This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/87d8db82-610e-3b97-a6b9-d8e5d4f5a478.roa
File: 87d8db82-610e-3b97-a6b9-d8e5d4f5a478.roa (raw, json)
Hash identifier: iGdOrVw8iWJI9gc5CLFGn3d51lSwoa8rbaoUX1rZ6Y4=
Subject key identifier: F0:CB:D0:C6:19:74:58:87:10:8C:AF:49:D8:02:F5:2E:77:71:88:66
Certificate issuer: /CN=86375a98-0294-4970-a5b8-3fec0469382c
Certificate serial: 010D0C9F4328584C5A967CA9296BAACEDD078720
Authority key identifier: 49:E7:FD:D9:B1:0B:A2:3D:7A:75:9E:08:39:AD:37:BA:D3:18:01:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/87d8db82-610e-3b97-a6b9-d8e5d4f5a478.roa
Signing time: Tue 30 Dec 2025 02:00:30 +0000
ROA not before: Tue 30 Dec 2025 02:00:30 +0000
ROA not after: Mon 30 Mar 2026 01:00:30 +0000
asID: 3783
IP address blocks: 2607:3540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/86375a98-0294-4970-a5b8-3fec0469382c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/86375a98-0294-4970-a5b8-3fec0469382c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Jan 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:5a:96:7c:a9:29:6b:aa:ce:dd:07:87:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86375a98-0294-4970-a5b8-3fec0469382c
Validity
Not Before: Dec 30 02:00:30 2025 GMT
Not After : Mar 30 01:00:30 2026 GMT
Subject: CN=3d9d6941-b37d-4d1e-8660-65cf47e1aa86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:56:9e:63:d7:a3:49:87:52:15:c7:7d:5e:52:
bd:40:c0:90:0f:e7:83:49:ab:be:96:24:05:7b:e9:
c1:8f:f3:59:9d:60:3d:e4:95:46:56:ab:85:18:57:
8e:b8:46:1f:cf:3f:e5:9f:ce:5f:cf:63:f4:ed:fe:
9a:3f:c4:ef:1e:99:06:18:b6:c1:25:6e:90:fc:9a:
60:9f:c0:ee:a3:68:6b:b8:b3:69:97:1f:ee:94:cc:
51:11:db:11:24:b9:38:d5:08:5e:4b:ee:ac:af:85:
f3:73:69:22:af:58:6e:2d:08:a1:e7:fb:31:ab:d9:
99:79:67:20:e2:8f:be:1e:25:00:68:b0:7c:a1:62:
04:fa:63:3c:08:99:fb:a5:61:09:95:55:bc:af:e8:
14:74:13:6c:f7:59:36:f1:a8:70:ef:5c:f9:5d:6e:
88:43:e6:88:b1:f7:50:c4:29:77:01:52:f1:3e:12:
8b:83:ed:42:e8:67:0e:32:5d:61:bc:00:c8:08:ca:
ff:dd:78:00:d5:9c:74:35:b9:b7:df:d9:89:08:f4:
b7:fe:c7:ed:21:2f:03:95:4a:da:51:6a:e4:80:f0:
4d:4b:04:99:5f:54:1a:11:3e:64:a3:e4:f3:fb:f0:
c3:d8:d3:83:87:e3:ae:a0:cb:ed:44:b1:b5:2e:14:
b0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CB:D0:C6:19:74:58:87:10:8C:AF:49:D8:02:F5:2E:77:71:88:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/87d8db82-610e-3b97-a6b9-d8e5d4f5a478.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/86375a98-0294-4970-a5b8-3fec0469382c.crl
X509v3 Authority Key Identifier:
keyid:49:E7:FD:D9:B1:0B:A2:3D:7A:75:9E:08:39:AD:37:BA:D3:18:01:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:3540::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:63:56:81:fa:fb:cb:26:03:2a:f9:96:90:7d:12:36:2b:c8:
11:b7:a5:12:df:03:ff:3a:a2:de:f5:0b:ff:40:57:88:15:4c:
9e:b8:9b:f7:1f:68:0e:44:ba:72:95:18:c0:6d:de:14:fb:3d:
d8:9a:60:f3:5a:4b:4c:76:16:3e:34:b6:2e:2b:f8:04:31:66:
c7:ee:65:76:fc:0f:33:90:77:7e:25:68:ca:e0:e8:76:0a:0d:
a9:bd:68:67:26:a4:8d:76:2d:11:d0:d5:75:95:41:1b:c9:34:
0c:ef:c5:84:0a:87:e0:70:1b:75:5b:f3:2f:fe:79:48:8e:97:
11:0d:27:c4:41:ae:e8:dd:95:26:ce:71:d1:0b:5b:10:b5:d7:
2c:94:29:cf:d8:3d:33:12:4f:97:8a:74:98:3a:d8:2f:86:b6:
25:2a:2b:d7:56:5f:0d:6d:c0:08:d5:6c:08:7b:c9:52:20:2a:
f3:51:16:b6:35:b6:18:18:2c:ba:c2:89:9b:b9:ac:96:c3:eb:
94:9b:3a:81:e2:3e:5a:92:e0:3f:a1:6f:69:3c:27:ec:71:39:
df:13:43:33:79:5c:20:b9:5b:c1:a2:b0:8e:8e:f1:11:4d:f0:
12:f2:00:e7:d2:ae:6b:6c:bf:05:c6:f1:b0:47:97:9c:55:f6:
f6:f6:c2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 14:13:32 2026 by rpki-client