This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/9a23cc9d-2529-330b-b99f-e218bd4e23ac.roa
File: 9a23cc9d-2529-330b-b99f-e218bd4e23ac.roa (raw, json)
Hash identifier: VlVl8TgHF3C7a98vM98/Q1nHLwK8r/r6gYPgVjsllRc=
Subject key identifier: B3:25:A0:3F:B1:67:CC:98:D7:7A:74:F8:C4:36:33:34:5E:74:69:41
Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial: 010D0C9F4328584BEC50827F1277F178EE4C6480
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/9a23cc9d-2529-330b-b99f-e218bd4e23ac.roa
Signing time: Thu 20 Nov 2025 14:00:39 +0000
ROA not before: Thu 20 Nov 2025 14:00:39 +0000
ROA not after: Wed 18 Feb 2026 14:00:39 +0000
asID: 88
IP address blocks: 2604:4540::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ec:50:82:7f:12:77:f1:78:ee:4c:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Validity
Not Before: Nov 20 14:00:39 2025 GMT
Not After : Feb 18 14:00:39 2026 GMT
Subject: CN=46769aee-475c-4cc2-8f28-17eb095c75ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:80:28:d4:54:04:4c:32:15:a1:c7:0a:7e:4d:
81:8b:ed:38:3c:0b:6e:4c:f3:dd:5e:91:d6:9d:49:
34:a7:6c:5f:5a:64:c2:af:6d:40:2e:75:ee:d5:d9:
67:90:06:fb:59:9a:2d:3c:bb:ac:c1:5a:e6:ff:ef:
3e:fb:9f:94:c6:8e:23:0d:7d:6f:a6:54:be:13:fe:
1a:10:48:38:98:e9:1f:9a:aa:40:b8:62:09:69:c3:
d9:f0:d8:c7:01:3c:44:8c:25:ea:91:02:73:47:e6:
ca:3a:24:31:77:2f:bf:9f:5a:49:03:66:94:b7:ff:
14:90:00:e3:ed:a6:c7:26:1f:01:5b:16:90:64:6b:
75:b1:af:59:45:38:69:22:53:be:c8:83:62:6a:bf:
2a:62:6a:a8:22:6f:8b:87:f0:55:7d:fb:49:66:b7:
ad:f5:bc:82:3f:d5:c4:90:56:13:06:4c:7a:9d:f2:
80:91:08:06:89:c1:2f:e5:8e:e6:34:31:64:e7:ca:
5e:40:5b:de:dd:5b:f9:5e:76:1f:7d:b3:e9:ca:86:
08:fa:14:14:bf:42:65:ac:b0:03:15:6a:32:b1:64:
97:92:34:54:19:50:56:8b:2b:18:4c:1a:60:de:bf:
34:9b:e7:8a:9d:63:9f:1e:dd:75:2e:1f:ef:6a:00:
f4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:25:A0:3F:B1:67:CC:98:D7:7A:74:F8:C4:36:33:34:5E:74:69:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/9a23cc9d-2529-330b-b99f-e218bd4e23ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
X509v3 Authority Key Identifier:
keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:4540::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:11:b4:1b:c7:3e:28:36:0d:7f:af:84:a9:3d:33:53:10:25:
77:ea:f3:b1:dd:76:31:3c:1b:3c:3b:80:ff:bc:56:98:72:29:
84:f1:cb:ac:ea:5d:76:80:4a:17:4d:b7:c4:dc:61:26:a2:6e:
de:8b:b8:5d:b0:05:a3:d4:be:c3:84:94:ba:fe:74:55:72:50:
a6:f6:be:41:32:e3:74:8b:6c:8d:11:5e:8f:96:aa:9b:19:2a:
ff:b1:7e:50:ae:8a:2e:9e:74:e9:9b:ee:f5:e0:ed:f4:5e:4d:
55:4f:b2:62:37:18:1d:d6:d7:85:31:16:82:c8:2c:bd:e5:32:
dc:db:8e:20:13:02:9b:dd:b3:fd:fc:7e:ac:65:01:a0:51:52:
0c:e4:ae:f4:db:76:d2:c1:04:60:8e:1c:11:2e:3d:14:f2:a2:
71:aa:f8:40:6c:9b:7a:87:e5:af:a0:fa:2f:4b:48:d0:a8:da:
68:bc:7c:6d:5f:c7:29:36:6b:ad:1c:dd:9b:66:5e:31:b1:77:
cd:ea:6f:af:e3:6f:a5:7a:31:43:8a:a8:3b:e7:88:f6:3d:e6:
29:32:66:83:58:99:32:de:36:31:d7:e2:c0:76:85:07:b3:3d:
0e:5a:66:a8:3a:a7:5a:08:bf:38:e1:30:4d:85:d7:37:cf:22:
a1:dd:1c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:04:53 2025 by rpki-client