This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ffda54e-d63d-3408-9033-3e53fbdbe9a0.roa
File: 5ffda54e-d63d-3408-9033-3e53fbdbe9a0.roa (raw, json)
Hash identifier: x/Ixs76iqOoXw+8r/2nBIy3GMhfLYN0XXTt0MfcKTxk=
Subject key identifier: 21:0A:00:F0:01:9C:C6:B5:33:22:1F:AA:5A:62:E4:54:B1:CE:EF:49
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584C45A8145C0E35B1CCC00BFDC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ffda54e-d63d-3408-9033-3e53fbdbe9a0.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 32381
IP address blocks: 2001:4860:1025::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a8:14:5c:0e:35:b1:cc:c0:0b:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=6ebc4131-fb7f-4fc5-b4b6-fc56f086060a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f0:96:1d:e7:18:a7:43:29:42:43:47:b3:e7:
05:27:34:a7:6e:ac:15:5d:70:9a:96:46:cc:50:b7:
af:bf:4a:ec:e1:cb:14:1f:88:59:79:75:0f:6c:01:
9d:bc:77:b7:84:a3:12:1c:8f:58:43:78:56:d6:83:
d1:a2:5d:f1:49:42:5e:d6:80:1d:c8:fa:2d:06:72:
eb:5c:ad:6a:ca:b3:63:c5:3f:1c:80:b6:9f:6a:c6:
5c:bc:dc:fd:a2:77:fc:7a:5d:66:fd:e4:ba:de:eb:
09:d1:f2:55:34:08:43:3b:df:e3:02:a6:fe:d3:50:
c9:7f:dd:95:b4:f9:a0:ac:43:f9:5a:52:11:99:79:
6d:8e:26:d6:ca:e2:e1:84:13:a6:b8:56:80:ba:c5:
aa:11:63:1e:a7:37:cb:d4:2b:ca:82:11:e5:9b:54:
d6:fa:13:29:ad:95:0b:24:9b:f5:ec:16:d5:53:50:
23:96:4c:5c:a8:f6:67:33:74:d7:ba:4a:92:0b:a8:
07:61:89:4b:ad:48:50:62:34:a3:ac:55:b5:49:a0:
40:db:63:63:3e:a9:05:4f:7b:e0:82:3f:75:81:3c:
44:6e:3e:c6:4a:18:ab:aa:3f:da:0b:4d:8c:8b:4e:
42:31:45:46:af:58:ce:af:cd:6c:04:69:64:d8:ee:
ed:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0A:00:F0:01:9C:C6:B5:33:22:1F:AA:5A:62:E4:54:B1:CE:EF:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ffda54e-d63d-3408-9033-3e53fbdbe9a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4860:1025::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:cf:8c:f4:f9:04:54:01:49:a0:9b:16:0f:79:24:2c:71:5c:
95:eb:c5:fa:5a:ff:5c:6d:cb:1f:3c:99:ab:bd:7d:f2:31:ff:
ec:ab:fb:3b:ec:89:1d:49:62:a3:bd:16:99:57:30:6f:8c:e5:
26:c5:e4:7b:ef:a3:ff:4e:a4:1e:07:86:8c:0f:04:26:77:8f:
78:e6:fb:92:e8:e2:15:35:92:4c:49:22:27:72:bc:cb:33:4e:
d3:5a:f7:5f:31:2d:22:46:8f:e1:92:05:73:6b:fb:a0:2c:58:
5a:74:00:57:0f:90:ce:35:91:dd:35:36:2f:fb:41:c8:16:21:
b9:18:6a:f7:ba:f7:62:e3:10:24:c1:fb:80:b1:92:b2:b0:48:
43:b7:28:ee:e7:36:72:2d:94:82:8a:59:33:30:64:ba:bb:c3:
81:08:ad:34:74:33:83:fc:c3:f5:a3:93:b3:13:d9:cf:5a:db:
00:5a:45:53:52:4d:6b:ee:7a:bf:ba:d7:f9:f2:75:c9:aa:16:
71:56:0d:10:47:7d:cb:3d:9c:75:59:a8:4a:71:a5:5d:ed:74:
d1:fa:49:c7:1b:9d:b2:14:1a:1b:8d:e3:84:29:39:78:f5:a7:
60:2b:0c:29:3d:02:0e:19:71:8a:39:18:0a:d1:da:ff:4b:a7:
8b:81:3b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:54:56 2026 by rpki-client