This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da924daf-31c2-37c8-9169-f6658d815fd6.roa
File: da924daf-31c2-37c8-9169-f6658d815fd6.roa (raw, json)
Hash identifier: ssX9t2fiISGtS3cJQZi2HL7+QgrniI2S0lyvuU2TihE=
Subject key identifier: 28:0D:26:51:67:A9:00:CA:E5:68:FB:C1:73:86:FE:4C:85:6B:0E:DA
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584C42DBDB22B54FCA5589331C80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da924daf-31c2-37c8-9169-f6658d815fd6.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 36625
IP address blocks: 2620:74:2b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 26 Dec 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:db:db:22:b5:4f:ca:55:89:33:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=dfd47b9f-e2ae-4f28-b0fb-8585c27604b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ec:60:19:dc:a7:ad:48:6f:df:5b:5c:75:7f:
87:7c:24:a6:88:96:b1:2b:84:7c:8e:75:e7:1a:45:
f4:60:14:41:2f:65:b7:f8:cb:57:57:67:95:dc:82:
e9:a3:9e:99:ac:64:d6:f6:7a:c7:f1:c3:75:9f:79:
8f:70:6d:76:ea:3c:6d:ce:8a:63:cb:9b:9a:34:e0:
be:4e:8d:70:8a:72:00:06:9f:a0:f8:75:1e:cc:96:
cd:62:2e:67:18:fd:92:fc:60:76:13:e4:9c:f5:8a:
2a:da:32:37:01:1b:9b:4e:57:32:21:9d:b5:7c:36:
1e:db:0b:71:2b:e0:83:b9:5a:04:ff:1b:92:19:6c:
0f:f0:c6:e5:f9:4b:e0:72:ff:53:fe:44:1b:2e:b9:
66:fe:7a:a7:4f:20:33:78:1e:52:2c:c9:58:99:36:
b9:8d:1a:99:b5:4e:96:2a:7f:58:1a:7f:4f:82:2a:
ee:ad:1a:67:e6:58:c7:cb:62:3e:be:9a:f7:f0:65:
ea:d7:08:2e:98:05:9d:79:6e:4f:f7:d1:93:e6:48:
fa:06:5e:19:37:59:7a:c3:37:f0:7f:9f:70:80:c1:
6d:e1:2b:d8:a3:82:3d:88:18:29:c5:21:07:a7:ca:
fd:dc:75:f9:29:b9:db:20:0e:a9:cf:d2:b6:5b:c8:
d6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0D:26:51:67:A9:00:CA:E5:68:FB:C1:73:86:FE:4C:85:6B:0E:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da924daf-31c2-37c8-9169-f6658d815fd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:c4:25:6d:fc:4c:f5:d0:92:67:4d:17:c3:4e:64:b0:7a:e3:
b8:f5:34:0b:4d:51:eb:dc:41:7c:74:85:d0:a8:11:f6:5e:7b:
1b:72:ce:00:12:62:c8:20:c4:33:f1:b9:da:a8:eb:0d:66:bc:
71:8a:01:a4:57:cf:cb:27:18:40:b6:df:55:ed:18:4b:12:eb:
c0:fa:e6:9b:c4:f3:6b:af:e6:5f:dc:a5:e8:24:3f:8f:f1:ae:
77:35:3d:7b:92:60:ce:e5:96:c5:9c:83:0c:e7:b4:58:c7:b7:
80:3b:0e:43:79:3a:0a:03:9f:62:34:13:86:9f:ce:10:d2:3f:
d5:33:e7:b8:44:c4:6e:97:35:24:4c:8f:d4:c6:da:c4:0a:3b:
35:bc:91:bd:ef:ad:f4:07:1c:e0:a2:48:e5:c3:aa:3b:03:9a:
d8:74:48:9a:46:d2:f8:b9:56:1d:ba:e8:10:13:de:00:88:b7:
a2:8a:8b:6b:d1:3a:69:ba:0c:fc:3c:f2:9f:06:03:88:ed:5a:
0c:08:89:6d:ef:83:68:72:4b:b2:09:04:d3:7d:6e:65:f4:a9:
18:6a:d0:3f:f7:5b:85:46:35:49:17:b4:db:01:44:42:7c:9e:
6c:58:f2:2c:9d:b7:d4:7d:fd:9d:a4:f8:90:d6:26:06:d6:b7:
e7:3b:b9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 11:16:07 2025 by rpki-client