This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3e1ce97b-af4f-329d-8f7b-493a58e2d2c6.roa
File: 3e1ce97b-af4f-329d-8f7b-493a58e2d2c6.roa (raw, json)
Hash identifier: 4ByDDVolduusAlJL1/a+YmrXktsAlqrjL8XOuIfVw5Q=
Subject key identifier: B8:A2:1F:DF:9C:90:A7:6F:5C:88:00:E9:D6:88:A5:08:42:7B:3E:22
Certificate issuer: /CN=3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8
Certificate serial: 010D0C9F4328584C1FF62EA2F02336AE8EDDBD00
Authority key identifier: AB:0C:FE:A3:8C:C5:9E:1B:00:48:9F:12:D5:2F:57:2E:7A:16:12:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3e1ce97b-af4f-329d-8f7b-493a58e2d2c6.roa
Signing time: Tue 09 Dec 2025 02:00:31 +0000
ROA not before: Tue 09 Dec 2025 02:00:31 +0000
ROA not after: Mon 09 Mar 2026 01:00:31 +0000
asID: 63061
IP address blocks: 2620:b7:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:1f:f6:2e:a2:f0:23:36:ae:8e:dd:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8
Validity
Not Before: Dec 9 02:00:31 2025 GMT
Not After : Mar 9 01:00:31 2026 GMT
Subject: CN=afb15e3f-688c-4fd1-be70-9c64d01fcc73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cc:78:09:ca:ff:b9:bb:0c:f5:bf:92:cc:95:
48:15:38:d8:be:69:2e:99:1f:47:49:83:79:30:a0:
28:04:32:79:f6:d3:df:5a:e6:d4:6e:8a:12:e1:75:
d0:01:2a:96:fa:57:00:24:9c:d3:89:63:1c:4a:ad:
74:a9:2f:ca:87:bb:0c:4c:fd:30:ea:18:4b:b5:1b:
7e:28:f3:8c:f8:6e:91:f3:ad:df:31:1f:a3:4f:78:
58:59:64:bf:9a:bb:f3:4f:6a:b6:d4:d2:e1:07:34:
18:2f:9d:73:0b:66:19:42:6b:48:3e:77:8c:38:fe:
cb:b9:13:e1:91:d7:6d:fa:e5:77:f8:b6:71:87:7d:
94:a0:4a:01:8a:8d:0a:46:d4:a2:d6:31:3d:13:b1:
2c:63:29:f7:0a:aa:90:52:41:f0:63:85:2a:ef:da:
29:64:08:34:5c:af:d4:83:e0:20:b9:0a:60:e3:85:
96:bb:f6:9d:f1:27:10:61:6f:53:36:28:ec:8f:61:
01:d9:06:fe:d8:92:85:8d:35:24:67:52:b8:6e:48:
3f:41:d4:99:03:22:1e:eb:41:17:12:8d:79:3f:67:
e8:de:10:2a:db:aa:bb:7d:4c:cb:f2:fc:a4:9e:32:
10:88:16:b8:72:2c:9b:9e:25:94:dd:25:2f:4a:62:
fb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A2:1F:DF:9C:90:A7:6F:5C:88:00:E9:D6:88:A5:08:42:7B:3E:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3e1ce97b-af4f-329d-8f7b-493a58e2d2c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.crl
X509v3 Authority Key Identifier:
keyid:AB:0C:FE:A3:8C:C5:9E:1B:00:48:9F:12:D5:2F:57:2E:7A:16:12:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:b7:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:a8:1b:02:d6:d4:be:f2:3c:7a:54:ad:e3:56:78:75:16:6b:
3d:6a:21:53:40:8b:4a:3f:d7:3a:eb:3d:b1:36:63:f8:f6:5b:
f9:5c:15:f7:b9:a2:9e:d2:6c:92:a3:38:73:85:7d:83:35:eb:
a5:d7:69:4b:ea:a6:26:45:21:25:fa:41:3b:97:a1:f1:4c:cd:
7e:79:4d:68:af:26:78:0f:81:3b:c5:80:11:00:b9:9f:e2:87:
c5:14:00:65:f8:37:58:80:44:56:8f:25:2f:50:eb:5a:3e:d9:
71:75:60:1b:9c:49:ca:03:e6:39:69:0e:0e:4e:f8:6e:47:3d:
c0:36:dc:69:1a:69:23:57:3d:0d:76:8e:08:d7:1a:4e:2e:99:
16:4c:0b:75:d0:90:e8:e3:8c:54:d9:59:07:fc:27:27:4d:ee:
88:24:23:b1:cc:cf:c9:a9:c3:be:cc:9a:73:67:0d:22:56:49:
34:35:cd:3b:7e:eb:2e:c1:7e:48:1b:5c:64:69:eb:79:43:26:
b1:82:84:72:21:1f:86:57:fa:10:27:99:31:96:f9:26:f9:f2:
f4:e4:bb:eb:73:fc:9e:3b:06:44:36:3a:ca:bb:22:1d:ab:d3:
32:5c:55:af:03:f4:9f:1c:8f:ef:30:0e:ac:a9:79:0d:31:81:
8c:74:85:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:01:57 2026 by rpki-client