This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8e287c91-53fc-393f-bc7e-f4e75f342bf7.roa
File: 8e287c91-53fc-393f-bc7e-f4e75f342bf7.roa (raw, json)
Hash identifier: +uuvqSlrPkDb1jITeKmqGklzu9Fhc9+dqTeUqCZt6RY=
Subject key identifier: 65:F3:3E:EE:70:EB:98:E9:D8:F1:26:A6:98:03:C8:92:2D:E3:BC:BA
Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial: 010D0C9F4328584BE56FEC91EF4C3A8B2531BB80
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8e287c91-53fc-393f-bc7e-f4e75f342bf7.roa
Signing time: Tue 18 Nov 2025 02:53:20 +0000
ROA not before: Tue 18 Nov 2025 02:53:20 +0000
ROA not after: Mon 16 Feb 2026 02:53:20 +0000
asID: 16509
IP address blocks: 2620:147:c35::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:e5:6f:ec:91:ef:4c:3a:8b:25:31:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Validity
Not Before: Nov 18 02:53:20 2025 GMT
Not After : Feb 16 02:53:20 2026 GMT
Subject: CN=2a960253-8358-4386-9da3-5146d705e949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:d5:b1:45:9c:f8:0f:86:2e:b3:a2:de:d5:
de:4d:14:13:83:95:a9:8c:f9:58:75:8d:75:2d:55:
08:90:6d:f0:3f:2e:c3:39:ad:7a:dc:65:55:b5:f0:
63:72:ed:7d:fe:92:f7:d1:b1:5d:ff:95:b5:40:8d:
a6:17:fa:f6:e5:15:d5:55:48:d2:8c:df:b9:18:aa:
3f:62:bf:1c:8d:57:93:02:e4:00:f7:94:e9:d7:d2:
52:a3:e7:58:27:4d:55:e8:0a:16:94:f2:50:b5:91:
7a:99:ad:9e:01:71:a3:12:01:dc:3f:8f:67:4c:42:
bb:7d:b2:1e:f5:5a:8b:8f:5d:1d:e7:98:d3:a8:2f:
08:ce:6d:58:b2:f1:90:3e:04:23:8b:72:33:71:bc:
9a:c2:8f:98:6b:74:20:2e:a6:53:b1:98:a1:3d:26:
70:c8:56:63:32:6b:70:2e:52:71:75:b0:c8:43:90:
21:33:0a:f8:57:87:03:05:44:bf:f9:39:64:d8:3c:
7b:11:6a:1d:af:4d:83:c8:c9:94:a6:b0:77:48:32:
1f:8b:32:0e:17:3b:4a:c2:96:70:ed:2f:38:97:d7:
b2:f1:c0:0f:91:2e:6d:71:7b:34:06:fd:fd:e3:64:
0b:cb:3d:f0:47:68:65:e7:81:93:82:79:7f:be:02:
93:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F3:3E:EE:70:EB:98:E9:D8:F1:26:A6:98:03:C8:92:2D:E3:BC:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8e287c91-53fc-393f-bc7e-f4e75f342bf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
X509v3 Authority Key Identifier:
keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:147:c35::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:be:0c:f5:3a:9c:c1:f2:8d:eb:e1:42:21:1c:98:c8:c8:b9:
24:dc:32:a8:12:dd:41:a3:38:fc:fe:1a:42:af:43:4b:85:63:
27:e8:14:93:4a:d9:34:88:e8:ba:0c:42:a7:aa:fa:da:f8:82:
03:2f:1a:a0:07:f5:e8:13:af:fe:d3:03:a7:1c:b5:5a:ad:7e:
0f:33:fd:d3:34:7b:db:1d:dd:8d:8a:73:88:6d:79:ba:3d:b1:
6e:9c:af:e5:70:68:9d:89:47:7c:a8:ed:86:4c:f8:0c:5e:0a:
c6:11:a5:80:cd:9a:1a:35:17:01:34:f3:01:96:a4:1b:01:c4:
54:59:da:f7:64:85:37:6e:e6:d7:04:94:f6:0b:ba:62:a4:4f:
f9:4d:70:91:af:4b:6b:13:a2:00:3f:ec:50:08:45:74:a5:9b:
9c:64:ba:45:02:95:49:58:ad:1a:51:31:a0:c3:5a:d2:65:c1:
de:34:f7:ec:93:e5:a0:ef:09:59:91:ec:a7:a4:49:f7:4d:f2:
bc:41:d1:7e:74:e1:37:d4:eb:b6:09:40:f4:3c:87:48:9d:db:
ef:a1:b5:9d:18:e0:8d:55:9d:9e:2c:72:94:3c:18:3b:95:46:
ef:c7:55:39:b5:de:57:39:54:a7:8b:78:29:9f:ea:21:35:ef:
ad:96:94:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 09:10:23 2025 by rpki-client