This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8d5c36eb-b0e5-3e25-a457-28225e717480.roa
File: 8d5c36eb-b0e5-3e25-a457-28225e717480.roa (raw, json)
Hash identifier: vmFDGggyF8JTq/rJO2rYvaEZ+QE9bIQJVLSNx3G4jjU=
Subject key identifier: 21:B8:1B:5E:DA:41:17:F0:03:2D:9B:4C:63:E9:FC:6B:85:61:1C:BA
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584C338F95EFE6D11FA104ECCD80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8d5c36eb-b0e5-3e25-a457-28225e717480.roa
Signing time: Tue 16 Dec 2025 02:30:10 +0000
ROA not before: Tue 16 Dec 2025 02:30:10 +0000
ROA not after: Mon 16 Mar 2026 01:30:10 +0000
asID: 397921
IP address blocks: 2001:470:1c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:33:8f:95:ef:e6:d1:1f:a1:04:ec:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 16 02:30:10 2025 GMT
Not After : Mar 16 01:30:10 2026 GMT
Subject: CN=75b453be-5235-4a01-8187-b2eadd617bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:58:a9:63:7a:82:5d:85:b8:b1:f0:aa:54:25:
f1:50:0c:db:bd:c3:46:b8:ae:30:3d:29:d3:a1:b0:
a4:4f:54:75:5d:4f:d0:31:75:0f:c7:5b:92:ad:f4:
7f:3f:8b:98:74:97:38:fc:3c:d4:b7:d2:27:d9:d5:
01:14:c4:ed:bc:cc:22:3c:c5:91:78:e9:e8:11:71:
63:3c:7f:7b:9b:11:03:3c:91:91:35:58:c0:3f:b3:
77:de:5d:43:f6:dc:85:dc:be:60:66:00:76:66:65:
86:d5:c7:77:c9:32:3b:02:91:89:e7:8d:58:80:d0:
8b:85:ca:67:3d:28:3d:df:02:ed:b5:85:1e:9a:bc:
e8:8e:fa:bb:d4:ca:c7:4f:9e:dc:1f:9f:28:6f:ab:
0b:76:00:0d:7f:9f:58:0f:8c:d6:4c:48:96:b6:9a:
21:f1:24:66:54:de:72:e0:c7:58:e6:fb:3b:22:b5:
a6:6f:f6:2f:0d:67:86:6e:94:6e:da:e7:c4:61:2a:
93:c3:ff:e0:99:a4:67:55:5d:49:72:fb:f2:14:94:
9e:8b:ca:0f:86:9f:df:42:f1:a4:7a:d9:8c:0a:6c:
52:1b:38:c2:aa:f4:de:5a:7b:d0:9d:be:94:e2:40:
52:d0:b1:0d:c1:c9:79:82:07:da:24:d9:02:78:1a:
39:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B8:1B:5E:DA:41:17:F0:03:2D:9B:4C:63:E9:FC:6B:85:61:1C:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8d5c36eb-b0e5-3e25-a457-28225e717480.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1c1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:11:d2:89:35:4e:1b:cc:72:e9:b5:30:17:d8:0e:67:66:cc:
94:5a:09:a2:20:a5:de:94:61:f2:2e:d2:1b:10:ff:b1:37:b8:
c3:46:5b:7e:fe:8b:1a:66:e6:c3:6b:0e:5a:8a:f6:d7:03:8a:
7f:cd:0c:4c:86:7d:38:73:83:a1:94:5c:ab:8c:bc:0e:a9:f9:
04:36:cf:96:ab:9d:c3:3e:d6:14:83:08:f4:50:13:ae:35:e1:
4d:72:26:16:20:a9:51:c7:79:26:87:62:ce:8e:71:c3:f6:4e:
39:26:a7:99:60:e4:f5:c1:0d:62:30:02:ba:5f:5d:5c:9c:83:
9b:29:7b:ba:ab:bb:a4:7d:6a:3b:d4:83:21:bc:3c:bd:6b:5c:
fc:bb:c5:38:d0:f5:c0:77:ec:f0:4c:bf:2c:b7:5d:e6:ea:72:
95:78:b4:02:7a:8a:66:76:d9:f0:34:ac:bc:e8:04:10:ab:e5:
11:a8:34:78:f2:c1:3c:2b:5d:7a:7a:c8:f7:ce:f7:ca:1e:1c:
71:d5:fd:e6:4d:41:41:5a:10:df:f5:a8:9a:3c:17:79:0a:06:
57:4d:89:25:fc:03:4a:1b:9d:5f:27:88:95:59:f6:6d:a0:5e:
25:47:46:18:40:f2:b2:72:bf:a7:26:58:dc:2d:6c:3f:ba:11:
91:8f:9d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 03:03:53 2025 by rpki-client