This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa
File: 3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa (raw, json)
Hash identifier: JZhFCOtqRPDL4S1+iP3Z80JUrKeze/UyBubmdh0K4ew=
Subject key identifier: BD:90:2F:FF:ED:EA:C2:9E:7E:15:E3:4B:92:82:2C:57:D0:F6:BE:74
Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Certificate serial: 010D0C9F4328584C2426433E321864578F5CDF38
Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa
Signing time: Wed 10 Dec 2025 14:00:38 +0000
ROA not before: Wed 10 Dec 2025 14:00:38 +0000
ROA not after: Tue 10 Mar 2026 13:00:38 +0000
asID: 14230
IP address blocks: 2607:fb20::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:24:26:43:3e:32:18:64:57:8f:5c:df:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Validity
Not Before: Dec 10 14:00:38 2025 GMT
Not After : Mar 10 13:00:38 2026 GMT
Subject: CN=20b68d6a-b2ae-4b3f-ada6-47c878da9e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:23:88:9c:67:ca:67:84:72:16:0d:4c:18:
10:2a:b2:15:15:6d:a9:58:23:c3:88:7b:7b:b6:4a:
f2:fa:00:16:02:ce:27:87:ab:02:c3:0d:f7:53:1c:
47:53:f3:f8:a5:c2:de:42:b5:ce:4a:55:be:2c:07:
16:14:2e:3f:64:4d:d8:b9:0e:b4:ba:b3:92:2d:ac:
7a:1b:f0:b6:dd:98:e3:7f:2e:e7:4e:b2:15:69:2a:
1b:cc:7e:ea:da:7a:37:aa:59:62:0c:6f:c0:73:98:
1e:33:18:69:c6:0f:69:c0:b2:8c:45:06:2a:60:05:
19:27:f0:13:f7:26:3e:4f:11:86:42:dd:ad:d7:1c:
c3:d2:7a:da:c8:01:09:22:3b:28:78:25:43:83:16:
0f:43:99:4e:92:04:a5:df:25:0e:50:41:2d:36:9c:
c8:09:01:ca:4a:21:12:de:5d:15:5b:1f:b6:96:1e:
13:f8:32:f6:ed:4a:02:ea:8e:65:b2:05:7f:61:e9:
1c:bc:51:e3:2b:77:cc:0a:84:c4:01:f3:2b:9a:56:
17:3e:45:54:4c:57:cd:4a:21:6e:ce:01:38:0d:3e:
ed:53:5d:0c:12:ec:c8:0c:20:56:1d:8f:b2:88:65:
49:60:b3:b2:be:b8:a6:d4:35:37:84:d5:07:c9:fb:
f8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:90:2F:FF:ED:EA:C2:9E:7E:15:E3:4B:92:82:2C:57:D0:F6:BE:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
X509v3 Authority Key Identifier:
keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:fb20::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:a9:f7:c0:d9:55:c5:89:1c:4a:f3:1e:96:9a:dd:76:ec:5c:
2b:39:9d:6c:6f:0f:25:b4:0d:37:4b:01:4e:1b:6c:d9:63:8a:
82:7c:af:a8:e9:00:c0:0b:3e:1e:47:e8:c1:dc:94:7e:a3:80:
c9:8b:c9:74:49:e8:d0:de:34:af:d1:7c:65:df:34:02:24:f1:
91:dd:c1:18:28:38:f5:63:e1:2d:1e:2c:0d:16:20:9b:89:f3:
d4:f9:cb:b1:d6:f0:84:f5:90:6a:aa:fc:66:1e:1d:5c:cd:d6:
99:54:e7:06:75:9e:88:0e:ea:9d:ea:4c:49:eb:d2:e2:9f:64:
7a:d0:50:af:09:4d:78:f2:ba:00:15:8a:8b:a9:5b:44:76:c4:
6b:87:45:0c:32:46:fd:78:cb:41:eb:3f:f5:26:d3:1b:aa:8b:
98:8b:95:85:cd:32:d4:e9:0a:a4:b6:39:a8:9a:f2:01:90:3e:
77:5f:67:1d:ea:db:89:14:69:f4:52:8a:71:ac:aa:db:37:81:
ed:d2:ad:4c:ef:84:fc:5d:77:c8:4c:ae:ce:5a:64:d0:55:f0:
52:31:d5:49:37:ab:4d:35:f4:80:8c:e4:33:42:4f:17:79:be:
92:d9:a8:e1:ca:05:67:de:9e:31:22:10:34:e4:1f:83:17:37:
e3:af:b7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:10:18 2025 by rpki-client