This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be198c7f-6d71-3b66-96c8-1a3e613fc7be.roa
File: be198c7f-6d71-3b66-96c8-1a3e613fc7be.roa (raw, json)
Hash identifier: aVgSUtdis4jejNfOADsSy8Cn5+CNPDyJeLWRItAxeZU=
Subject key identifier: 87:8E:68:9B:23:F3:4C:E8:DC:C5:91:18:D0:57:EE:A9:BD:D8:E0:2D
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584C50D163C7C0E696FFADBB4F80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be198c7f-6d71-3b66-96c8-1a3e613fc7be.roa
Signing time: Fri 26 Dec 2025 14:00:39 +0000
ROA not before: Fri 26 Dec 2025 14:00:39 +0000
ROA not after: Thu 26 Mar 2026 13:00:39 +0000
asID: 20172
IP address blocks: 2620:74:2b::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:50:d1:63:c7:c0:e6:96:ff:ad:bb:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 26 14:00:39 2025 GMT
Not After : Mar 26 13:00:39 2026 GMT
Subject: CN=ddb74856-ecc6-4ce1-9ecd-effd7bbd667e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:b7:15:10:1b:1d:19:75:6c:36:ff:bb:c0:
4c:04:f4:2a:61:7e:22:f6:08:b7:9c:b4:de:13:f3:
20:7e:2f:78:38:60:d3:a8:56:24:58:22:66:dd:14:
79:53:a8:bf:25:d4:7f:52:f2:e0:af:6b:9e:f9:65:
7f:34:a7:d1:9c:42:e6:fb:09:a3:00:bf:ee:76:12:
9d:3b:39:22:cc:9a:f3:63:0e:2c:e1:1e:c2:49:13:
9c:76:9c:91:b7:01:2e:95:53:c7:cc:2a:e7:2d:5d:
8b:fc:50:c6:31:32:e1:38:85:c5:ac:4c:a7:22:75:
53:8b:ea:c6:45:50:4a:40:58:fe:58:7b:35:3b:61:
57:e9:f4:60:66:b2:07:30:4f:aa:df:20:36:fc:6a:
cb:57:2f:ee:0a:da:73:8b:1c:e2:ec:09:48:f7:40:
71:9c:87:2b:e2:9a:d6:48:c7:f3:4e:d3:35:b5:4d:
2e:28:6e:2a:c9:f2:c2:d7:62:d1:16:84:59:b2:0f:
f4:47:0e:da:96:33:4d:be:c3:83:d8:b8:40:ee:4c:
ba:59:3b:0b:b2:2c:c5:a7:2f:9d:65:7f:b3:4e:23:
45:2b:52:0e:0d:28:3f:5c:f3:04:d8:a7:ba:0b:57:
2a:6a:13:0e:17:af:50:28:a1:f7:50:28:fd:50:65:
79:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8E:68:9B:23:F3:4C:E8:DC:C5:91:18:D0:57:EE:A9:BD:D8:E0:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be198c7f-6d71-3b66-96c8-1a3e613fc7be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:0c:97:5d:88:f3:28:1e:a6:1e:69:80:94:fc:fa:d0:64:9e:
b3:b6:e0:39:7c:32:81:16:d8:4a:64:3d:61:5b:f6:96:32:6f:
c3:1f:5b:84:ea:ba:be:c2:16:da:56:2b:ea:ac:99:b2:37:14:
73:35:ac:b2:e7:91:62:f4:9a:02:6a:0b:6f:0b:05:8d:19:c2:
a4:68:1f:18:48:6d:72:ba:21:1f:9a:99:76:0c:9f:ed:f4:bf:
db:95:4b:c7:f7:e2:f0:e3:05:f9:cb:6d:89:12:c0:fa:50:e3:
1d:ac:15:d8:02:5e:6f:1c:f5:fd:37:b7:c1:cb:4f:1d:ab:b0:
3f:68:c7:06:4f:86:c7:5e:98:04:8e:e4:6e:da:bd:dd:9d:ee:
8d:a5:3d:24:54:7a:f5:29:27:a2:f3:d7:14:e2:c3:58:6f:fa:
30:ba:cd:ab:e0:a4:f3:ba:1a:bd:74:d6:3d:79:33:12:33:97:
a8:f6:0e:b4:b1:a5:4d:35:52:d3:c4:6b:0d:c8:76:6c:ae:30:
c6:bd:17:e7:e5:5f:b5:8b:20:6e:90:f0:71:25:48:22:48:6a:
8b:2d:76:9d:d0:33:c2:9a:a6:97:b8:b6:4d:4e:6c:1a:e7:e8:
57:35:c0:98:7f:03:91:94:66:ca:1e:cd:c2:16:b7:87:b3:b3:
b8:56:a2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:32:57 2026 by rpki-client