This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20d401d-8318-3b64-8fa9-63d9503f4acd.roa
File: d20d401d-8318-3b64-8fa9-63d9503f4acd.roa (raw, json)
Hash identifier: g5a6fRJNih1g1/1kr68VHmZRCLF0rUTnOwHD7xVQQ6I=
Subject key identifier: 7A:27:0B:F8:1C:3B:15:72:0F:F1:97:BF:6B:F1:1B:F1:70:D4:F8:F5
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584C2C94FE81ECC5F6B6D9B93B80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20d401d-8318-3b64-8fa9-63d9503f4acd.roa
Signing time: Sat 13 Dec 2025 14:30:25 +0000
ROA not before: Sat 13 Dec 2025 14:30:25 +0000
ROA not after: Fri 13 Mar 2026 13:30:25 +0000
asID: 398266
IP address blocks: 2001:470:3b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 17 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:2c:94:fe:81:ec:c5:f6:b6:d9:b9:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 13 14:30:25 2025 GMT
Not After : Mar 13 13:30:25 2026 GMT
Subject: CN=c85e89ee-a9e8-4b12-abab-708d2c2603c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:db:61:c5:79:01:9f:c9:f0:d0:95:d4:02:31:
63:02:ba:fe:ef:e8:91:b2:fd:44:28:b7:a9:58:1b:
64:e8:ec:6b:a5:de:97:5c:ab:c3:40:85:cf:6d:96:
59:d4:91:47:89:e1:cd:9e:f4:fa:b6:78:4a:22:bc:
0b:a7:6d:0a:0d:6f:f9:bb:59:4f:4f:ae:b3:22:ca:
4d:3c:6f:7e:06:55:bf:c8:4f:5b:13:9b:1d:47:4c:
02:3f:d1:f9:a1:99:64:08:23:ce:3d:f0:ab:ff:05:
79:ad:98:33:6a:d0:1d:32:8f:a1:00:2c:69:ee:41:
27:78:c9:24:f5:2c:d9:f5:a5:85:90:fd:16:92:46:
14:d2:6f:72:85:a5:2c:e8:4a:f2:e6:23:d7:52:9a:
cf:97:a7:b5:7a:de:60:5b:1e:38:22:97:a0:72:d7:
a6:c8:7d:d3:1b:8e:a5:ea:ea:d9:c8:08:fe:fe:9b:
98:7d:46:58:28:51:1b:3f:11:e3:c7:92:ad:d7:17:
79:72:59:46:35:92:ac:e1:55:d7:47:ca:a8:12:87:
54:ce:14:c8:a8:b7:fe:7a:a8:bd:c4:fc:82:4e:36:
fe:e3:74:c1:98:a7:97:85:31:1e:e6:67:f8:33:e2:
ac:1b:74:3b:38:8b:43:14:48:9c:c8:80:0e:df:cb:
22:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:27:0B:F8:1C:3B:15:72:0F:F1:97:BF:6B:F1:1B:F1:70:D4:F8:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20d401d-8318-3b64-8fa9-63d9503f4acd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:76:1e:d9:a6:7d:4c:41:52:d7:53:40:27:ce:9c:f4:26:69:
da:c1:1e:73:54:6f:85:e3:0a:98:1c:d1:99:66:c8:eb:d5:77:
f4:0c:ee:02:6a:94:32:2d:52:dd:ce:33:5d:f0:e6:72:5e:71:
56:5e:af:5a:dd:23:0f:e1:8e:d9:b1:98:ed:4a:ad:b3:7f:36:
3a:51:71:99:c6:58:25:fd:52:8a:6b:35:14:7e:9d:91:c9:21:
73:26:2e:9c:b3:d3:4c:a2:10:06:ee:cd:a1:fe:70:4e:b7:cd:
29:88:7b:82:72:99:07:54:ee:d1:e8:79:fa:5b:cf:d0:7d:05:
55:fa:27:40:cb:d0:48:1a:67:05:cb:69:5c:15:ae:2e:a3:67:
da:81:3e:9b:6a:63:fc:df:48:31:b8:44:fb:d5:99:d9:81:8c:
bd:ae:a4:06:89:eb:e1:e8:7a:0e:32:00:1b:32:af:dc:2d:1d:
b1:d7:59:ae:51:b0:db:6c:a1:77:40:f6:f5:51:93:99:6a:7f:
9b:26:20:07:24:d4:8b:f7:a7:85:89:82:63:6f:4b:2a:2a:9f:
1f:4b:00:fd:3c:bf:32:8f:09:ac:08:02:43:ca:0c:2a:37:f2:
e3:7a:56:8f:b6:02:f3:49:aa:f3:91:86:b0:eb:be:10:fb:d1:
d5:26:d2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:03:10 2025 by rpki-client