This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86d5d6ca-d361-37c6-b3ec-62cd68a8227c.roa
File: 86d5d6ca-d361-37c6-b3ec-62cd68a8227c.roa (raw, json)
Hash identifier: gAjefdb2r3GmHRKYHRHnKVb7hrwElGoCGjoHxxdamEc=
Subject key identifier: 42:B9:02:F0:93:47:BD:1D:00:F9:26:5F:C7:A0:72:90:C3:4A:82:4C
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584BD1CB1D9D5BAB690629470B00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86d5d6ca-d361-37c6-b3ec-62cd68a8227c.roa
Signing time: Tue 11 Nov 2025 02:00:30 +0000
ROA not before: Tue 11 Nov 2025 02:00:30 +0000
ROA not after: Mon 09 Feb 2026 02:00:30 +0000
asID: 36617
IP address blocks: 2620:74:21::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d1:cb:1d:9d:5b:ab:69:06:29:47:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Nov 11 02:00:30 2025 GMT
Not After : Feb 9 02:00:30 2026 GMT
Subject: CN=c73f9bb4-3bcd-426d-9d72-8bced215fe67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ab:bc:1a:c7:81:06:17:f8:d4:ba:cf:2a:7e:
88:c7:79:23:cd:ea:29:b3:ac:1b:0c:17:4c:18:fc:
86:f6:2b:b4:bc:a1:82:e0:50:2a:c5:f6:20:d1:7b:
2e:2a:f0:27:e8:41:e3:8b:69:fe:86:df:f0:d6:af:
96:f1:59:79:b9:4b:0e:de:25:e7:23:2d:56:15:f5:
56:9a:d2:78:f9:b7:40:8f:29:0c:51:cc:74:f3:99:
5f:ea:6d:68:11:e2:8c:ff:f0:cf:a7:a6:24:91:e1:
21:ce:c1:58:bc:8e:9c:a8:bd:d4:3d:6b:81:7c:e7:
b9:77:82:96:8a:b7:f8:cd:96:69:6a:c4:18:db:41:
c0:91:99:9b:d5:d1:6a:03:5e:7c:cd:5b:5e:a0:c4:
75:32:06:29:d3:e2:1f:eb:5b:39:92:22:52:55:01:
24:84:22:13:91:bb:73:a4:38:6f:b7:45:c4:89:5b:
be:6d:0a:17:42:a4:59:ce:25:d6:0b:92:9d:4a:5a:
9a:45:24:74:fe:31:2d:f2:a0:df:5c:54:06:69:21:
1d:2c:ba:af:a7:b0:7a:36:7a:61:7a:b3:85:f4:01:
6b:93:52:56:95:ce:95:65:73:36:52:8e:cd:83:a8:
cc:29:fb:ab:23:ab:0c:75:8b:a3:44:cc:17:70:e1:
73:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B9:02:F0:93:47:BD:1D:00:F9:26:5F:C7:A0:72:90:C3:4A:82:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86d5d6ca-d361-37c6-b3ec-62cd68a8227c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:21::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:ec:6b:75:2f:1f:a3:dd:e0:9a:48:9f:3e:8f:7b:6c:f6:83:
f7:0e:6a:ac:73:a2:3e:22:cf:d8:49:3e:61:eb:21:78:b4:0f:
c2:49:ee:35:e6:fd:a8:bc:89:85:fd:da:14:1b:8e:96:94:d5:
ec:5b:a5:99:ae:fd:22:4d:52:9f:1b:96:a5:96:83:75:34:7c:
1c:d3:ea:15:95:25:1a:13:58:3f:a9:08:33:2a:6e:32:83:a5:
27:64:c3:1d:7b:94:44:58:f3:d1:a5:f0:07:cb:ec:67:ce:b6:
54:2f:bd:26:71:91:6c:a8:64:62:3e:14:54:c5:25:a2:65:57:
b8:b2:cc:39:31:e1:72:ed:35:1b:bb:f0:bb:52:ef:a7:8c:8f:
f9:c7:39:ff:aa:d9:c4:7e:db:2d:5d:88:9f:2d:c6:9c:28:6d:
f1:17:cb:89:30:a7:a3:bf:be:2a:12:51:3d:dc:40:b5:69:d5:
5a:fc:e9:5d:eb:34:9f:39:54:5d:24:4a:77:81:97:1a:3c:92:
2e:bb:15:99:9d:7a:76:3a:1d:35:4f:81:23:ce:58:ff:b6:97:
5e:3f:06:23:60:5b:cd:3c:41:d0:4e:7d:a2:24:81:74:b5:89:
32:53:7a:cc:bf:10:1f:1e:5b:77:17:de:0d:d4:fb:00:3b:aa:
e6:dd:40:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:16:26 2025 by rpki-client