This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb1aefbc-53f9-3af6-a212-3773241377c3.roa
File: cb1aefbc-53f9-3af6-a212-3773241377c3.roa (raw, json)
Hash identifier: f5nQ0NH8Guq/EqyIk0trQsAN4USM6iC1OBnDLOeRcko=
Subject key identifier: 61:32:DC:7A:33:84:56:46:7B:14:18:E7:0B:C4:6A:73:DC:14:01:B7
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584BDCF5EFD53B6C09ADC9B45400
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb1aefbc-53f9-3af6-a212-3773241377c3.roa
Signing time: Sat 15 Nov 2025 02:00:32 +0000
ROA not before: Sat 15 Nov 2025 02:00:32 +0000
ROA not after: Fri 13 Feb 2026 02:00:32 +0000
asID: 31898
IP address blocks: 2603:c001:6600::/39 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:dc:f5:ef:d5:3b:6c:09:ad:c9:b4:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Nov 15 02:00:32 2025 GMT
Not After : Feb 13 02:00:32 2026 GMT
Subject: CN=238ef3c8-bc8d-448b-b9e4-c2af9a68697a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:af:a4:5a:ac:cd:53:8c:4b:ef:bf:30:b6:76:
bb:e0:57:5b:7d:a2:1d:b9:ad:b9:13:5a:0f:f3:2a:
f9:8f:e7:8b:e6:0e:e2:89:10:c3:df:0e:2e:05:7d:
0d:85:c3:68:7a:b1:b7:03:5b:d1:0d:4d:10:a1:25:
bb:97:71:3c:f8:bc:3c:37:0e:29:20:b1:a3:28:e9:
0a:f3:a7:91:44:0f:e3:15:2e:0a:50:a6:d1:f0:25:
46:68:4b:ed:01:93:cf:f0:4a:a3:14:e8:68:71:96:
e8:28:db:4e:b7:06:74:09:c8:f0:b8:f6:91:39:dd:
a2:8c:f6:4d:99:64:36:47:a7:07:c3:55:ba:e1:66:
68:f5:2c:db:6b:b5:60:09:b8:ee:01:dd:6d:44:35:
62:bb:70:82:d2:23:c6:e5:fc:71:de:0e:62:cd:02:
29:17:be:78:91:e9:2e:f2:0f:47:c8:e7:41:47:b3:
4b:a7:99:14:bc:b0:af:b4:9a:ba:c2:9e:70:4b:d7:
b4:d9:d2:a2:2f:42:ab:d4:75:fb:49:1b:2f:6d:9b:
51:66:06:ac:5c:39:14:97:2a:b6:16:b1:13:d8:18:
a9:de:db:0d:e0:e9:0d:94:e3:d5:b4:09:d7:a2:c9:
95:6a:48:21:7e:d5:9e:32:61:34:63:14:e0:08:99:
05:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:32:DC:7A:33:84:56:46:7B:14:18:E7:0B:C4:6A:73:DC:14:01:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb1aefbc-53f9-3af6-a212-3773241377c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c001:6600::/39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:8d:eb:87:7e:0a:83:c2:9e:3e:8f:54:da:20:d2:9c:28:65:
35:6d:0f:79:66:73:47:21:27:d8:95:8a:0b:94:31:23:19:d7:
69:fa:8b:e4:42:27:b5:db:7d:2c:aa:7e:f5:f7:3f:55:5e:0f:
6f:7b:98:59:78:47:22:98:12:50:47:48:2d:a4:32:e8:41:ab:
d2:c8:58:a5:6f:44:ab:16:7d:39:c7:17:85:f4:2e:41:dc:5d:
f4:62:1d:7d:75:2e:64:bb:c2:1a:6d:5c:1b:0e:44:26:f6:10:
8c:9a:14:c7:3a:9c:f5:0b:aa:a2:4a:a2:41:a9:98:8e:5f:b4:
1f:d3:76:ed:7f:c7:8f:22:d0:4e:20:dc:4c:b7:c2:08:e2:c6:
21:b3:bf:b6:1a:9e:3b:d9:84:10:7b:b0:27:6f:7c:0c:7a:f8:
d6:4e:cc:e9:7c:a1:9e:7e:f2:3f:fc:65:63:3e:7c:65:7c:0e:
c2:04:dd:5e:fc:c1:ee:7b:5d:b5:77:4e:c8:b1:40:30:c7:5c:
19:b4:16:18:ec:87:b3:7b:c2:1a:8d:b6:1b:ce:ae:65:9d:79:
4a:dd:21:57:20:93:1c:f5:e7:ed:c6:72:c4:f5:4c:89:90:1e:
23:d6:a8:99:da:af:4c:84:dd:90:af:cc:11:ab:51:73:4f:ec:
7e:04:17:fe
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvc9e/VO2wJrcm0VAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
MjM4ZWYzYzgtYmM4ZC00NDhiLWI5ZTQtYzJhZjlhNjg2OTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9K+kWqzNU4xL778wtna74FdbfaIdua25E1oP
8yr5j+eL5g7iiRDD3w4uBX0NhcNoerG3A1vRDU0QoSW7l3E8+Lw8Nw4pILGjKOkK
86eRRA/jFS4KUKbR8CVGaEvtAZPP8EqjFOhocZboKNtOtwZ0CcjwuPaROd2ijPZN
mWQ2R6cHw1W64WZo9Szba7VgCbjuAd1tRDViu3CC0iPG5fxx3g5izQIpF754keku
8g9HyOdBR7NLp5kUvLCvtJq6wp5wS9e02dKiL0Kr1HX7SRsvbZtRZgasXDkUlyq2
FrET2Bip3tsN4OkNlOPVtAnXosmVakghftWeMmE0YxTgCJkF7wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGEy3HozhFZGexQY5wvEanPcFAG3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2IxYWVmYmMtNTNmOS0z
YWY2LWEyMTItMzc3MzI0MTM3N2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPAAWYw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAFI3rh34Kg8KePo9U2iDSnChlNW0PeWZzRyEn2JWKC5QxIxnXafqL
5EIntdt9LKp+9fc/VV4Pb3uYWXhHIpgSUEdILaQy6EGr0shYpW9EqxZ9OccXhfQu
Qdxd9GIdfXUuZLvCGm1cGw5EJvYQjJoUxzqc9QuqokqiQamYjl+0H9N27X/HjyLQ
TiDcTLfCCOLGIbO/thqeO9mEEHuwJ298DHr41k7M6Xyhnn7yP/xlYz58ZXwOwgTd
XvzB7ntdtXdOyLFAMMdcGbQWGOyHs3vCGo22G86uZZ15St0hVyCTHPXn7cZyxPVM
iZAeI9aomdqvTITdkK/MEatRc0/sfgQX/g==
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:38:20 2025 by rpki-client