This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/a8007adb-ad5d-3749-a86b-cc0189eda6e4.roa
File: a8007adb-ad5d-3749-a86b-cc0189eda6e4.roa (raw, json)
Hash identifier: 3e0UWunCneOPMVeQ5aJ2BSCImsnBmL7UESfmL3G4sqk=
Subject key identifier: B1:C7:F2:1C:5C:D1:AC:4B:42:1C:2A:99:10:D9:B6:49:E7:ED:18:12
Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
Certificate serial: 010D0C9F4328584C0C128E48BFE0E50631F76CC0
Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/a8007adb-ad5d-3749-a86b-cc0189eda6e4.roa
Signing time: Mon 01 Dec 2025 23:01:44 +0000
ROA not before: Mon 01 Dec 2025 23:01:44 +0000
ROA not after: Sun 01 Mar 2026 23:01:44 +0000
asID: 19718
IP address blocks: 2610:28:f020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:0c:12:8e:48:bf:e0:e5:06:31:f7:6c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
Validity
Not Before: Dec 1 23:01:44 2025 GMT
Not After : Mar 1 23:01:44 2026 GMT
Subject: CN=0768dfe3-3837-462e-802b-f87a3e0e77ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ef:af:cd:63:2a:68:8c:1e:7b:b1:e3:8f:18:
9c:b0:a1:54:dd:37:54:1a:1e:05:c0:b8:67:13:8b:
c9:e6:e6:73:fc:3a:95:fc:42:ec:59:28:52:64:cc:
b3:ee:1d:8b:74:31:ca:2c:b2:da:91:4e:ff:74:02:
b8:55:3d:e0:11:ca:84:f7:87:cc:80:c6:6a:8a:1a:
c7:ef:fd:29:ac:81:64:9b:cd:74:54:d0:31:3b:bc:
cc:05:5a:33:24:3d:b0:ec:8f:77:3b:c4:8a:73:72:
1c:4e:47:9f:92:dd:ee:dc:db:80:93:3e:4e:60:b4:
0e:ee:c4:59:d7:59:ae:db:61:b8:73:a5:6c:e4:00:
12:e8:0b:a6:3d:13:e3:e1:b4:75:40:3c:a9:94:a5:
a8:df:6d:8f:e9:7a:c2:fa:33:0f:b0:68:d0:b9:bf:
7d:49:8b:03:ab:e8:f1:64:96:b2:15:f2:54:ac:87:
40:86:83:8f:f2:f0:e0:bd:ef:c9:87:30:52:f3:14:
a9:4a:50:c9:ab:3c:df:90:57:77:e4:d5:87:2f:64:
ff:f1:75:0c:8f:32:70:33:2d:85:e7:eb:09:48:70:
7d:40:10:d1:14:f8:81:8a:ff:e3:20:42:67:b2:55:
ac:84:b7:08:64:3b:57:87:14:06:9f:5e:3f:31:b7:
ca:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C7:F2:1C:5C:D1:AC:4B:42:1C:2A:99:10:D9:B6:49:E7:ED:18:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/a8007adb-ad5d-3749-a86b-cc0189eda6e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl
X509v3 Authority Key Identifier:
keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:28:f020::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:4f:fa:15:88:da:a0:32:b7:94:3f:ad:84:1f:0b:22:3d:78:
bc:87:2f:0b:c1:5f:70:ae:8b:ec:e4:76:b8:f4:2c:39:89:53:
21:b0:a9:1f:7d:67:1a:28:19:51:20:9b:e4:ff:f2:83:ba:95:
d7:37:f2:52:87:b2:2a:0e:d7:63:67:ba:e7:2e:a2:4f:75:0e:
07:86:b7:c0:9e:d4:f1:bd:02:15:93:a0:45:39:5d:19:66:cb:
9e:e0:28:43:b0:a6:85:38:d0:7f:d8:44:95:bb:d6:b1:f9:63:
24:67:87:d2:fd:d4:83:eb:db:b5:de:81:0e:08:40:2a:03:1e:
2b:3d:6f:2c:81:9b:1f:5e:a9:5f:cc:96:25:35:c8:89:9d:71:
4c:74:eb:30:e2:fe:2a:b2:5d:f1:7f:e7:e0:92:85:8c:72:ad:
4a:09:90:8d:70:17:a2:84:9f:3d:61:8b:73:34:08:de:9a:99:
53:e4:30:77:d2:41:b5:5c:95:d6:4a:75:a2:b6:e1:a8:de:90:
cd:c7:70:19:77:ef:d5:3d:6d:a7:91:c8:d1:7e:c8:7a:e2:9f:
01:1e:6e:0f:b8:5b:20:d6:c3:6a:35:41:f1:40:88:e1:d8:ce:
9c:df:13:1d:bc:df:e1:0d:42:4f:7c:0c:bc:82:b0:11:81:d9:
65:b0:9c:c3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwMEo5Iv+DlBjH3bMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2QyOTFiNmEtMWIzMC00ZmMwLWIxZGQtNTgyYWI5ODM0
N2Q2MB4XDTI1MTIwMTIzMDE0NFoXDTI2MDMwMTIzMDE0NFowLzEtMCsGA1UEAxMk
MDc2OGRmZTMtMzgzNy00NjJlLTgwMmItZjg3YTNlMGU3N2FiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1u+vzWMqaIwee7HjjxicsKFU3TdUGh4FwLhn
E4vJ5uZz/DqV/ELsWShSZMyz7h2LdDHKLLLakU7/dAK4VT3gEcqE94fMgMZqihrH
7/0prIFkm810VNAxO7zMBVozJD2w7I93O8SKc3IcTkefkt3u3NuAkz5OYLQO7sRZ
11mu22G4c6Vs5AAS6AumPRPj4bR1QDyplKWo322P6XrC+jMPsGjQub99SYsDq+jx
ZJayFfJUrIdAhoOP8vDgve/JhzBS8xSpSlDJqzzfkFd35NWHL2T/8XUMjzJwMy2F
5+sJSHB9QBDRFPiBiv/jIEJnslWshLcIZDtXhxQGn14/MbfKGQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLHH8hxc0axLQhwqmRDZtknn7RgSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5
MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJhYjk4MzQ3ZDYvYTgwMDdhZGItYWQ1ZC0z
NzQ5LWE4NmItY2MwMTg5ZWRhNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QyOTFiNmEtMWIzMC00ZmMwLWIx
ZGQtNTgyYWI5ODM0N2Q2LzNkMjkxYjZhLTFiMzAtNGZjMC1iMWRkLTU4MmFiOTgz
NDdkNi5jcmwwHwYDVR0jBBgwFoAUvPdtyH70eguyx7hGpBdeRe34chEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJh
Yjk4MzQ3ZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAKPAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABNP+hWI2qAyt5Q/rYQfCyI9eLyHLwvBX3Cui+zkdrj0LDmJUyGw
qR99ZxooGVEgm+T/8oO6ldc38lKHsioO12Nnuucuok91DgeGt8Ce1PG9AhWToEU5
XRlmy57gKEOwpoU40H/YRJW71rH5YyRnh9L91IPr27XegQ4IQCoDHis9byyBmx9e
qV/MliU1yImdcUx06zDi/iqyXfF/5+CShYxyrUoJkI1wF6KEnz1hi3M0CN6amVPk
MHfSQbVcldZKdaK24ajekM3HcBl379U9baeRyNF+yHrinwEebg+4WyDWw2o1QfFA
iOHYzpzfEx283+ENQk98DLyCsBGB2WWwnMM=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:52:27 2025 by rpki-client