This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb2ecdd2-9e73-3764-a349-9bcdfde9d1e6.roa
File: cb2ecdd2-9e73-3764-a349-9bcdfde9d1e6.roa (raw, json)
Hash identifier: 16nRtzhbZSmOu8PUeUwFqPikHwjYTl8qOzLzNd7P3Q8=
Subject key identifier: 16:E1:D1:AC:6D:42:3A:2B:43:51:5C:0B:92:08:D7:AD:B7:64:E3:C8
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584BC96B08D730DEC2672601BF40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb2ecdd2-9e73-3764-a349-9bcdfde9d1e6.roa
Signing time: Sat 08 Nov 2025 02:00:30 +0000
ROA not before: Sat 08 Nov 2025 02:00:30 +0000
ROA not after: Fri 06 Feb 2026 02:00:30 +0000
asID: 31898
IP address blocks: 2603:c001:4000::/39 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c9:6b:08:d7:30:de:c2:67:26:01:bf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Nov 8 02:00:30 2025 GMT
Not After : Feb 6 02:00:30 2026 GMT
Subject: CN=68d03a3d-0a04-4d1b-924f-aa7457e77e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6c:25:b9:e9:22:c7:28:32:99:6c:9c:f8:13:
4f:e5:a3:78:c5:6d:a5:57:17:fe:99:b7:e2:ea:0a:
2c:db:2f:54:dc:ef:8b:54:1c:ba:f2:c4:ad:dc:56:
c8:ba:d2:1b:1a:00:a7:48:69:1c:58:75:32:4c:a4:
ca:48:fe:7d:80:04:22:ff:8e:87:0b:a3:de:a6:c3:
ad:4c:49:be:4d:e5:24:74:a5:c3:15:63:ad:b6:5e:
52:18:5d:fa:82:10:d3:5f:42:21:de:1f:e4:13:20:
7e:be:9b:6b:a5:6b:1d:5c:2a:48:c7:ff:f9:67:d4:
db:b9:da:1e:5d:cf:8e:a3:5f:63:6a:75:1e:f6:4a:
60:ef:53:f8:55:51:23:26:cb:a2:98:43:57:d8:d8:
a1:15:05:6d:e9:06:87:95:1a:61:d7:65:1c:cf:d7:
78:41:9a:59:11:16:ef:3d:24:de:92:25:ac:81:65:
e1:95:88:b9:87:e2:51:50:e6:a9:c6:56:ac:fd:18:
3f:c3:74:93:dd:b3:8f:0d:65:5f:41:71:c3:78:5a:
60:3d:43:28:f3:cc:bf:be:cc:dc:f6:aa:39:03:0e:
20:7f:e9:fc:16:92:23:4e:38:91:10:ca:d0:ec:2c:
78:d1:f6:45:48:f1:68:33:52:1f:ff:3f:e9:48:b8:
14:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E1:D1:AC:6D:42:3A:2B:43:51:5C:0B:92:08:D7:AD:B7:64:E3:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb2ecdd2-9e73-3764-a349-9bcdfde9d1e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c001:4000::/39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:52:97:62:52:20:1d:83:68:a7:14:f8:63:b3:84:a8:5a:78:
5c:bb:93:f1:09:a6:89:27:c5:1e:06:b1:d6:2a:44:f5:85:cc:
41:ad:51:06:36:df:24:d7:09:bd:5f:e8:0b:46:d1:f9:05:15:
fb:75:df:05:1a:5a:5e:7c:3a:d7:93:30:1b:53:92:9e:c5:16:
70:56:f3:4a:e2:d7:b8:b1:98:49:20:83:7a:29:8a:5c:82:19:
74:d3:32:d5:10:6f:7b:50:fd:4c:87:a4:e9:7b:e1:07:0a:a5:
18:b6:09:f9:9a:4e:13:de:3d:e2:5e:3e:0a:32:2c:0e:89:98:
e6:cf:36:c6:c1:5a:71:b4:b9:47:76:bd:7f:15:cd:b4:85:d0:
cc:f4:3c:df:7c:e0:52:ce:df:fa:4e:21:08:d5:cc:f7:a1:2f:
db:d8:4d:06:2a:0e:d1:34:9b:ba:52:52:b6:c4:e4:ae:1c:fb:
f9:7f:ac:69:6a:62:69:ce:5f:59:23:72:63:99:64:c6:3a:5e:
77:2d:b3:b9:f0:ef:e8:1b:f9:e3:f6:7a:0f:68:01:8e:47:81:
8e:38:a8:9a:cd:61:45:be:47:1c:c6:af:d5:62:17:80:bf:1a:
44:ab:3a:c8:5d:8b:a8:f9:bd:bf:0a:30:92:d6:83:0e:f7:c7:
03:42:3a:2f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvJawjXMN7CZyYBv0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MTEwODAyMDAzMFoXDTI2MDIwNjAyMDAzMFowLzEtMCsGA1UEAxMk
NjhkMDNhM2QtMGEwNC00ZDFiLTkyNGYtYWE3NDU3ZTc3ZTg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mwluekixygymWyc+BNP5aN4xW2lVxf+mbfi
6gos2y9U3O+LVBy68sSt3FbIutIbGgCnSGkcWHUyTKTKSP59gAQi/46HC6PepsOt
TEm+TeUkdKXDFWOttl5SGF36ghDTX0Ih3h/kEyB+vptrpWsdXCpIx//5Z9Tbudoe
Xc+Oo19janUe9kpg71P4VVEjJsuimENX2NihFQVt6QaHlRph12Ucz9d4QZpZERbv
PSTekiWsgWXhlYi5h+JRUOapxlas/Rg/w3ST3bOPDWVfQXHDeFpgPUMo88y/vszc
9qo5Aw4gf+n8FpIjTjiREMrQ7Cx40fZFSPFoM1If/z/pSLgUawIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBbh0axtQjorQ1FcC5II1623ZOPIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2IyZWNkZDItOWU3My0z
NzY0LWEzNDktOWJjZGZkZTlkMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPAAUAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASVKXYlIgHYNopxT4Y7OEqFp4XLuT8QmmiSfFHgax1ipE9YXMQa1R
BjbfJNcJvV/oC0bR+QUV+3XfBRpaXnw615MwG1OSnsUWcFbzSuLXuLGYSSCDeimK
XIIZdNMy1RBve1D9TIek6XvhBwqlGLYJ+ZpOE9494l4+CjIsDomY5s82xsFacbS5
R3a9fxXNtIXQzPQ833zgUs7f+k4hCNXM96Ev29hNBioO0TSbulJStsTkrhz7+X+s
aWpiac5fWSNyY5lkxjpedy2zufDv6Bv54/Z6D2gBjkeBjjioms1hRb5HHMav1WIX
gL8aRKs6yF2LqPm9vwowktaDDvfHA0I6Lw==
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:29:14 2025 by rpki-client