This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dfb9926d-6216-3b2e-836f-c99868aba2de.roa
File: dfb9926d-6216-3b2e-836f-c99868aba2de.roa (raw, json)
Hash identifier: /fNYkcEDK6kE4oWkwFHoMZGkvcGcoQHvKQvJGCwpLHE=
Subject key identifier: 23:2C:A7:C7:F9:73:2D:5E:10:43:BF:B7:C9:C3:C2:DC:42:5F:99:B9
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584C5EC6B8C66778547EED830740
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dfb9926d-6216-3b2e-836f-c99868aba2de.roa
Signing time: Wed 31 Dec 2025 14:00:38 +0000
ROA not before: Wed 31 Dec 2025 14:00:38 +0000
ROA not after: Tue 31 Mar 2026 13:00:38 +0000
asID: 36137
IP address blocks: 2600:bc04::/32 maxlen: 100
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:5e:c6:b8:c6:67:78:54:7e:ed:83:07:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Dec 31 14:00:38 2025 GMT
Not After : Mar 31 13:00:38 2026 GMT
Subject: CN=68ca61a2-818a-4bc5-b86d-53a49ad067ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:14:a2:2d:96:a6:c3:48:20:2c:7a:e3:8c:
ee:af:6b:82:48:ce:ac:1b:6a:2d:82:1e:2d:86:c2:
57:3f:d1:62:3e:43:03:1e:75:fc:05:c6:be:b5:42:
c7:1d:f4:c4:31:ce:33:d6:f7:87:22:8c:fc:d5:a7:
3f:d7:c8:e0:35:0b:79:0a:92:8b:b1:c6:40:6f:aa:
00:d5:18:79:1e:12:db:8a:a9:bc:4a:68:b1:85:b9:
70:8a:f3:dd:0b:f7:ae:c1:0b:da:84:06:23:f3:1d:
0a:e8:69:9f:34:7b:fd:0b:46:e3:cc:2b:59:71:ea:
1e:69:b7:17:49:87:33:0c:6d:61:d7:38:c8:d4:7f:
8d:8c:17:f8:f1:15:86:de:91:55:77:05:85:58:9a:
35:57:05:f3:66:44:c9:7c:2b:0d:1a:b4:65:66:db:
25:c0:dc:30:9c:5b:1a:16:f4:b6:0e:01:5e:4e:82:
d4:74:31:cc:f8:7e:19:8f:6d:fe:d9:b3:fa:82:bc:
54:0d:13:d5:8f:3c:5e:bd:cd:6e:f0:9d:bb:78:3b:
17:32:31:5e:36:b5:c2:5e:03:e2:65:9d:d1:93:c0:
1d:b3:21:43:33:20:14:fa:8a:f3:e5:83:22:e5:b6:
e3:c8:08:34:8f:2e:6a:90:74:2b:5f:d3:4f:96:41:
2a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2C:A7:C7:F9:73:2D:5E:10:43:BF:B7:C9:C3:C2:DC:42:5F:99:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dfb9926d-6216-3b2e-836f-c99868aba2de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:bc04::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:06:0c:88:fe:a6:f9:04:38:4d:8b:a4:90:bf:cb:7d:f4:a4:
87:ca:90:b9:22:bd:c2:88:00:42:7e:60:aa:e0:5c:50:72:01:
b8:1a:09:33:42:0a:0f:74:9f:61:76:1a:ca:9a:d9:1e:87:45:
dd:d1:ef:81:e9:97:0c:13:1d:94:af:96:9e:c5:c9:ab:be:31:
b7:f0:1f:18:27:fd:07:dd:95:78:c2:fd:f5:69:35:92:54:93:
45:72:0d:b8:75:99:3e:79:b0:ca:08:3f:e0:48:46:42:34:e5:
ff:29:73:19:b5:05:e2:d4:99:47:46:78:a5:82:0a:00:05:c5:
d2:32:90:14:43:f0:2d:f6:33:84:18:36:29:8e:03:3b:92:04:
45:ad:40:ed:26:4e:10:a3:0b:e4:ea:14:3f:98:50:a5:c0:d5:
e1:d9:97:65:d8:5e:1f:d2:12:fa:51:a1:0f:9c:50:bf:0e:2e:
83:e6:00:44:70:4c:24:62:54:75:91:2a:91:bb:86:9b:85:25:
47:a4:9e:5f:b3:b5:43:54:20:66:58:e9:fd:23:46:cf:ec:79:
c5:c5:f5:df:06:ea:79:5b:74:d1:fd:38:ce:fc:b7:7b:15:51:
2a:88:3f:80:78:e5:92:01:a1:8f:b3:e6:0c:0f:4e:17:6a:82:
71:a7:31:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:08:49 2026 by rpki-client