This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85521fc9-726a-3f50-9e0b-e9325c1b475a.roa
File: 85521fc9-726a-3f50-9e0b-e9325c1b475a.roa (raw, json)
Hash identifier: 7bBvcavZ+9Qw0Pdav4+QiqpxTiv8X7n+/LQNbRozaGs=
Subject key identifier: 8B:7E:04:87:AD:E6:B5:4A:79:22:C2:DE:2C:77:4C:37:1B:37:C6:C5
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584C794C735DA97AB3B8F49038A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85521fc9-726a-3f50-9e0b-e9325c1b475a.roa
Signing time: Sat 10 Jan 2026 02:00:31 +0000
ROA not before: Sat 10 Jan 2026 02:00:31 +0000
ROA not after: Fri 10 Apr 2026 01:00:31 +0000
asID: 19523
IP address blocks: 2001:470:2a3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:79:4c:73:5d:a9:7a:b3:b8:f4:90:38:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 10 02:00:31 2026 GMT
Not After : Apr 10 01:00:31 2026 GMT
Subject: CN=e9bfa73e-d8a2-47ee-aefd-761f03e8362c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c5:d1:39:48:1f:4e:e2:d9:e0:ec:7b:2a:5f:
54:d6:bb:fe:38:88:03:d4:aa:07:d7:c1:cb:53:36:
0a:5f:a0:f0:a8:e3:df:25:5a:0b:30:ba:41:25:94:
30:ea:b2:ab:8e:96:77:87:aa:99:36:c3:e6:16:5b:
6e:63:53:1f:2e:c1:be:2c:25:c7:c6:20:9f:6f:95:
6e:16:32:78:48:a6:5a:ff:1d:a7:d6:b5:57:0d:61:
64:6b:55:32:f3:ba:71:38:51:04:3c:13:fa:7a:f0:
85:7f:cc:35:ee:1b:07:af:14:06:3c:2f:a0:ee:a1:
d3:a7:2f:08:63:25:6b:29:61:24:4c:58:5d:16:e1:
4b:c2:01:5a:e0:91:b1:f1:81:2c:b8:30:73:af:6e:
bf:84:ee:2d:a2:a4:b6:9a:57:95:fe:71:88:28:72:
b1:75:87:ee:87:a3:5f:db:af:22:c4:50:33:d8:a2:
22:5c:de:b4:f2:65:92:55:53:95:64:c6:b2:33:15:
79:49:3a:bf:f4:39:f0:df:b0:8f:e9:ea:c6:e3:85:
04:c6:45:65:f2:c8:b6:ed:28:5e:11:f6:ce:5d:11:
48:fe:6f:fa:f2:2d:2d:99:c5:cc:77:1c:3c:33:be:
09:b8:4a:ed:7c:b2:f5:49:bf:2c:4c:79:62:8d:cf:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7E:04:87:AD:E6:B5:4A:79:22:C2:DE:2C:77:4C:37:1B:37:C6:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85521fc9-726a-3f50-9e0b-e9325c1b475a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2a3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:59:9f:f3:7b:73:12:32:a4:c4:1b:b1:15:d4:86:92:2c:16:
ad:8b:8a:84:93:36:66:46:99:51:44:04:b0:1d:81:71:aa:da:
17:0f:b9:d4:2c:77:0d:8c:fb:c1:fa:71:d7:e6:ea:6c:eb:ee:
61:97:81:3a:55:28:1c:67:d4:90:f0:99:c3:ab:92:e2:f8:70:
de:a6:a1:3e:22:8d:24:b0:f0:ae:ff:93:4d:ea:8b:5f:09:e0:
8f:e9:38:1d:09:6c:0e:c9:58:4f:dd:9d:a1:c4:73:17:f2:9d:
57:c9:70:d6:49:d2:7c:08:7a:7d:f5:12:fe:1d:61:a1:b9:43:
14:8b:1b:33:ec:46:05:50:fa:df:bc:10:a2:c5:31:29:f6:2f:
34:77:4a:07:85:b0:c7:a8:49:2d:4e:3a:a7:6b:45:31:c2:7f:
b5:d7:7a:42:01:03:d9:ec:0c:9e:9b:55:05:de:e5:dc:a3:5d:
95:aa:f4:0f:8f:fb:82:7e:e3:6f:3e:a5:99:6a:af:5e:f5:b3:
51:bc:89:45:42:d0:05:6a:81:88:c0:a9:23:52:68:ed:0c:6b:
28:68:35:80:a9:54:e5:5b:9a:84:f8:ba:08:20:ef:da:88:d9:
fa:a0:04:24:21:65:cd:3d:86:a7:d6:0e:2d:ad:4a:c7:27:31:
16:a0:81:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:05:10 2026 by rpki-client