This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/963a6036-d518-33f5-9050-74210816b478.roa
File: 963a6036-d518-33f5-9050-74210816b478.roa (raw, json)
Hash identifier: LPOLgqhRFcrIOiiLmqryreQ6/6ug1W5qqOeWBKQNLqw=
Subject key identifier: BA:A9:DA:1C:94:C0:3C:53:5D:B1:BF:72:FD:A1:06:CF:55:EE:A7:A9
Certificate issuer: /CN=badf1586-901d-41a7-b0f3-521998d53931
Certificate serial: 010D0C9F4328584C78DF506C2E64704959B36580
Authority key identifier: 17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/963a6036-d518-33f5-9050-74210816b478.roa
Signing time: Fri 09 Jan 2026 22:21:35 +0000
ROA not before: Fri 09 Jan 2026 22:21:35 +0000
ROA not after: Thu 09 Apr 2026 21:21:35 +0000
asID: 209630
IP address blocks: 2604:be0:ffe0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:78:df:50:6c:2e:64:70:49:59:b3:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=badf1586-901d-41a7-b0f3-521998d53931
Validity
Not Before: Jan 9 22:21:35 2026 GMT
Not After : Apr 9 21:21:35 2026 GMT
Subject: CN=2f74f450-edf2-4f83-82c9-9594b3549fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:66:10:e5:07:d4:83:ad:d0:90:e5:9e:92:7b:
8a:d3:31:cb:30:f0:99:b7:d6:11:b6:91:65:0d:e5:
60:80:87:57:8b:ac:3d:51:73:2f:88:50:6e:4b:f8:
df:7d:41:a6:61:98:7a:b3:3d:35:01:ea:40:69:85:
ea:73:17:97:5c:c3:77:54:77:e3:4d:f0:c7:2d:4a:
37:79:1f:29:43:4a:73:43:38:a1:2b:cb:4d:15:26:
0f:bf:12:3b:fd:bc:46:b3:38:5d:80:cb:7d:2f:8f:
e8:bd:0f:e0:a3:6b:1a:a6:bc:e4:ab:8c:2e:a6:69:
17:7f:f7:5f:22:a8:17:82:70:04:95:7f:3f:1e:3e:
d0:fb:f1:9d:a9:5f:b0:2a:b1:a9:ba:9c:38:ea:d3:
30:2c:0b:8c:6f:b8:20:ac:3b:81:7f:f5:77:83:d7:
b8:81:f8:83:81:b1:da:0e:17:f9:53:f0:a0:cc:29:
d5:94:89:47:9d:e2:2f:73:d8:01:7f:96:ce:57:ba:
f2:3a:c3:53:20:32:4a:09:42:5a:5a:70:e0:53:11:
51:02:53:85:81:b5:fa:97:dc:ed:cb:ed:ad:eb:88:
ef:84:bf:82:3c:8f:56:07:5e:e9:d0:7f:6c:db:c6:
b3:0b:b2:39:e1:51:ed:5f:5a:18:b6:5a:32:32:11:
63:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A9:DA:1C:94:C0:3C:53:5D:B1:BF:72:FD:A1:06:CF:55:EE:A7:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/963a6036-d518-33f5-9050-74210816b478.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.crl
X509v3 Authority Key Identifier:
keyid:17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:be0:ffe0::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:80:e9:96:46:09:b4:54:c8:97:87:a0:a6:8b:2a:db:40:12:
12:66:14:7a:83:cb:c8:0a:6c:1c:01:f4:a6:76:b1:23:26:e8:
3c:d7:92:ea:c4:95:c0:1b:be:6c:cd:b9:87:27:a4:f5:25:a6:
bc:a9:dd:ac:19:d5:c6:33:68:31:e3:08:ea:bd:5f:d1:37:43:
75:ef:b9:6b:17:3f:7c:99:31:7d:5f:19:ed:b8:16:50:74:d2:
f5:a5:b6:f6:2f:14:31:36:67:30:42:7f:61:f6:b1:fb:11:c8:
e7:c1:ab:f6:5b:16:b5:e7:4b:95:f5:e5:bc:bd:89:34:f5:6b:
c1:14:98:56:b2:f9:76:6f:74:7e:95:10:88:86:79:e4:f3:f6:
05:f2:13:b4:ad:58:d3:43:e2:26:5c:5e:c9:ea:49:7f:3c:52:
91:ff:e5:33:cd:3f:b3:f7:04:30:a0:63:f2:24:68:90:56:38:
d5:30:e9:61:d6:86:0e:6b:9c:89:45:01:89:e2:53:6c:0b:91:
69:25:95:f9:ac:a7:06:f4:77:fc:78:32:e5:9f:0f:da:d1:6e:
cb:a9:da:b2:f8:39:b1:53:82:24:e6:33:28:3b:81:36:44:15:
5c:f0:46:9f:f8:d7:f2:e5:00:b8:9f:fa:c2:07:97:15:d6:bd:
2c:d6:30:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:48:06 2026 by rpki-client