ed:43:85:28:
dd:2c:0e:01:cd:18:87:1f:2e:2d:0e:22:9f:0b:33:59:36:e9:
69:9c:61:c2:40:3e:89:4e:a9:0a:3c:ac:bd:f2:32:7c:95:92:
5f:fe:8f:5e:03:66:1c:b5:c4:e2:98:03:61:55:f0:51:a2:be:
95:fc:da:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 17:50:32 2026 by rpki-client