This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/baf7f460-f90c-35af-abcf-66f43a931e52.roa
File: baf7f460-f90c-35af-abcf-66f43a931e52.roa (raw, json)
Hash identifier: oMknKxTlS61jZNO/vtzuODv4bSa1ps1bFCrC8v8C4FI=
Subject key identifier: 95:3F:AA:F7:9E:E5:E3:FF:EE:D5:21:34:88:B2:C1:27:1E:D2:4F:F6
Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
Certificate serial: 010D0C9F4328584BD33088C4591E4BA2B303D080
Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/baf7f460-f90c-35af-abcf-66f43a931e52.roa
Signing time: Tue 11 Nov 2025 14:00:38 +0000
ROA not before: Tue 11 Nov 2025 14:00:38 +0000
ROA not after: Mon 09 Feb 2026 14:00:38 +0000
asID: 32806
IP address blocks: 2604:9900:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d3:30:88:c4:59:1e:4b:a2:b3:03:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
Validity
Not Before: Nov 11 14:00:38 2025 GMT
Not After : Feb 9 14:00:38 2026 GMT
Subject: CN=952230b1-9a75-47b0-ad45-e42b9b05ef90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6d:69:ab:6b:3a:c6:ca:75:9d:42:a6:14:28:
18:0f:36:29:97:25:c0:11:7f:79:b9:6d:b8:15:5a:
3e:40:17:d8:48:ec:24:b1:48:75:6e:b4:99:8b:3e:
ca:91:87:e4:39:1a:66:0f:1a:fc:71:48:67:4c:b2:
fe:69:74:34:8d:a1:3c:85:3b:2c:21:95:e7:c0:5d:
3c:06:68:a4:22:be:0e:7a:e5:82:9a:3f:1a:3f:83:
91:22:73:ad:04:9a:1c:a7:d1:ff:cd:33:d0:71:f6:
85:6e:cb:06:12:0e:19:ba:f2:5d:69:10:84:bd:e0:
64:ac:d8:45:50:ae:95:3a:41:58:c2:b4:08:ae:bc:
96:45:8a:2a:ba:a1:af:27:6c:33:0b:16:04:59:5a:
9f:e4:09:8a:80:76:63:10:82:82:81:db:57:66:69:
c8:9d:6c:65:24:86:57:9f:17:f0:3d:03:4c:0b:e7:
b8:67:e1:b7:7b:e3:5b:89:dc:2f:04:86:73:1c:fc:
c7:a4:3d:aa:de:a6:87:cb:30:ee:dd:6e:1f:a9:30:
2e:48:9d:ee:38:bf:03:d7:7d:ec:97:ef:28:bc:6b:
cd:2c:b2:ba:65:20:f0:fd:4c:35:e1:47:c0:90:b3:
ce:be:a3:98:f7:36:8b:c1:87:22:9c:b4:f6:4b:02:
69:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3F:AA:F7:9E:E5:E3:FF:EE:D5:21:34:88:B2:C1:27:1E:D2:4F:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/baf7f460-f90c-35af-abcf-66f43a931e52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl
X509v3 Authority Key Identifier:
keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:9900:4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:81:ed:56:08:de:a1:82:72:5c:21:2e:d5:fc:11:8f:54:f1:
43:0a:d1:52:44:50:44:93:b7:77:63:d2:05:d5:bf:7a:37:1e:
da:d1:34:15:0b:76:79:4c:97:ba:46:75:71:0e:83:7b:0f:3e:
cd:26:3e:af:69:8f:0f:a5:8a:63:37:d0:36:e5:7e:2e:18:8a:
8c:87:79:80:61:e8:2a:28:dd:25:ff:5e:63:84:2d:d4:8f:cb:
8b:1c:fb:47:f8:93:89:32:9a:ec:a2:06:d4:54:4a:25:73:58:
e4:1a:df:4c:57:7a:b3:a2:43:40:16:e9:c2:44:3d:8b:8f:06:
9f:d7:d0:b9:c5:56:2a:a7:de:27:54:37:1a:c3:2a:43:d9:95:
78:48:32:a9:4a:e9:7b:ee:03:cb:70:7f:e4:16:25:e9:52:70:
fd:8e:a4:d0:0d:b7:43:3b:a0:26:38:ad:6d:60:40:e7:55:a1:
26:87:bb:a2:28:54:c0:c8:09:7b:dd:76:34:af:1f:4a:49:ab:
0b:46:f5:d0:8c:63:be:7a:75:a8:e1:7b:47:32:92:e3:11:c3:
4a:fb:95:a6:2a:a4:9d:42:18:38:51:ab:f7:50:73:c5:bc:90:
6a:ca:0f:c3:32:59:a7:67:f4:31:26:51:47:6b:8a:cc:19:2e:
6e:17:3a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:28:30 2025 by rpki-client