This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/68b0539d-9001-3fdf-a61a-75dbfde2df07.roa
File: 68b0539d-9001-3fdf-a61a-75dbfde2df07.roa (raw, json)
Hash identifier: Uapg1ZBwAb8vP5g+ZKRspQljOUN5vfWUacPVi0iVsRk=
Subject key identifier: 8D:98:3C:97:8E:CF:51:9D:B8:8A:38:5F:FF:D6:20:7D:86:91:18:E6
Certificate issuer: /CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb
Certificate serial: 010D0C9F4328584C7681651658B27484C7776F40
Authority key identifier: 22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/68b0539d-9001-3fdf-a61a-75dbfde2df07.roa
Signing time: Fri 09 Jan 2026 02:00:31 +0000
ROA not before: Fri 09 Jan 2026 02:00:31 +0000
ROA not after: Thu 09 Apr 2026 01:00:31 +0000
asID: 19905
IP address blocks: 2604:fb80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 21 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:76:81:65:16:58:b2:74:84:c7:77:6f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb
Validity
Not Before: Jan 9 02:00:31 2026 GMT
Not After : Apr 9 01:00:31 2026 GMT
Subject: CN=bc1bf96d-bbd5-44cc-a914-f3cc6c909d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8a:81:de:b0:df:65:6e:59:55:8a:0c:ce:3f:
2a:b2:c6:1e:7a:ce:5b:de:e6:d4:be:c8:3d:38:36:
0a:00:d9:d7:ec:90:72:8e:54:b9:8c:ec:c1:a2:c4:
4e:0d:1e:8e:79:81:3d:9e:86:1d:01:31:dc:c1:d9:
b3:3e:14:02:49:a3:d0:04:98:ad:b0:5d:48:a4:49:
43:41:7e:3d:85:f0:6e:4c:05:84:0a:0d:8a:7e:69:
a2:ae:49:64:ff:c2:6a:9a:92:92:4a:17:3e:9c:b2:
f1:87:68:2e:24:b9:0f:07:4e:73:55:c1:a2:2e:75:
7f:e4:82:80:b6:9a:16:e1:15:45:a8:d7:bc:d0:e0:
de:53:2b:e2:33:78:15:15:82:1e:0f:61:d1:0d:e3:
17:1c:99:d4:6e:6d:8f:fb:43:60:91:2e:9e:50:c3:
03:bd:41:af:a3:d7:98:c4:52:a3:ed:bd:8e:7c:1c:
12:a6:d3:a6:91:22:fb:be:b3:17:d5:88:cc:8c:52:
65:ca:5e:37:44:f4:a9:37:13:ae:f3:14:b0:aa:75:
39:53:3e:2c:a9:9f:a2:9b:12:6c:83:84:da:8c:be:
43:86:9f:5e:8a:91:18:cc:30:83:95:ec:a8:3e:d6:
59:9b:b3:8c:4f:11:46:f7:cd:17:cd:4b:ed:5c:5d:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:98:3C:97:8E:CF:51:9D:B8:8A:38:5F:FF:D6:20:7D:86:91:18:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/68b0539d-9001-3fdf-a61a-75dbfde2df07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl
X509v3 Authority Key Identifier:
keyid:22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:fb80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:d4:f4:17:1d:7f:ae:4d:b4:35:c3:58:2c:d4:ca:5b:38:a8:
20:af:a2:1c:c8:e8:cb:b3:fa:ec:06:85:52:97:9c:cf:cf:f5:
4e:fe:8a:17:de:71:f3:68:74:51:28:b6:5f:5a:4c:9f:f0:24:
b5:f7:0b:10:ce:e5:41:73:61:a2:26:ab:89:da:75:c3:76:e4:
98:2e:18:a0:09:f5:7a:cf:70:05:1e:b8:2a:bb:d6:98:2a:6c:
bb:ae:42:cc:68:84:2d:f0:0e:83:d6:fb:2e:29:77:48:9d:fa:
45:9d:ac:7d:6a:cc:26:5b:69:9a:96:0a:65:05:57:4d:1b:70:
ec:fc:86:ca:30:57:67:bf:4c:da:b7:bd:91:b4:c2:7d:94:33:
ab:dc:05:44:23:93:e4:41:7f:04:92:3a:c8:7f:80:7f:3c:3d:
f0:93:48:8e:b0:59:6d:12:32:f4:aa:b5:e2:fa:e7:70:c1:10:
31:6e:c4:28:0f:15:03:0d:16:d5:b6:94:0a:1f:63:3a:47:9d:
ab:94:38:ff:4f:df:ff:39:0f:f5:4f:c6:dd:72:92:42:95:fc:
64:45:44:7a:e5:8f:bb:b0:ff:fd:5c:5f:0d:7b:fc:0b:b1:6b:
2a:4f:43:c2:47:12:8e:e7:2e:fe:ef:96:00:9b:9e:d8:02:9d:
58:bd:23:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:24:40 2026 by rpki-client