This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/1c4602cd-ea91-347e-ace7-4e332d0fe21c.roa
File: 1c4602cd-ea91-347e-ace7-4e332d0fe21c.roa (raw, json)
Hash identifier: PRlqRqsWZ9Ia/sh4fGfEiUIHzdmmjAgfZEcxP/OKJho=
Subject key identifier: 78:F8:B1:DF:AB:73:48:D5:2D:67:DD:7C:03:AB:CD:A2:F4:BF:3A:2E
Certificate issuer: /CN=cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2
Certificate serial: 010D0C9F4328584BFBAB50027DAF0F361ED50380
Authority key identifier: 66:97:7D:A4:1F:C6:17:1B:0A:5F:EE:F7:7A:C7:DC:54:DE:B5:EE:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/1c4602cd-ea91-347e-ace7-4e332d0fe21c.roa
Signing time: Wed 26 Nov 2025 02:00:31 +0000
ROA not before: Wed 26 Nov 2025 02:00:31 +0000
ROA not after: Tue 24 Feb 2026 02:00:31 +0000
asID: 16509
IP address blocks: 2604:640:108::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:fb:ab:50:02:7d:af:0f:36:1e:d5:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2
Validity
Not Before: Nov 26 02:00:31 2025 GMT
Not After : Feb 24 02:00:31 2026 GMT
Subject: CN=941d0bf2-eb8e-4e4e-8286-21425139e9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:43:be:1e:a3:60:83:22:6e:e9:c5:98:f1:00:
3c:9c:0c:c7:b4:45:54:4f:1f:7c:83:f4:70:13:13:
65:64:c4:56:e3:b8:83:28:20:16:83:42:91:84:c6:
cd:92:03:97:67:b6:13:b4:79:8c:6e:93:d2:b5:83:
78:b7:bd:5a:f3:f3:ec:db:2a:d3:88:b7:eb:30:da:
3b:98:37:b8:5b:b4:21:8e:9e:b6:30:d5:1e:70:fd:
d5:9a:3a:a6:e0:cb:e4:16:48:67:3a:06:b9:d9:a9:
66:09:00:28:42:6d:84:c1:81:5f:21:69:7c:07:29:
ef:1e:de:bd:ad:f8:77:df:a3:6b:92:fe:bc:f1:99:
f0:5c:34:71:f9:d1:d3:98:22:48:04:2f:e9:f4:f8:
46:62:af:cb:bb:a9:a9:f5:1e:82:74:ad:13:10:47:
94:82:ac:80:57:4d:75:03:31:35:9b:e6:9e:73:59:
ed:95:22:35:03:1e:9c:28:3c:14:12:b4:7c:72:71:
7f:74:ae:85:a0:74:00:2f:55:08:7d:40:4c:90:77:
80:23:c8:36:4d:12:8b:73:33:e9:c0:2c:4a:50:74:
e3:64:3d:8b:8b:44:f8:75:b1:38:4e:93:f5:41:b9:
86:4b:11:f3:d8:89:87:69:5b:94:3a:c1:ad:07:72:
af:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F8:B1:DF:AB:73:48:D5:2D:67:DD:7C:03:AB:CD:A2:F4:BF:3A:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/1c4602cd-ea91-347e-ace7-4e332d0fe21c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.crl
X509v3 Authority Key Identifier:
keyid:66:97:7D:A4:1F:C6:17:1B:0A:5F:EE:F7:7A:C7:DC:54:DE:B5:EE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:640:108::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:82:32:a3:31:09:3b:72:2f:b4:a4:d6:f6:b7:ed:39:39:3e:
81:8b:c1:af:a9:5b:65:dd:77:13:97:2f:c8:db:ec:45:b2:71:
9f:64:e5:77:f4:d3:ea:90:27:d5:b0:e6:5a:43:e4:9c:b3:3a:
ff:a7:90:ed:61:13:b4:63:d1:30:48:7c:6d:40:b4:07:75:d0:
31:61:39:35:20:e9:c4:26:ac:0f:fe:f3:79:78:50:16:c9:c6:
07:cb:0b:9d:1f:88:b7:ca:3c:d4:c5:4c:94:fd:b4:45:e3:92:
65:63:79:00:3c:7e:b1:08:4d:86:08:60:60:61:94:55:8f:b2:
fe:dd:01:1d:85:46:79:38:d2:fc:f3:41:6c:1a:94:08:cb:c2:
66:cf:bd:2d:27:1a:bf:aa:21:2b:82:ab:c7:0e:a9:d2:56:d0:
ae:5d:ff:92:5a:2c:42:38:11:8d:a6:7d:3c:74:f8:7b:bb:b6:
a1:52:77:d6:a0:34:9a:1f:97:a4:65:c6:26:72:13:e1:ab:93:
8b:fe:94:65:a2:f0:78:ad:75:51:d3:d8:70:d9:88:ac:01:a3:
77:6e:ee:26:87:a6:d1:c6:6b:fa:a2:17:c2:dc:20:8d:49:c6:
65:f9:be:ff:ec:9f:a0:65:89:a3:dc:29:ec:c1:70:48:fb:6d:
b6:88:0b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:23:54 2025 by rpki-client