This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/9ebd54a0-f82c-3fd7-bfa2-fd9f21b958b1.roa
File: 9ebd54a0-f82c-3fd7-bfa2-fd9f21b958b1.roa (raw, json)
Hash identifier: yitpQZzDpB6DdscSs/pbK2zjnSBzc0ppihV4sWqvvJs=
Subject key identifier: 2F:10:52:08:9D:C8:8C:28:13:58:09:46:CE:4A:B0:D9:E6:78:AE:A4
Certificate issuer: /CN=1f1cdae5-b041-4993-963d-6f855f74efa1
Certificate serial: 010D0C9F4328584BC53B03EA29FDAC196791D658
Authority key identifier: 3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/9ebd54a0-f82c-3fd7-bfa2-fd9f21b958b1.roa
Signing time: Thu 06 Nov 2025 14:00:41 +0000
ROA not before: Thu 06 Nov 2025 14:00:41 +0000
ROA not after: Wed 04 Feb 2026 14:00:41 +0000
asID: 54082
IP address blocks: 2607:8040::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c5:3b:03:ea:29:fd:ac:19:67:91:d6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1cdae5-b041-4993-963d-6f855f74efa1
Validity
Not Before: Nov 6 14:00:41 2025 GMT
Not After : Feb 4 14:00:41 2026 GMT
Subject: CN=8d6998a6-08b0-448c-889e-3efc7179804d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:27:12:bf:45:6d:e7:5f:62:99:a0:86:4c:de:
5a:a1:f1:af:8d:1c:78:e7:3a:0d:3d:c1:04:e4:d1:
d4:07:24:d8:35:a1:62:cf:10:a6:2a:f3:e9:c5:b9:
1d:2b:f0:44:51:fe:63:4b:66:3d:d9:d1:41:13:8d:
96:31:df:6b:ad:a9:20:8f:f9:6d:22:bb:b3:24:98:
48:70:ef:44:68:8e:f3:8d:59:aa:6b:52:4f:3e:9f:
85:32:d4:6b:df:08:3a:bb:b2:35:de:9d:51:f4:84:
f0:9f:74:26:03:e9:72:06:aa:b9:bd:be:47:3f:15:
09:07:9a:2b:44:4a:ba:c0:20:f0:66:fe:dd:58:37:
b7:d3:b7:ac:da:b4:d1:1c:21:a3:03:fa:bb:ba:dc:
ca:ef:a2:b2:42:15:65:33:21:9f:11:18:b8:ed:5b:
d9:f5:c4:53:39:5c:50:4c:87:35:37:4b:6d:59:c0:
0b:b3:38:be:17:1f:42:d8:26:21:b5:c7:39:ca:93:
87:c5:f1:54:e5:9d:25:8d:5f:d9:c4:db:da:be:bd:
96:35:3e:4e:f0:03:65:dc:c1:41:f0:39:f4:8f:db:
22:1f:ef:83:d7:11:d9:19:f1:63:15:81:37:58:cc:
df:8a:b7:88:6c:e6:4a:bc:05:a1:42:9e:e2:6c:ca:
3f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:10:52:08:9D:C8:8C:28:13:58:09:46:CE:4A:B0:D9:E6:78:AE:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/9ebd54a0-f82c-3fd7-bfa2-fd9f21b958b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.crl
X509v3 Authority Key Identifier:
keyid:3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8040::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:35:b3:2f:e8:78:ea:f4:c4:58:f2:46:e6:3e:f6:e3:00:45:
71:c4:43:e8:79:e2:07:c2:57:de:c3:85:51:63:00:cc:d4:6f:
68:4e:53:79:37:50:40:7c:09:43:ac:09:34:f0:3d:70:35:3b:
71:96:43:e0:fd:7b:88:c6:c0:7d:d3:d6:7d:ea:ab:83:d2:a5:
eb:53:9b:97:df:26:2f:bd:50:b8:4c:2e:79:48:7d:91:7d:ce:
50:b7:fe:17:2e:5d:f5:8c:6e:47:07:fb:65:5b:d4:8e:fc:d3:
30:ea:23:4b:b1:52:3d:8b:52:69:94:aa:0b:37:3c:b7:66:d7:
a6:8a:09:60:42:4c:09:79:ff:6a:3f:15:95:4f:94:08:22:f3:
e1:14:fd:32:67:c3:84:98:1c:7f:78:8c:54:56:16:c6:51:fa:
0f:f7:9b:21:83:8c:fe:a6:83:28:ea:20:6f:31:b6:05:74:18:
23:8c:11:9d:b2:86:43:3f:1c:97:00:56:e9:37:69:1f:5f:46:
dc:89:40:c1:e4:28:ee:1f:80:04:31:74:82:e3:d4:04:74:82:
b7:6f:38:b7:84:53:40:3d:6c:3b:a5:4c:80:8a:c9:d0:ed:9f:
69:c2:c7:f7:41:3a:11:3f:67:a3:16:4c:e7:ce:a9:6e:81:bb:
3a:b6:bd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:27:06 2025 by rpki-client