This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/da5f8206-7dcf-3eff-a2f6-f349a17ee556.roa
File: da5f8206-7dcf-3eff-a2f6-f349a17ee556.roa (raw, json)
Hash identifier: xT4QqQLGSKGikfj8nObjUJ8PazDmlR2cs6EVi+R7xio=
Subject key identifier: 9E:09:3B:0C:7E:53:3F:C0:7F:8D:5C:20:70:05:89:6F:68:35:A3:79
Certificate issuer: /CN=d87bb806-e83b-438e-bf0b-6c487902c669
Certificate serial: 010D0C9F4328584C9966FF8BEF49955A74806340
Authority key identifier: B6:9D:15:21:E2:67:F3:38:89:29:E3:83:55:12:E1:CD:1A:4C:9F:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/da5f8206-7dcf-3eff-a2f6-f349a17ee556.roa
Signing time: Wed 21 Jan 2026 14:00:38 +0000
ROA not before: Wed 21 Jan 2026 14:00:38 +0000
ROA not after: Tue 21 Apr 2026 13:00:38 +0000
asID: 53361
IP address blocks: 2620:d3:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/d87bb806-e83b-438e-bf0b-6c487902c669.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/d87bb806-e83b-438e-bf0b-6c487902c669.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:99:66:ff:8b:ef:49:95:5a:74:80:63:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87bb806-e83b-438e-bf0b-6c487902c669
Validity
Not Before: Jan 21 14:00:38 2026 GMT
Not After : Apr 21 13:00:38 2026 GMT
Subject: CN=33180b78-eae1-4a4d-981e-f6b2cd20da1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:96:a9:ad:67:fe:27:c7:a8:c7:d9:70:cd:
86:e2:72:fb:fd:66:f3:a5:62:6c:45:56:f8:3f:a5:
0a:94:25:c0:fe:26:ef:f5:7e:e9:59:56:67:63:2b:
61:3a:f9:ca:ea:2f:d5:d1:74:0a:ed:79:45:c8:2a:
39:ee:e1:9c:37:68:6b:49:63:90:f8:04:3a:95:a5:
bd:b2:40:d9:99:a9:a6:59:81:87:ea:3f:81:15:95:
77:d5:b6:35:58:f8:59:83:0e:80:7e:99:a9:e9:da:
ec:d7:2d:4c:a0:47:8e:27:52:13:14:d4:7f:46:03:
99:7a:69:50:54:e6:6f:35:d0:bc:45:fa:98:e5:7d:
47:70:4a:69:88:e3:01:fd:c7:ea:d1:e5:39:20:78:
6f:35:d3:c5:5e:bf:e1:0e:71:5e:f1:2c:db:45:78:
7f:59:8d:21:17:8f:5f:ca:92:c1:9d:85:dc:53:bc:
01:21:66:af:9d:ff:42:06:7e:6a:75:48:04:f5:57:
0b:94:63:35:66:43:c1:d3:37:ea:08:02:0a:22:68:
f2:be:b9:93:ae:02:2c:59:39:29:bc:33:53:2d:f6:
cb:9f:7b:ba:c6:a8:52:43:55:52:d1:4e:76:b1:4b:
ab:8a:bf:d0:af:3b:62:ca:bd:d6:c7:90:67:7f:25:
ed:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:09:3B:0C:7E:53:3F:C0:7F:8D:5C:20:70:05:89:6F:68:35:A3:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/da5f8206-7dcf-3eff-a2f6-f349a17ee556.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/d87bb806-e83b-438e-bf0b-6c487902c669.crl
X509v3 Authority Key Identifier:
keyid:B6:9D:15:21:E2:67:F3:38:89:29:E3:83:55:12:E1:CD:1A:4C:9F:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:d3:4000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:83:89:60:2c:c7:2f:3a:35:21:c6:b7:ee:17:3f:f6:60:d5:
61:bb:84:4d:ca:1a:cf:15:3d:1a:56:1a:6b:ff:0c:d8:33:88:
6b:6e:22:41:3a:9e:58:cc:43:21:72:5e:e1:3d:22:41:83:c0:
84:f3:57:d0:44:fe:67:25:89:4f:b8:3a:bd:5f:ab:bc:16:01:
5a:6b:2c:97:a1:72:3f:20:4f:26:2c:76:5f:9d:bf:1b:aa:08:
9a:71:2a:11:58:4c:52:22:f0:16:b7:39:11:61:76:ad:99:94:
54:db:ea:88:70:34:44:fe:70:ba:2b:b5:ea:82:8c:07:8f:d1:
7f:a7:13:65:ff:d7:cf:cf:ee:a8:15:30:34:68:a3:f4:36:d1:
b7:3d:47:d8:77:ad:9e:84:d4:54:aa:9d:fb:fa:49:c4:ae:c6:
ec:78:24:71:6f:94:8c:71:4b:cb:37:f1:20:c0:b5:ad:12:f1:
38:5f:fc:91:ba:72:59:6f:0a:98:f9:86:16:5e:c8:9a:35:38:
50:84:6c:9d:e5:89:78:e3:bc:49:e9:86:f2:4b:5a:97:2d:35:
89:c5:5e:3c:ef:2d:83:e9:06:45:f3:1c:f6:24:96:4e:01:6d:
88:f2:94:46:0d:27:74:27:6f:f6:d7:fa:7d:22:a3:fe:d1:9a:
89:7d:bf:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:46:46 2026 by rpki-client