This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/acfb0876-e3b9-3ba1-bc41-eae3b982081a.roa
File: acfb0876-e3b9-3ba1-bc41-eae3b982081a.roa (raw, json)
Hash identifier: Y7RrktBwFm0ZNA4Tc63HmXbcjqCluFfE3HBZTJ7NvrQ=
Subject key identifier: B2:75:0A:0B:CF:E8:D8:CC:2F:86:0C:4D:11:35:19:65:4C:30:89:D1
Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial: 010D0C9F4328584C4A8BB04E030168579A8CB080
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/acfb0876-e3b9-3ba1-bc41-eae3b982081a.roa
Signing time: Wed 24 Dec 2025 08:05:55 +0000
ROA not before: Wed 24 Dec 2025 08:05:55 +0000
ROA not after: Tue 24 Mar 2026 07:05:55 +0000
asID: 54994
IP address blocks: 2607:3f40:ff36::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 21 Jan 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4a:8b:b0:4e:03:01:68:57:9a:8c:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Validity
Not Before: Dec 24 08:05:55 2025 GMT
Not After : Mar 24 07:05:55 2026 GMT
Subject: CN=b2157ba2-be30-441a-996f-9ec995021ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:92:92:f8:ff:8b:77:c4:d7:df:19:12:a0:d3:
d3:22:df:ac:1d:23:2b:fd:3f:25:f4:5c:33:cb:63:
e2:22:2c:76:57:73:3e:02:be:48:be:c2:a3:d1:47:
59:43:a4:6b:06:09:a7:6d:97:a7:4a:c9:91:69:59:
6a:38:ad:28:15:05:92:31:ed:1f:18:57:f0:b9:d0:
7a:35:31:90:2d:18:12:54:ad:24:6f:15:b6:9e:e3:
48:fd:26:d3:49:04:a9:cf:75:23:39:8e:d4:32:3e:
70:83:6e:ee:bc:05:ee:f8:66:5a:85:32:82:41:e3:
f2:25:b1:64:7c:49:82:92:79:d6:8d:75:0a:8a:8c:
80:cd:00:d7:5e:1b:2e:3b:d5:82:40:b9:08:91:f3:
13:a2:66:39:e1:c9:15:fc:7b:2e:fc:80:cb:78:64:
e0:13:c8:a2:2c:e0:b1:e5:eb:bd:49:7b:ce:88:7d:
17:47:75:41:a5:5e:69:27:a2:7a:3b:6c:8a:f7:b1:
c7:f6:55:09:2b:5d:67:18:d7:41:71:23:c3:24:69:
0c:fb:36:ec:02:0c:76:58:c1:3f:ee:2e:7d:6e:39:
f7:44:93:b9:07:96:8c:bf:58:1c:39:1e:f4:91:7c:
b9:17:be:b3:58:78:07:a4:9c:de:99:14:53:7b:4e:
11:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:75:0A:0B:CF:E8:D8:CC:2F:86:0C:4D:11:35:19:65:4C:30:89:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/acfb0876-e3b9-3ba1-bc41-eae3b982081a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
X509v3 Authority Key Identifier:
keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:3f40:ff36::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:ed:d9:03:62:2e:ad:ef:4c:e9:aa:ae:e6:17:1d:64:d1:9b:
92:65:84:c7:23:40:64:b5:64:85:6e:5f:a2:b2:86:46:f2:17:
c1:26:57:9d:f6:cb:d6:37:99:7f:4f:b0:7a:07:87:2b:88:8d:
ad:72:73:f1:3e:cc:00:93:42:45:fe:31:e8:b4:86:f5:2d:a1:
0f:75:32:7b:d5:20:ed:87:bc:95:08:b8:37:84:06:30:a0:96:
1c:47:ca:c1:4e:af:dd:bc:66:dc:da:99:9b:fc:a3:df:dc:d6:
61:30:02:4b:97:02:f0:e0:66:b5:c0:84:78:95:0d:5c:72:3e:
1d:06:4c:3c:fe:c9:c4:80:89:33:f0:ad:d5:06:12:f0:13:5d:
44:57:e2:8a:fd:2a:23:38:08:b1:ee:55:d0:be:f5:e1:02:dd:
fe:33:e7:2a:39:ba:ff:1e:53:b8:c6:2a:62:de:e4:ae:71:cf:
84:25:fd:a4:ff:ac:ee:da:91:65:16:d5:c1:11:00:39:fa:05:
ac:27:d1:e2:06:53:8f:af:5a:b9:8c:80:6a:63:fa:ea:6b:a0:
0d:44:8f:63:0b:5d:08:e8:29:ee:95:27:e8:f9:52:f8:86:d8:
13:73:a4:95:eb:c5:3f:b8:30:d4:55:7a:d9:7a:f9:94:b5:cc:
d6:22:8c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 07:47:13 2026 by rpki-client