This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4df666e1-05a2-3fc7-b730-e13cd7856b67.roa
File: 4df666e1-05a2-3fc7-b730-e13cd7856b67.roa (raw, json)
Hash identifier: yVj0Tie38z3WnBnvVS5s3V8TqqOhTCFaiA2qN/FwFLI=
Subject key identifier: 1B:D9:E0:17:CD:29:9C:77:53:BD:4D:30:67:C4:DE:2F:34:05:4D:B1
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584BC96B1503B9BD124253BFBDC0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4df666e1-05a2-3fc7-b730-e13cd7856b67.roa
Signing time: Sat 08 Nov 2025 02:00:30 +0000
ROA not before: Sat 08 Nov 2025 02:00:30 +0000
ROA not after: Fri 06 Feb 2026 02:00:30 +0000
asID: 31898
IP address blocks: 2603:c022::/35 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c9:6b:15:03:b9:bd:12:42:53:bf:bd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Nov 8 02:00:30 2025 GMT
Not After : Feb 6 02:00:30 2026 GMT
Subject: CN=0af0b3c2-fc15-436e-962b-4338942012de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:9f:1d:3a:64:2b:d4:db:14:09:60:42:75:
49:47:d9:8a:d8:9e:1b:26:69:53:97:70:06:bd:20:
d5:ea:2d:d4:6a:08:47:0c:ce:e7:75:e5:16:72:6f:
2c:5f:85:30:38:33:35:15:42:08:3a:c2:81:34:6d:
2f:24:19:f2:9e:b1:dd:8a:2c:2e:ef:77:32:94:fd:
92:1d:d1:a5:54:b0:a9:66:72:35:e5:b6:b5:6f:c2:
6f:82:90:f5:a5:0a:bb:a9:14:0f:81:f6:02:f4:ac:
3a:0b:bc:d5:da:d8:59:83:ca:3b:e8:c1:b3:fb:e1:
f4:99:13:7d:18:35:d8:69:5d:c4:e4:84:39:5f:7e:
76:b8:e0:78:5b:e5:a1:5b:f8:e2:28:0f:36:a1:23:
40:f4:8f:79:c8:a2:21:66:1a:b5:89:15:90:84:a2:
81:99:a2:14:3b:3d:5c:79:af:bd:45:5b:ec:5b:6f:
ee:a4:08:14:6d:13:fd:00:95:fd:2c:a8:d9:00:ae:
8b:39:13:69:29:be:e9:7d:1b:73:22:37:ff:dd:ff:
86:7d:df:54:1e:75:60:19:bc:6b:1d:97:14:fa:f2:
27:39:49:dc:ef:1d:8a:72:4f:4a:ed:f3:e0:fe:89:
c5:e3:46:28:48:90:61:3f:86:7e:92:44:0c:3c:5f:
1e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D9:E0:17:CD:29:9C:77:53:BD:4D:30:67:C4:DE:2F:34:05:4D:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4df666e1-05a2-3fc7-b730-e13cd7856b67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c022::/35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:2d:77:fc:1b:ae:45:3d:7f:77:73:52:36:73:16:19:77:3a:
8f:34:0b:5c:16:03:ae:d2:03:38:1f:aa:00:c4:d2:14:a6:ca:
df:69:59:66:1d:6e:dd:db:ba:c5:ae:6d:fb:22:2d:9a:05:f7:
5e:ba:b5:28:56:49:ec:80:e1:a1:2c:14:a8:28:65:90:51:86:
90:90:ad:06:e0:58:c6:b8:c8:85:f3:45:7a:fc:03:8b:98:99:
07:35:e6:c3:ea:4c:91:03:2c:87:4e:e0:b7:f9:cb:48:e3:a0:
1b:4c:95:00:4a:88:59:94:32:32:c8:31:24:89:ea:13:32:1a:
09:f3:1b:76:47:0b:89:48:5f:8f:f5:4d:ad:da:b0:2f:5b:b3:
50:1b:e1:96:4b:10:4d:b3:2c:20:09:55:96:f7:70:87:19:28:
4f:b1:64:04:a5:96:92:64:51:92:83:7e:8a:8b:38:70:b8:39:
af:f5:be:a5:12:12:cb:5d:b2:f3:9e:4c:e1:80:ef:85:4d:be:
ac:67:0d:86:dd:fa:c1:de:59:48:94:b8:a9:09:fd:bb:a7:cc:
52:55:52:f2:0a:be:1f:2f:bc:4e:65:96:03:fc:6d:d2:2a:8f:
ac:05:c4:db:b1:03:e5:d3:8e:26:32:74:61:bc:f5:36:b7:b3:
2e:db:32:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:29:53 2025 by rpki-client