This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43d5319b-dad4-3129-af20-515f299b677f.roa
File: 43d5319b-dad4-3129-af20-515f299b677f.roa (raw, json)
Hash identifier: cRSQ8gDSScoMGQoOKKrk4pxJnRr582KZBrgMlrGhW2k=
Subject key identifier: C7:CA:CF:D2:32:84:D6:34:D3:03:53:57:8B:1C:07:3B:C1:B2:02:99
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584C794C7B9FE7BBD68DE0B61F00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43d5319b-dad4-3129-af20-515f299b677f.roa
Signing time: Sat 10 Jan 2026 02:00:31 +0000
ROA not before: Sat 10 Jan 2026 02:00:31 +0000
ROA not after: Fri 10 Apr 2026 01:00:31 +0000
asID: 396583
IP address blocks: 2620:74:21::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:79:4c:7b:9f:e7:bb:d6:8d:e0:b6:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 10 02:00:31 2026 GMT
Not After : Apr 10 01:00:31 2026 GMT
Subject: CN=d6ec01df-cb68-46c6-9ec6-a7828615e098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:55:86:db:19:fe:59:02:0b:65:fd:34:45:e2:
a5:e3:2d:8f:e6:41:e8:04:c6:3c:d0:3d:30:70:f0:
fb:01:f1:e7:dd:fe:76:bb:f6:4a:8e:f3:12:a3:cc:
e6:8d:a8:2e:73:c4:0d:b3:a5:ae:0f:ba:9b:9d:9d:
88:98:3c:db:2a:b8:01:d1:ca:c6:68:0d:d0:df:e8:
56:7a:60:cf:05:07:4e:07:92:ad:33:ee:89:4d:ec:
03:ba:87:17:a6:ac:5d:ab:31:5f:4a:a5:d5:c3:6f:
78:9e:2e:f0:02:06:6f:27:08:11:42:44:54:b2:af:
74:55:6f:16:b9:70:c1:26:33:50:3b:92:6a:98:95:
48:01:96:dc:5c:9d:16:3f:87:2a:70:38:95:6f:32:
58:45:58:42:b0:b3:92:65:43:e1:f6:47:3d:77:be:
be:5a:65:64:de:ec:d7:65:ed:a4:a0:da:d2:cb:14:
17:e5:31:76:57:ee:0a:ec:0a:52:36:9e:ac:3d:c3:
77:c4:62:d6:3d:7f:54:59:95:ef:34:eb:4f:8e:bb:
68:2b:76:5d:8b:5d:1f:90:41:08:d2:5f:b5:30:75:
0f:97:a1:d6:23:fa:0b:2c:ce:e1:f4:16:45:c3:7d:
9c:2d:d9:e4:c8:d3:08:27:16:3c:78:9f:95:93:00:
42:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CA:CF:D2:32:84:D6:34:D3:03:53:57:8B:1C:07:3B:C1:B2:02:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43d5319b-dad4-3129-af20-515f299b677f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:21:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:35:13:e8:75:0b:fc:ee:54:5f:86:94:7b:74:9c:89:9e:d7:
47:9b:a3:d4:50:d8:cf:48:6c:89:fa:8d:6c:a6:08:55:8a:d2:
fc:12:d7:15:4e:5a:d8:20:68:a8:76:77:5c:d9:64:9a:82:84:
c0:9a:8a:63:bf:79:b6:5b:50:10:bd:70:af:cb:01:d0:e4:76:
fa:4e:3b:2b:0e:75:08:24:f3:23:09:3c:11:79:cd:64:89:e3:
f2:36:d8:ab:11:03:4e:ef:c2:2d:7d:81:19:39:e8:26:7d:34:
98:da:9f:ad:f8:02:f8:42:13:d2:ac:36:64:98:95:7f:8f:45:
d9:da:5c:77:87:bd:21:7d:c3:1c:df:16:14:fe:f0:24:dc:36:
ed:70:84:29:d5:b1:b5:e1:a7:8d:d0:d9:ea:8a:24:f6:c9:ff:
38:ae:21:09:6e:61:27:fd:2d:4a:49:41:ed:0e:05:f0:e7:c4:
a6:ba:c5:10:6d:e5:8f:7b:be:db:26:21:da:5d:a0:7a:43:9f:
90:c7:e8:97:f1:1c:f3:bf:da:a2:71:99:5f:7c:30:c4:ec:d7:
65:d5:1d:00:23:45:45:e7:3a:11:01:2a:e4:7e:27:0a:79:82:
64:3a:0b:24:86:a1:17:2d:38:40:d1:24:24:62:29:0d:d7:5c:
b0:99:1b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:13:18 2026 by rpki-client