This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8109e33-250d-3d73-8e2b-1ff6022e49e6.roa
File: d8109e33-250d-3d73-8e2b-1ff6022e49e6.roa (raw, json)
Hash identifier: e1p2tNjnmaETQY481xDJ8O5483TRoVddHJRAihE3eKw=
Subject key identifier: 73:AF:47:52:BE:67:59:68:3D:07:4F:9C:DD:00:18:93:30:BD:6B:81
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584BF1E5F19ACA0AEDEEB29F9F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8109e33-250d-3d73-8e2b-1ff6022e49e6.roa
Signing time: Sat 22 Nov 2025 14:00:39 +0000
ROA not before: Sat 22 Nov 2025 14:00:39 +0000
ROA not after: Fri 20 Feb 2026 14:00:39 +0000
asID: 400992
IP address blocks: 2001:470:3eb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:f1:e5:f1:9a:ca:0a:ed:ee:b2:9f:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 22 14:00:39 2025 GMT
Not After : Feb 20 14:00:39 2026 GMT
Subject: CN=ccd9afbf-56dc-4985-9035-48177b949c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a0:c3:6b:ae:a6:86:49:c9:8b:0a:7d:b5:c7:
a7:1c:79:d7:33:5d:fe:5b:be:a6:8c:13:6b:18:17:
d6:8a:85:3a:78:19:24:31:6f:ce:93:71:d6:7a:df:
20:17:85:9e:3d:0f:cd:22:8e:c9:a1:78:21:46:b1:
ca:15:e6:0b:9b:d6:5d:c6:61:63:f3:14:15:72:65:
dc:f9:29:55:e3:4f:4a:21:39:4a:58:f6:2c:54:b5:
93:76:7f:eb:9c:ae:13:e1:ed:44:c8:85:41:5f:a3:
90:4d:ae:03:7b:a0:90:31:0e:6e:5f:b4:c8:44:7d:
be:f8:05:e7:b5:93:88:21:a7:e8:c0:f6:33:9d:f5:
e2:fd:17:2d:0e:2c:3b:a3:03:3d:d3:e1:41:3c:47:
7b:c1:b6:2c:15:95:9c:c5:1a:5f:6d:cc:56:1f:c2:
c9:ac:38:57:f7:b1:95:59:94:4a:79:1b:e3:ae:50:
b0:7b:7c:d9:ad:17:cf:80:7c:5f:8e:ef:60:cd:6e:
59:f8:97:72:14:e3:1e:79:68:e1:a1:19:0e:1f:f2:
3b:e9:b1:13:74:6c:4e:1e:d7:5b:fa:e3:bb:b4:71:
c9:00:0c:72:3b:bc:5f:84:b3:9e:13:69:4b:31:ea:
84:29:52:2e:1d:7e:73:93:ae:b5:ee:02:ee:84:45:
e6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AF:47:52:BE:67:59:68:3D:07:4F:9C:DD:00:18:93:30:BD:6B:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8109e33-250d-3d73-8e2b-1ff6022e49e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3eb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:bf:ce:73:0e:83:2a:13:19:2e:b5:21:5d:e3:65:fe:93:b7:
5f:83:ec:88:88:f6:44:81:db:0b:26:c8:ea:37:17:cd:8a:06:
7a:cb:e6:cd:93:fb:3d:dc:c8:8e:75:fc:0d:69:06:d6:54:97:
31:b6:73:d3:5f:23:05:38:d7:3d:81:cb:d8:4c:28:49:81:32:
cc:d3:b5:67:48:0f:e9:f9:1b:78:5f:09:1d:67:6a:92:70:82:
89:24:5f:5a:f8:ac:b2:e4:1a:cc:d1:fb:62:ee:54:9b:01:61:
55:9d:10:cd:c5:48:65:9d:8d:18:e6:ba:d4:fe:67:9b:06:38:
4b:f8:ec:75:b6:18:3f:71:61:e0:b9:ae:5a:1e:c6:a2:86:57:
68:b5:5c:99:94:48:30:02:4b:0a:9f:72:99:a2:45:79:45:31:
4d:db:b6:f0:4a:bf:c8:01:a0:81:73:6b:09:32:70:72:23:47:
81:c3:12:0d:f3:e3:ac:94:a2:07:22:2b:06:23:19:0a:f1:9f:
0e:a6:e9:cb:d5:ca:c0:fa:95:2c:87:a5:0a:0e:3c:0d:b6:1f:
b1:27:10:fc:fc:74:0f:2c:8d:63:de:70:ed:cb:e8:ce:78:85:
2c:dc:26:60:f2:ff:3a:c3:e9:4f:18:f7:68:18:d3:13:b7:17:
f6:5a:02:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:07:11 2025 by rpki-client