This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/2824194e-8305-35b7-934a-dfe3c0b4c203.roa
File: 2824194e-8305-35b7-934a-dfe3c0b4c203.roa (raw, json)
Hash identifier: 3IoCyTsI9vpPTtDCJl3zTyMbHsJi7AKBd6evIHfm33g=
Subject key identifier: 08:1E:EA:2D:D2:8E:81:90:B3:B3:3E:5D:A9:37:F2:CD:0B:F9:1B:4D
Certificate issuer: /CN=3e7444b5-1f39-42b3-8603-6480a7a61609
Certificate serial: 010D0C9F4328584C470BD73C3B59B25DD3D97D00
Authority key identifier: 10:E0:C2:B7:DA:AB:E8:42:D0:C6:55:49:1B:F7:AB:D2:29:FE:BD:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/2824194e-8305-35b7-934a-dfe3c0b4c203.roa
Signing time: Tue 23 Dec 2025 02:00:31 +0000
ROA not before: Tue 23 Dec 2025 02:00:31 +0000
ROA not after: Mon 23 Mar 2026 01:00:31 +0000
asID: 20473
IP address blocks: 2602:f533::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/3e7444b5-1f39-42b3-8603-6480a7a61609.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/3e7444b5-1f39-42b3-8603-6480a7a61609.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:47:0b:d7:3c:3b:59:b2:5d:d3:d9:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7444b5-1f39-42b3-8603-6480a7a61609
Validity
Not Before: Dec 23 02:00:31 2025 GMT
Not After : Mar 23 01:00:31 2026 GMT
Subject: CN=c483885d-eec8-4ede-b1f2-478de81811b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e1:a0:fc:4c:9f:ed:d3:13:af:1d:c8:1b:89:
1e:00:d3:54:cb:5e:32:76:6f:68:e9:8a:4f:15:d4:
59:6b:4e:95:e8:38:23:65:f1:d5:5a:e4:4f:67:15:
bc:68:92:0b:fa:1e:f9:07:17:78:b0:46:c2:ab:fd:
d1:cf:05:e0:90:a8:f2:b2:24:1e:b5:93:07:b9:b1:
af:9c:59:d0:7d:3e:4c:6f:85:64:f1:82:68:3a:45:
4b:0f:44:fb:4b:88:1a:dc:d8:d4:be:ac:35:ab:61:
fc:d1:59:c8:7f:ec:48:62:17:2a:cf:89:23:6e:8e:
9a:ae:75:de:90:85:59:05:3e:f3:34:09:96:52:89:
a8:29:55:7d:61:a2:02:b5:06:f6:bc:20:15:73:29:
14:6e:8e:33:fa:02:49:5f:09:0c:6d:72:b9:25:57:
b9:21:25:36:ce:8f:6d:f1:0f:bb:ce:18:15:2f:f8:
08:af:03:6e:06:bf:1b:97:7f:33:09:1c:9f:49:1f:
16:c7:bc:b2:5a:8b:03:29:09:fb:8b:f7:41:b6:67:
4d:18:8f:9a:fe:68:d4:1d:a7:11:01:b2:b1:79:0c:
35:17:c7:69:65:74:9b:b9:0f:bb:b3:2b:50:79:91:
5d:1e:10:50:ab:f2:55:9c:e9:43:4b:e1:c0:cd:b5:
d9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1E:EA:2D:D2:8E:81:90:B3:B3:3E:5D:A9:37:F2:CD:0B:F9:1B:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/2824194e-8305-35b7-934a-dfe3c0b4c203.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/3e7444b5-1f39-42b3-8603-6480a7a61609.crl
X509v3 Authority Key Identifier:
keyid:10:E0:C2:B7:DA:AB:E8:42:D0:C6:55:49:1B:F7:AB:D2:29:FE:BD:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f533::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:7b:68:e2:1f:af:a9:55:c2:26:5d:14:05:8d:5d:3e:2a:e3:
c4:30:d7:a4:08:d1:45:3d:3b:ec:c2:e1:da:a0:c1:88:e8:f3:
00:b3:ff:c5:27:7e:d8:b1:6d:f2:17:86:18:48:46:d9:8e:d8:
f6:d4:6c:a3:52:60:67:30:87:04:27:55:5e:dd:3d:af:34:c9:
7e:dd:6d:a5:f5:7e:16:0f:97:d3:34:a9:d4:ae:85:9b:f5:d4:
02:42:77:b3:f1:e9:b0:bb:0f:79:88:04:29:e5:47:6c:36:5c:
60:68:c0:13:3f:5a:1f:21:e4:12:bb:c5:98:70:19:47:16:18:
11:b3:59:ba:1e:ac:73:0c:67:0e:b9:9c:c6:d4:be:b5:f1:35:
6d:4c:b6:1d:00:0c:4b:bb:01:bd:c4:87:e3:f6:84:f9:3b:cc:
5a:65:3f:b8:a8:a5:c3:e7:b0:00:db:66:a6:53:28:76:cd:3e:
88:ef:f4:f9:ec:36:84:6c:22:35:60:93:bd:bc:29:db:4b:38:
5c:ea:df:9a:ee:50:02:76:bb:98:85:97:58:cf:f9:32:09:fd:
1b:7e:87:12:22:d4:74:76:8d:d6:70:9a:9a:6a:dd:d0:dc:a6:
41:07:7f:97:b7:01:6a:de:bf:21:33:97:ad:a9:68:f7:a5:00:
29:4d:48:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:15:52 2026 by rpki-client