This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3efc0e54-d79f-3d11-8871-bc00149b77b4.roa
File: 3efc0e54-d79f-3d11-8871-bc00149b77b4.roa (raw, json)
Hash identifier: ibQW2/Hq6x/EnZau2yausHkl0pKEDUQKmusju4B1NCE=
Subject key identifier: 45:E0:E3:7C:BA:15:06:F1:EE:3D:EE:1E:88:8E:4D:F5:A5:C5:FF:77
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584C6E21A21825445C20E7F40480
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3efc0e54-d79f-3d11-8871-bc00149b77b4.roa
Signing time: Tue 06 Jan 2026 02:00:31 +0000
ROA not before: Tue 06 Jan 2026 02:00:31 +0000
ROA not after: Mon 06 Apr 2026 01:00:31 +0000
asID: 7342
IP address blocks: 2620:74:a9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:6e:21:a2:18:25:44:5c:20:e7:f4:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 6 02:00:31 2026 GMT
Not After : Apr 6 01:00:31 2026 GMT
Subject: CN=f3a7e997-c843-42cc-a2a8-2c4f7db76d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:ab:ae:c6:69:08:38:f2:8f:63:ef:55:52:
12:0b:10:e4:71:2a:63:14:08:b6:56:82:1b:b4:29:
5b:03:1d:2b:93:9a:78:b1:6d:f6:a6:b0:62:c8:e4:
35:94:4e:38:9f:da:e5:60:14:75:7d:c7:6e:ff:2c:
58:14:6d:61:3c:9e:b4:06:7d:05:36:7f:66:31:39:
a5:45:b7:30:1b:74:22:74:e0:69:ce:41:71:2c:78:
0f:f4:7b:16:cb:0d:4b:5c:d0:65:60:53:c5:55:18:
1a:46:3f:8e:b7:60:2a:4b:59:a7:1b:f2:d1:74:65:
76:2b:f0:39:37:3e:c2:65:9a:20:6d:59:32:2f:94:
c4:e4:30:82:57:28:39:e5:b5:2e:cf:1a:47:fc:d5:
42:3c:06:c9:38:aa:4e:d6:57:ce:a1:eb:15:f5:30:
3a:58:71:35:b5:e4:95:af:e0:f8:55:3f:0d:50:54:
5c:94:f9:49:f1:f2:8a:9f:eb:9c:54:3a:d6:a4:db:
8d:de:53:92:b5:88:d1:f6:4b:2e:df:62:4c:fd:f3:
eb:af:79:18:bd:0f:a8:bf:aa:0a:52:44:84:61:b7:
cd:31:9c:9e:c9:cd:c7:d2:c2:78:10:cb:52:5a:a9:
ea:6f:96:fd:e6:19:06:f2:0e:99:bb:2e:76:be:49:
a3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E0:E3:7C:BA:15:06:F1:EE:3D:EE:1E:88:8E:4D:F5:A5:C5:FF:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3efc0e54-d79f-3d11-8871-bc00149b77b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:a9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:74:32:47:c9:9a:4f:a0:95:1e:85:aa:49:55:ac:40:07:26:
d0:d8:f4:82:11:0e:2b:af:d2:64:d8:65:07:7d:ab:6f:18:25:
35:9a:d8:5a:52:5a:6a:90:1f:9d:4b:dd:89:79:18:9a:e2:49:
b4:f5:80:36:97:ac:25:3b:05:07:19:a2:87:ab:2c:12:50:12:
c0:4e:49:f9:45:75:97:24:c1:f9:28:9a:e6:9f:90:42:4f:59:
0f:96:28:9c:ca:e8:cf:6a:c3:58:93:ce:61:38:d7:2f:7b:4c:
fe:e7:4e:95:df:e9:a2:6a:68:fb:81:89:01:e5:87:32:da:62:
0e:fa:96:21:b1:cc:61:f3:57:77:fc:e1:23:5f:b0:a3:74:c1:
ea:a4:16:19:59:31:4d:dc:0b:9e:ac:a0:b4:f6:55:9b:e2:61:
29:d8:9a:6a:27:da:96:05:cd:7c:67:a3:a8:cb:67:f4:b5:2e:
52:9c:09:e0:fc:fd:81:2f:12:3f:c0:1f:67:c9:90:fa:87:fa:
04:27:32:02:e8:cb:ca:b7:fb:e1:f6:a0:bb:29:ee:55:d9:6f:
e5:b5:aa:59:70:6a:55:03:49:63:e1:0f:89:e1:d0:e5:24:96:
91:a9:c3:9a:a6:af:ec:3e:c6:f1:0a:ec:3a:a3:6f:67:f2:de:
15:bd:45:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:31:34 2026 by rpki-client