This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40df2267-583b-3a47-bc8e-7d162fb1f407.roa
File: 40df2267-583b-3a47-bc8e-7d162fb1f407.roa (raw, json)
Hash identifier: 2wxbSjym9iUd8H4DB6V/T0K+PwDk8t2AcqTC5+o0VCc=
Subject key identifier: 6C:31:35:62:84:AC:90:06:81:F0:D4:25:7F:F7:9D:60:15:CD:55:59
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584BCD9DC96C892491A49B2B76F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40df2267-583b-3a47-bc8e-7d162fb1f407.roa
Signing time: Sun 09 Nov 2025 14:00:38 +0000
ROA not before: Sun 09 Nov 2025 14:00:38 +0000
ROA not after: Sat 07 Feb 2026 14:00:38 +0000
asID: 33287
IP address blocks: 2603:2044:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:cd:9d:c9:6c:89:24:91:a4:9b:2b:76:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Nov 9 14:00:38 2025 GMT
Not After : Feb 7 14:00:38 2026 GMT
Subject: CN=3f43aacc-9145-4317-ae62-36545fbc6bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d1:ab:40:0c:f4:61:1e:d9:83:4f:84:a0:75:
c8:d5:a7:86:fe:e9:72:69:f3:26:36:c1:0c:72:ec:
37:86:fa:3f:bd:60:4f:99:9d:b0:12:34:af:55:75:
06:78:d1:2e:cc:e9:13:35:3c:12:67:45:d8:75:fd:
41:0b:1f:eb:6d:cf:c7:80:78:bd:6d:9b:1b:ca:47:
6d:13:4f:7d:4d:9e:d0:07:fd:46:79:3d:72:f8:d6:
c2:1b:59:cf:42:16:47:01:21:df:fc:16:d3:33:99:
a2:78:1e:fc:b7:84:38:37:62:2f:0b:5f:2f:8d:60:
0a:c8:ca:f7:e6:8e:ef:f8:13:c8:7d:dc:3d:d0:7f:
3a:82:01:29:87:eb:a2:d8:99:69:ad:b3:ad:34:2c:
7d:bd:02:97:b6:bf:61:10:4b:0d:53:98:50:b6:63:
ec:2a:28:60:54:d3:d0:c5:e7:51:56:b4:53:27:14:
33:87:49:fa:94:67:41:ea:00:59:a3:5d:1f:dd:5e:
1d:55:ef:30:3e:7c:8a:79:4a:94:52:f7:b4:00:59:
d3:2d:2d:a1:2a:bb:ec:82:e3:3e:42:ee:c9:b3:8f:
e7:fd:d3:aa:c8:3b:c0:5a:bf:5c:bd:19:7a:fa:85:
d5:2f:9a:2c:78:a3:10:6d:1d:80:fc:14:c2:58:ec:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:31:35:62:84:AC:90:06:81:F0:D4:25:7F:F7:9D:60:15:CD:55:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40df2267-583b-3a47-bc8e-7d162fb1f407.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:2044:4000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:2d:13:b2:1e:57:fe:48:0a:d4:63:c1:46:1d:b8:a7:88:bf:
da:7e:72:ea:c0:18:00:21:ae:2c:be:1f:95:e0:1c:69:e0:a7:
85:58:52:db:fc:39:c3:8d:b7:e5:a0:1b:8c:6c:a6:4e:fd:e9:
cf:9b:5c:01:06:dc:f8:8d:fb:9b:db:f7:a8:fa:46:19:51:a0:
06:63:33:e3:57:86:9e:57:19:cb:cb:8e:b7:4f:49:e7:b6:b7:
d0:50:1c:a1:d1:6f:04:b2:78:48:eb:97:0d:e0:11:99:fb:21:
27:7f:25:e1:dd:ec:9c:1c:c3:6f:f7:8d:5d:af:5e:6c:b2:da:
f6:b4:43:c3:dd:d1:11:81:f9:62:5e:25:46:85:38:a6:7d:5c:
2d:22:e0:d2:f2:78:a2:82:04:83:7a:87:50:07:27:46:05:d7:
bd:6b:5a:a7:aa:4a:44:d6:40:3b:32:25:d3:91:59:5f:b5:19:
e6:47:1c:a2:e5:d3:7e:c2:78:69:56:d4:f2:a1:5d:0b:18:c3:
7d:26:be:6e:16:2e:35:69:4d:0c:27:d7:ef:c9:ec:d8:09:54:
41:ac:da:56:0e:66:07:35:07:9e:59:0f:8f:7e:77:04:6f:09:
0b:85:74:23:c3:54:ed:b3:a7:21:ba:56:d6:d3:5b:2f:9b:11:
e0:38:6b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:52:08 2025 by rpki-client