This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/a0664a04-65f3-3769-8cf8-3417add96a9b.roa
File: a0664a04-65f3-3769-8cf8-3417add96a9b.roa (raw, json)
Hash identifier: eoOYohv9bxA4FISmpQJtz1Nwatqfp2OSHSfPY1pI9ag=
Subject key identifier: 5B:14:B5:55:CE:1D:9B:04:7F:EC:1F:00:6B:61:C4:8C:36:98:B6:A2
Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Certificate serial: 010D0C9F4328584CA705638BBEE7038BB8653300
Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/a0664a04-65f3-3769-8cf8-3417add96a9b.roa
Signing time: Sat 06 Dec 2025 02:00:31 +0000
ROA not before: Sat 06 Dec 2025 02:00:31 +0000
ROA not after: Fri 06 Mar 2026 02:00:31 +0000
asID: 14500
IP address blocks: 2607:72c0:200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 31 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a7:05:63:8b:be:e7:03:8b:b8:65:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Validity
Not Before: Dec 6 02:00:31 2025 GMT
Not After : Mar 6 02:00:31 2026 GMT
Subject: CN=7c6b558b-12c5-46cb-b9d8-33bbb5c8bcc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:03:84:4f:40:4a:c4:ee:02:88:87:75:f4:0a:
e6:ad:d9:b4:0e:14:d7:f8:41:a0:61:d0:0f:a7:53:
44:12:d2:b6:1c:d7:ee:1e:ce:ac:d5:f4:df:6f:06:
5d:eb:c0:c1:af:97:30:84:e8:2d:85:a2:8e:2f:34:
06:a7:95:f4:09:e1:b8:8f:64:3a:17:3d:dc:a8:84:
08:3a:ca:ce:b5:0a:0e:33:c7:43:ef:85:78:42:7f:
21:75:9f:18:79:c4:8b:89:b7:15:2d:bc:d5:b0:ea:
35:89:3e:54:7d:81:63:d2:71:db:30:1d:e0:ae:d2:
67:5e:aa:df:56:bf:16:52:c5:ce:08:09:b0:c6:ba:
b8:61:a3:80:0b:90:6a:52:ae:d2:b3:3a:97:c9:f6:
00:e6:61:96:0f:56:91:95:01:86:ab:07:98:e6:21:
09:2c:f2:47:3c:73:ef:61:34:74:a1:5d:ec:49:14:
95:42:bd:3d:ff:85:a1:53:aa:f3:2f:66:67:8b:35:
70:43:a4:12:11:39:8f:c9:74:e8:85:07:1f:a2:57:
32:ed:fa:55:d2:fb:26:d7:ac:71:64:4f:9c:af:81:
65:28:62:9f:48:24:50:c1:c2:ce:12:de:56:4a:29:
ed:f5:f9:cf:72:c6:c0:64:5e:58:54:b6:b8:bd:63:
42:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:14:B5:55:CE:1D:9B:04:7F:EC:1F:00:6B:61:C4:8C:36:98:B6:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/a0664a04-65f3-3769-8cf8-3417add96a9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl
X509v3 Authority Key Identifier:
keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:72c0:200::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:ec:4d:05:e1:b3:5e:bf:4f:df:0d:c9:c1:99:55:0b:88:df:
f5:eb:34:d6:af:5e:86:68:eb:47:f2:23:f8:86:04:ea:5d:34:
c9:fc:99:1a:c3:17:ce:2e:e9:1d:b6:58:49:af:42:f7:f4:1e:
15:75:15:93:d6:ff:ae:e0:8e:ac:1f:aa:f4:dc:48:7b:23:2d:
9c:76:b4:d4:71:a5:68:b3:fa:57:9c:ad:04:ac:f7:fe:96:74:
5a:74:0b:cb:38:14:1c:d8:45:78:2d:1b:e3:09:19:35:2a:e9:
7e:ea:74:d7:6e:c2:ef:36:13:fb:90:9e:a1:3b:87:c9:dc:a4:
6d:6c:48:9e:fb:e1:fe:65:16:7f:f7:95:6a:98:e8:93:a7:e1:
8c:6c:b6:a3:5d:5a:32:5b:0f:4b:5f:bb:d0:89:02:e7:d6:fd:
1b:f4:9a:83:c2:11:56:e2:2b:52:6e:bd:81:4c:6d:77:ca:f6:
d2:a0:7a:c4:67:2b:4b:59:61:bd:29:f1:2b:01:fc:f1:19:ca:
f4:e7:69:5c:26:c8:35:d7:86:83:25:49:38:14:3c:37:c7:88:
3b:ae:68:7e:fa:1f:93:6d:64:0c:a9:dd:0c:02:5f:95:03:1e:
9a:a8:19:08:64:1a:bd:65:44:8d:bd:45:15:52:40:d3:e2:46:
d0:8a:07:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 14:56:06 2026 by rpki-client