This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/857f8519-5259-3051-b3a3-cbed201e7089.roa
File: 857f8519-5259-3051-b3a3-cbed201e7089.roa (raw, json)
Hash identifier: 1CwC+G0ZoN0WPHM+LeDN71gsLL232Jm8eDHOJaHk8G4=
Subject key identifier: 66:89:9C:98:CF:C8:64:E2:43:4C:84:6E:0C:67:C2:50:90:CC:65:3B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584C593134D8C131FAB09E2955C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/857f8519-5259-3051-b3a3-cbed201e7089.roa
Signing time: Mon 29 Dec 2025 14:00:38 +0000
ROA not before: Mon 29 Dec 2025 14:00:38 +0000
ROA not after: Sun 29 Mar 2026 13:00:38 +0000
asID: 213291
IP address blocks: 2001:470:453::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 11 Feb 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:59:31:34:d8:c1:31:fa:b0:9e:29:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 29 14:00:38 2025 GMT
Not After : Mar 29 13:00:38 2026 GMT
Subject: CN=49785299-5013-47c6-86d9-4466a6b52d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bd:1d:60:2b:6b:90:28:1b:7e:7c:91:a3:8f:
d7:7a:4d:e8:70:78:12:4e:87:72:75:de:ce:3c:35:
ac:be:16:c7:cf:ef:7c:bd:79:09:e2:a9:42:12:f0:
b4:3f:f6:51:19:3c:0a:80:86:b7:93:82:3b:42:57:
cf:c1:9b:ff:86:7f:0f:86:7a:92:35:16:01:86:00:
ff:d0:60:07:64:f9:f3:ab:e0:ea:c9:62:27:e0:62:
ad:46:5f:cd:16:98:d1:3c:f6:3f:f1:87:32:1e:51:
46:1e:ff:d2:4b:67:be:64:25:9a:84:63:3c:a9:fc:
90:de:10:77:42:95:e2:91:e0:d2:6b:14:d8:1e:b1:
d8:e2:da:42:bd:fc:1a:3e:1d:5d:ee:1b:08:1f:07:
00:69:0f:17:eb:99:93:d1:4e:c8:f5:de:e8:4c:15:
08:fd:5e:51:7c:79:da:cd:51:bb:aa:59:f3:39:a9:
e7:e9:e3:94:57:8a:71:fa:d4:0a:fd:1f:80:41:5d:
ca:0c:e9:64:a3:b9:41:36:10:ce:6b:b8:ce:5f:2f:
11:0e:1c:99:e6:c6:8b:05:4b:e2:52:b0:c0:87:c1:
6c:a0:8d:e6:65:65:cd:3f:e8:35:39:52:07:84:b3:
20:c3:04:c8:9e:29:ec:c5:b4:7a:81:45:be:b5:c9:
69:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:89:9C:98:CF:C8:64:E2:43:4C:84:6E:0C:67:C2:50:90:CC:65:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/857f8519-5259-3051-b3a3-cbed201e7089.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:453::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:c0:52:10:e6:9c:a4:aa:de:43:7d:fe:67:7b:ac:43:d0:01:
be:96:ed:13:b6:c8:de:02:d9:2b:07:7f:46:b7:2c:34:c3:cb:
bb:d8:fd:3b:25:41:2b:a9:a6:76:1c:e3:68:a1:2a:65:73:b5:
47:1e:ca:c2:a9:95:9c:4d:ed:92:41:de:9c:ef:1c:82:cf:27:
6f:0a:e7:dc:15:3d:07:89:e4:ca:11:5e:6a:1a:c8:ae:61:98:
e4:3f:56:f3:67:45:5b:e3:ae:44:66:e8:84:b3:ed:57:35:54:
99:10:d6:61:cc:e5:1b:33:4c:8c:c6:f3:91:71:05:43:57:0a:
e3:97:e6:6d:58:be:78:fd:19:a1:c6:fc:2b:f3:32:69:5c:01:
e3:71:8b:d6:a0:16:1a:c9:65:0a:75:10:b4:a9:8f:93:0e:10:
cd:a7:3a:80:f7:10:10:9d:f4:8b:4e:e7:e0:dd:51:cf:54:45:
e1:1a:27:5b:29:9d:f7:80:1d:21:5d:4d:62:df:58:57:6b:eb:
a3:9e:6a:12:c4:e9:39:ad:95:31:3e:71:9b:a4:ec:24:a6:09:
02:da:cb:4f:13:d1:78:62:71:3e:5f:da:af:2a:74:2e:7d:51:
2b:09:be:57:fc:7a:cd:ec:a4:85:ad:d2:3e:47:24:06:ae:e9:
9a:cb:91:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:20:42 2026 by rpki-client