This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1c3fd989-51bc-333f-911d-75aaf834352c.roa
File: 1c3fd989-51bc-333f-911d-75aaf834352c.roa (raw, json)
Hash identifier: tjWoifM7i+EihIB1thtzNpc9HIbaxjD7lEB3K+uYptg=
Subject key identifier: 0F:A4:E4:0D:66:69:C4:D9:75:00:31:46:5B:0A:B8:4C:70:0D:39:2F
Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial: 010D0C9F4328584BEAEB2F43A934A950270EFCC0
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1c3fd989-51bc-333f-911d-75aaf834352c.roa
Signing time: Thu 20 Nov 2025 02:00:30 +0000
ROA not before: Thu 20 Nov 2025 02:00:30 +0000
ROA not after: Wed 18 Feb 2026 02:00:30 +0000
asID: 393885
IP address blocks: 2604:4a00:b000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Dec 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ea:eb:2f:43:a9:34:a9:50:27:0e:fc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Validity
Not Before: Nov 20 02:00:30 2025 GMT
Not After : Feb 18 02:00:30 2026 GMT
Subject: CN=abfc35bf-bc66-48d5-a248-7453a7105e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:70:50:ad:9b:d1:3d:8f:8c:af:3f:3f:49:f4:
b9:79:32:cc:fb:16:75:7d:00:c4:b4:2d:69:54:2c:
ff:5a:2a:b1:1b:1e:ab:ff:a3:38:07:ef:36:5e:97:
82:ee:fb:55:e8:7f:2e:40:f9:a7:00:1b:a0:5e:36:
cb:52:91:01:d9:ce:00:f9:2e:c2:b0:f0:7b:bc:88:
1b:18:20:3a:be:09:9f:8e:1d:c8:fc:a3:48:20:28:
9c:63:40:89:ac:14:90:ca:fe:53:de:79:4f:29:08:
70:0e:1a:65:47:b5:13:75:e5:55:c2:c9:19:db:49:
d6:2c:0b:41:85:94:9d:56:72:fa:87:31:a8:57:6e:
05:53:a5:0f:24:1d:25:f8:94:0d:7e:e8:97:22:a7:
1a:cc:bd:1b:ed:1a:6d:c0:04:27:21:31:76:26:de:
db:ef:64:b7:7d:68:a5:7a:71:e7:c3:b7:03:2e:08:
15:df:05:26:3c:0b:fb:50:6e:a2:ed:80:a6:4e:02:
38:5d:68:b9:27:e9:89:34:dc:f9:8e:85:f5:cf:e1:
4e:31:92:c6:7c:b8:fa:35:be:97:72:63:59:e4:c9:
69:a7:c5:9b:a7:88:b2:3b:28:a1:dc:ad:19:68:fa:
35:14:b6:04:c1:9b:7a:be:62:46:6b:0d:82:45:4d:
e7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A4:E4:0D:66:69:C4:D9:75:00:31:46:5B:0A:B8:4C:70:0D:39:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1c3fd989-51bc-333f-911d-75aaf834352c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
X509v3 Authority Key Identifier:
keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:4a00:b000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:6e:12:0a:82:38:9e:26:55:c6:ad:00:2e:c9:3d:2b:6d:2b:
a5:33:36:68:65:af:89:4b:59:c1:28:39:c7:f3:43:6a:03:48:
cb:8a:09:fa:c4:99:b8:96:0b:ad:c6:c7:8b:62:3b:ac:17:a0:
57:7d:a5:1a:73:57:b2:4d:c6:58:2c:a1:4f:e7:40:f0:16:0b:
08:bf:66:e9:f2:15:cf:51:92:b9:e2:70:a0:7a:08:a4:0c:a8:
ab:ec:1a:7d:2b:6b:a2:b7:a9:80:c0:e1:fb:d5:94:1f:5b:4c:
2c:b7:3c:34:d7:1b:af:ab:3d:ae:2d:75:06:3d:cc:5c:d7:f3:
d3:09:aa:56:6d:42:95:a4:8a:d2:a2:cb:4d:27:85:1b:e0:ad:
77:f3:03:2d:d5:b8:89:c0:f0:36:26:8a:51:2a:88:51:07:1c:
75:8b:bd:c1:07:81:c5:6a:6e:75:71:04:88:07:28:82:1d:96:
9b:bf:90:2a:8e:d6:11:b0:06:d2:76:e8:12:4f:2c:f9:ce:03:
ff:dd:3a:51:25:f1:c6:a3:cb:ef:7c:cf:4a:fd:a2:f5:f4:f3:
ac:22:3a:c6:1d:9d:40:4d:8a:4c:8f:9e:18:c6:4c:bb:96:7e:
6b:d5:87:de:0f:0e:90:f6:b8:cd:eb:e4:d9:9e:3a:dc:78:7d:
6b:39:47:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 07:48:44 2025 by rpki-client