This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8ace2fbd-6431-3552-83f5-fb8efc3db04e.roa
File: 8ace2fbd-6431-3552-83f5-fb8efc3db04e.roa (raw, json)
Hash identifier: J3lEnI9XVkV/P0mzGPlTW0cvCrHll92g9Ael1HlTRXk=
Subject key identifier: 8B:B2:D0:75:0C:E2:ED:B0:4F:00:91:6E:CD:21:D1:03:F2:2A:76:55
Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial: 010D0C9F4328584BE569E8486CE9E0C4331A9000
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8ace2fbd-6431-3552-83f5-fb8efc3db04e.roa
Signing time: Tue 18 Nov 2025 02:41:12 +0000
ROA not before: Tue 18 Nov 2025 02:41:12 +0000
ROA not after: Mon 16 Feb 2026 02:41:12 +0000
asID: 198949
IP address blocks: 2620:147:128::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:e5:69:e8:48:6c:e9:e0:c4:33:1a:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Validity
Not Before: Nov 18 02:41:12 2025 GMT
Not After : Feb 16 02:41:12 2026 GMT
Subject: CN=90eb7352-9773-44d9-b6d8-51b67a538923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f2:15:3e:28:1e:17:f1:8e:66:29:a5:0a:c6:
5f:94:8d:54:bb:c8:61:e8:45:1f:19:8b:0a:cb:e0:
fc:bd:4f:d8:95:14:d1:d8:75:7d:e4:28:dc:e0:3e:
0a:a7:57:10:fa:db:c8:24:9d:ae:be:f5:df:00:e7:
e1:83:0a:df:8a:b2:e0:d2:d8:75:3b:19:89:a3:f2:
6b:7a:9e:b7:82:d3:e8:8f:51:1a:be:75:43:91:c3:
26:4b:28:fa:25:e8:38:5a:a7:38:30:50:cc:00:0b:
54:3f:ab:61:ff:bc:4a:9c:61:7b:f9:ab:e8:53:35:
25:91:5d:de:89:d1:bf:8b:2b:55:66:05:c0:67:23:
2a:f7:76:b0:e7:d1:87:f3:0e:e3:e1:0f:56:7d:9b:
91:35:b9:3e:ae:0e:1e:b6:8b:a1:fa:f1:20:75:47:
2f:66:ae:ae:49:48:a2:57:dc:3f:22:eb:72:d9:08:
d2:51:d7:08:f4:87:04:14:7a:e8:9c:b7:f7:4c:cf:
a8:d5:5e:d7:64:0d:66:86:d4:26:0b:62:6d:66:5a:
cc:c8:6d:9e:7e:1e:11:5b:7a:3e:f5:ca:88:fc:e4:
69:b1:67:81:1a:fe:f4:21:0d:19:e3:9a:7b:25:2f:
88:75:18:2a:34:b1:50:4b:3c:3d:e2:b6:89:51:00:
68:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B2:D0:75:0C:E2:ED:B0:4F:00:91:6E:CD:21:D1:03:F2:2A:76:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8ace2fbd-6431-3552-83f5-fb8efc3db04e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
X509v3 Authority Key Identifier:
keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:147:128::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:4d:76:af:35:84:7c:da:e5:d6:90:69:85:04:34:b3:80:69:
90:0c:27:07:e4:a4:53:72:23:34:d9:fb:67:a0:9d:70:a9:67:
b8:65:a9:bf:e6:d7:6b:00:4e:3d:e6:f8:62:61:db:b2:d7:d3:
81:bb:e0:08:01:29:f7:60:4c:8c:0c:b0:24:82:8a:d6:44:bb:
a0:34:b0:b1:e7:d9:02:88:1d:62:e6:b8:e4:2a:f9:91:80:23:
b7:45:ce:77:0d:4d:09:93:8a:d0:c2:38:ac:12:7b:24:d4:c7:
d0:a5:01:59:aa:7c:ad:3c:12:8a:62:04:2b:57:2d:f2:b4:d6:
0f:bf:9a:b5:9a:1a:64:16:e3:ba:69:3c:dc:0d:a7:d4:14:e4:
0d:52:51:2c:15:4c:68:3b:07:a8:dc:1c:8a:41:05:87:86:f6:
36:f4:51:64:de:da:ea:f3:f0:e7:7d:79:80:9e:60:a7:4c:99:
f5:ff:4b:ef:08:99:40:b3:86:37:c6:f0:d1:d1:de:27:0d:3e:
66:4b:8d:3c:22:ef:af:d7:c9:9c:92:3f:91:f6:04:41:4f:5c:
f2:9d:fd:17:d9:2e:b4:21:d5:8c:f1:6d:62:0f:e5:76:65:09:
3e:ff:63:81:9b:4b:6b:f5:fa:1c:ef:7a:18:96:09:e9:8b:d4:
86:7a:ca:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 09:10:26 2025 by rpki-client