This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8c838644-8e99-3a27-99e0-cbed35335996.roa
File: 8c838644-8e99-3a27-99e0-cbed35335996.roa (raw, json)
Hash identifier: FFyEPgMVr00GmAl8ftiTmtrq04mrcyvwwAhiEzSu8bg=
Subject key identifier: 44:AE:DB:A1:DC:58:70:6C:2C:2E:D0:D8:1B:AA:19:B5:DB:67:CB:FC
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584C109B66BEDD7B716E7FDF6280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8c838644-8e99-3a27-99e0-cbed35335996.roa
Signing time: Wed 03 Dec 2025 14:00:38 +0000
ROA not before: Wed 03 Dec 2025 14:00:38 +0000
ROA not after: Tue 03 Mar 2026 14:00:38 +0000
asID: 398488
IP address blocks: 2001:470:437::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:10:9b:66:be:dd:7b:71:6e:7f:df:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 3 14:00:38 2025 GMT
Not After : Mar 3 14:00:38 2026 GMT
Subject: CN=5bcbf05f-85e9-4ec5-a150-e5d9877996e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f3:0b:6f:ba:a9:3b:d7:8b:39:26:70:7b:0e:
af:03:8b:30:8b:2e:a7:0d:dd:75:3e:f0:f8:57:13:
66:90:38:fe:d8:30:f5:b5:4f:ff:9b:5c:b6:85:2d:
c5:a5:90:45:32:b0:58:1a:eb:1b:53:9c:15:e5:92:
d5:ef:97:0d:3f:c6:eb:1e:d6:9e:35:2e:72:70:c7:
b1:b1:e1:47:6c:83:55:dd:90:ef:e0:32:c2:1a:eb:
18:f4:54:82:39:16:b7:74:86:1a:5d:80:f6:67:6c:
9c:0a:2c:1e:1c:e8:1f:15:12:db:ed:53:f5:dd:6c:
c7:1b:e4:15:d8:9a:5c:0f:ad:35:ba:1f:d5:f0:c6:
99:43:5d:d4:17:ee:63:e2:46:f9:90:ec:e7:6e:62:
27:d2:1f:ce:52:52:17:ac:e3:d4:5e:63:b3:25:12:
93:86:bd:23:5e:e9:24:78:d4:07:f7:0e:60:ed:de:
66:de:7e:a1:f7:30:bb:a5:50:97:75:74:26:88:7c:
5f:91:3b:92:b6:f8:f2:c5:09:65:c4:ff:45:08:39:
2a:70:fa:5d:aa:ff:dd:95:78:68:45:c5:8c:8f:ae:
fd:43:78:7b:37:34:1e:98:55:9b:f2:8b:9a:62:b0:
e2:b6:b9:26:fb:98:6e:00:36:2b:ae:1c:ba:5c:f2:
c6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AE:DB:A1:DC:58:70:6C:2C:2E:D0:D8:1B:AA:19:B5:DB:67:CB:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8c838644-8e99-3a27-99e0-cbed35335996.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:437::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:99:96:e2:83:3f:34:c6:75:af:c9:8a:a4:44:21:99:15:0c:
db:29:f1:df:af:f6:64:d3:21:dd:f4:b1:49:6e:19:71:25:77:
d3:04:83:95:92:a7:c6:89:b0:0b:78:c1:0e:01:46:97:bc:2c:
04:76:6b:ab:48:eb:e1:8b:24:c7:79:17:c9:48:a7:99:4f:cf:
04:84:29:f5:0f:3b:54:c5:f1:5b:d7:ee:db:fe:d5:ee:1e:d3:
f8:66:d7:29:cb:49:b1:80:ed:54:ab:b5:72:dd:14:31:37:d8:
e5:d3:f7:f9:ad:10:bf:ee:c8:8b:e7:9c:be:fe:ec:4e:8b:78:
94:9c:c1:29:b1:63:62:83:e1:2a:26:ee:57:1a:22:97:60:84:
44:06:4a:4e:39:d5:99:90:b0:2a:52:3e:e6:d7:a3:10:78:d2:
92:75:6b:e4:32:79:e2:59:32:3f:ec:48:b1:a6:ad:4a:af:c7:
99:96:7b:2d:bf:6d:e2:72:c5:98:46:42:6c:f2:57:ba:f9:70:
22:93:40:76:fa:8a:f0:3d:3e:bb:6e:4a:22:7d:a8:cf:d6:28:
81:28:ac:91:12:ae:a2:c1:04:6e:e9:b7:07:0a:20:51:bb:dc:
94:f1:e0:ae:e7:e8:74:60:9c:c1:85:62:d0:50:a1:60:ca:f2:
eb:f9:5b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:09:30 2025 by rpki-client