This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33c16753-9fad-30c2-845c-db1a7dc64694.roa
File: 33c16753-9fad-30c2-845c-db1a7dc64694.roa (raw, json)
Hash identifier: kf1s7XCr9zAIARyCWDJnO+SlTY5Nun975XS4kUATpCI=
Subject key identifier: 66:4C:97:65:E0:FB:09:4C:67:9D:91:2C:61:07:56:93:87:A9:CA:39
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584C42DC11B30719AC5E940B8700
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33c16753-9fad-30c2-845c-db1a7dc64694.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 396579
IP address blocks: 2620:74:2b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:dc:11:b3:07:19:ac:5e:94:0b:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=6b64886e-9de8-45f1-825b-713062870cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b2:04:36:50:22:9d:95:b1:3f:62:b0:d7:da:
ce:55:92:42:40:9e:34:89:39:e8:74:e7:5d:e3:ee:
5a:d1:ab:53:0b:0d:1c:5a:4e:cf:e1:09:f9:95:32:
73:41:a1:74:0c:83:91:93:c6:5b:96:c6:be:d6:da:
c6:b0:76:f4:06:00:ca:21:0b:e9:85:ad:72:78:48:
2d:14:52:d8:57:83:65:1b:6e:a0:43:da:d8:98:e3:
99:72:ce:ef:2d:00:7a:5a:d4:db:98:18:55:38:8b:
aa:ab:a3:3f:9f:f3:ee:71:6b:c9:ab:16:52:81:d4:
25:dc:51:ba:9a:67:6b:69:58:06:55:ef:de:97:6d:
1e:7a:ac:d6:1d:92:d2:58:65:2c:2a:be:c6:b9:d5:
68:e8:89:35:6a:b0:e6:9c:73:f4:b9:05:c9:38:51:
20:cf:8e:fc:51:44:87:1e:5a:66:af:6e:26:36:d8:
73:86:d5:c9:0c:56:56:3c:34:95:ca:f3:b6:7e:64:
bc:4c:8e:22:07:b6:bb:01:21:97:ab:7d:9f:c3:27:
88:f6:c6:1c:12:2b:f7:24:c8:25:82:c0:32:9c:04:
48:70:de:28:09:aa:c2:85:7e:46:a8:a5:2b:88:b1:
72:c7:d3:bb:d6:d1:ab:fe:0c:f6:10:26:14:07:5d:
1d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4C:97:65:E0:FB:09:4C:67:9D:91:2C:61:07:56:93:87:A9:CA:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33c16753-9fad-30c2-845c-db1a7dc64694.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:f9:6e:19:97:8c:97:09:1f:57:18:e0:4e:8f:ea:76:eb:6f:
2b:52:2d:7e:6d:5d:91:76:01:e6:d7:35:fd:7c:5d:b5:e3:35:
a9:94:aa:39:16:25:a2:99:71:ea:75:72:ba:1c:db:49:bb:28:
da:f1:6d:7f:99:6e:11:d8:59:1e:41:fe:25:0e:a8:da:59:db:
23:ee:72:bb:cb:3a:c2:5b:25:c3:20:7e:aa:21:9d:ac:bc:f2:
a9:cd:fe:a8:37:75:f6:24:94:b3:25:6f:9a:84:6e:39:26:0b:
80:eb:6e:28:6b:9b:d5:78:e7:29:8c:77:e9:40:78:38:b1:32:
3e:73:5e:88:22:b5:5a:9b:34:6b:a7:1f:19:85:71:f6:f0:9c:
af:08:d1:87:f6:6d:ba:23:79:2d:a7:61:72:61:bc:99:ef:b6:
7b:58:c8:31:ea:b7:75:b9:49:1c:94:3e:5c:4c:5e:b3:14:24:
54:34:94:a8:84:58:9e:de:8a:5b:84:fc:ff:bb:09:69:e2:56:
e0:ea:b2:cf:ac:f6:d3:08:b7:bb:19:f5:d6:b7:3c:28:fe:c8:
69:df:93:ac:33:d8:8f:58:82:99:56:4a:2f:6f:26:6a:06:42:
6b:3f:ed:08:8f:2f:3f:d5:d2:fd:46:ee:a1:62:50:64:a0:56:
af:75:73:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:36:02 2026 by rpki-client