This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/d1e43e4d-570b-3b11-b0b8-e9a37e264fe7.roa
File: d1e43e4d-570b-3b11-b0b8-e9a37e264fe7.roa (raw, json)
Hash identifier: T9rxGlOekcmEvs6/6TMiVRA4GdukwuwTeiSu9qohBzk=
Subject key identifier: BF:DD:69:FB:E8:7F:B8:D3:BC:E4:24:DD:42:24:73:7E:C0:3B:71:61
Certificate issuer: /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial: 010D0C9F4328584BFBAB4DAD12D8C9510566D6C0
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/d1e43e4d-570b-3b11-b0b8-e9a37e264fe7.roa
Signing time: Wed 26 Nov 2025 02:00:31 +0000
ROA not before: Wed 26 Nov 2025 02:00:31 +0000
ROA not after: Tue 24 Feb 2026 02:00:31 +0000
asID: 33211
IP address blocks: 2606:ca40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:fb:ab:4d:ad:12:d8:c9:51:05:66:d6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
Validity
Not Before: Nov 26 02:00:31 2025 GMT
Not After : Feb 24 02:00:31 2026 GMT
Subject: CN=a90a2db9-4f05-4510-871f-b5aa11c3a3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:51:1a:10:25:36:a8:dd:f7:ee:2e:5f:d8:2b:
08:a9:97:b2:98:5f:00:b5:76:f6:fa:83:40:a2:e1:
93:70:75:f5:cb:28:9e:cb:a0:30:5a:15:61:b6:b6:
c3:a0:39:5e:fa:fc:05:a0:f0:0e:a7:e2:6c:53:b2:
b1:ce:59:cf:4d:25:3c:6c:ce:45:48:f9:0f:88:aa:
36:45:3d:95:8c:79:5e:ab:da:64:f0:af:d3:8e:be:
eb:00:ac:32:f6:aa:19:47:cb:c3:64:ce:83:89:da:
09:70:6a:38:a5:54:ea:01:9c:a4:b1:3a:37:a5:8c:
5d:4d:c5:cb:a0:94:f9:f3:d5:e9:0d:8e:41:d3:9d:
1e:5f:a2:c4:13:bc:af:0d:4b:c7:73:2c:70:35:2f:
6c:1b:87:02:20:a4:c9:91:b1:c7:ca:e7:70:0b:8b:
e0:5c:05:50:8a:8e:84:3b:57:56:89:1c:68:53:8c:
66:7e:14:94:60:33:d4:aa:77:24:69:13:c5:a4:de:
60:8c:f9:2e:70:9c:bc:d5:42:e4:4a:6a:62:bc:51:
0f:0d:17:05:cb:7a:68:b3:01:14:fb:6f:8f:66:f4:
40:c4:50:2e:de:4c:37:de:60:bb:8f:df:0c:53:3b:
24:fc:2f:04:d7:d1:d1:9b:37:ca:9b:02:1e:c9:cb:
67:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DD:69:FB:E8:7F:B8:D3:BC:E4:24:DD:42:24:73:7E:C0:3B:71:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/d1e43e4d-570b-3b11-b0b8-e9a37e264fe7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
X509v3 Authority Key Identifier:
keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:ca40:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:82:ca:61:1e:ca:0f:be:8a:bc:fe:1c:bb:2e:61:9c:4e:ec:
a2:3d:f4:83:42:ce:76:a0:c0:72:cc:5a:ef:18:17:76:b3:38:
43:6e:7e:05:50:d9:9b:c8:7e:38:f3:90:7a:95:f9:3f:1d:35:
b1:a9:8b:66:b9:ac:23:03:19:82:69:e4:92:03:04:5a:f4:5e:
f7:2c:b3:ee:08:2a:4f:1d:e9:e8:16:34:1f:90:b0:97:66:9c:
84:d6:91:d9:1b:a9:d7:03:05:c4:a2:28:6d:1e:f7:ec:c6:02:
3d:78:88:d4:48:ea:19:e3:f9:90:28:6f:7c:89:40:0b:95:94:
14:ed:79:5b:6c:32:db:60:80:7a:b3:da:dd:c6:92:d3:96:a7:
96:b6:b9:9a:d9:d0:47:3b:ac:df:23:1a:14:db:f0:51:d0:c8:
41:7e:18:86:2d:5f:e7:56:74:c7:c5:db:d0:1f:34:a3:00:c4:
00:03:09:a1:dc:a1:90:a6:6b:b7:56:a6:82:53:64:af:dc:b1:
9a:43:e9:44:3e:f3:bd:74:63:75:1d:35:e2:d9:70:93:e9:9f:
5e:4c:57:e5:d4:ca:3a:80:2e:5f:d1:a0:cd:2c:42:02:ff:70:
f8:cc:48:9b:31:8f:d4:df:6f:17:4b:b3:81:dc:ab:ea:f0:60:
b8:4b:80:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:25:22 2025 by rpki-client