This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8/bb04bac6-ee9f-3c56-997a-f79ab8206811.roa
File: bb04bac6-ee9f-3c56-997a-f79ab8206811.roa (raw, json)
Hash identifier: RgI8apIysThX4+9kVRKm/rMqbmvLmF7Sb18o22sDDfQ=
Subject key identifier: 7C:DE:ED:D7:B4:48:EA:A0:7B:1B:61:0E:B4:AC:C6:1E:DA:85:F5:A5
Certificate issuer: /CN=63cb03c1-f0a2-433a-a000-2a90a9ecc4b8
Certificate serial: 010D0C9F4328584C42DBD7F61179075461531D00
Authority key identifier: 7E:B7:22:0D:4B:75:6C:98:55:1B:C6:BE:49:1C:9F:B6:5E:D6:2D:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8/bb04bac6-ee9f-3c56-997a-f79ab8206811.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 399196
IP address blocks: 2620:8b:a000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 26 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:db:d7:f6:11:79:07:54:61:53:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63cb03c1-f0a2-433a-a000-2a90a9ecc4b8
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=08118740-a72d-4d07-aa85-0ba5097ca7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:66:e8:56:7a:65:e2:0f:84:39:2b:81:38:
fd:dc:aa:81:75:cf:11:0a:7b:8e:ed:91:23:90:18:
99:a6:5a:41:54:dd:94:44:88:7e:2a:43:83:91:fe:
7f:86:c1:aa:76:98:84:3e:ed:29:12:e5:48:ae:a9:
60:1d:f6:a5:5f:32:5d:54:2c:98:e4:6f:92:30:d2:
2d:e5:8c:c4:70:80:98:33:b6:c0:fe:92:aa:78:11:
92:b4:a4:7d:64:39:3d:4a:1a:49:a5:43:53:2c:df:
a7:95:96:4b:c0:75:81:b9:c9:38:33:d3:06:c1:5b:
d0:62:23:17:7d:ee:70:83:ef:56:54:39:66:92:ea:
06:fc:23:22:c1:71:47:c7:07:a9:1a:45:a6:8d:80:
cb:15:64:b7:6a:b3:cc:b7:81:c4:86:82:bc:25:3c:
75:2d:5c:f9:e6:ce:0b:68:9f:76:aa:29:cb:2b:ec:
0a:59:5a:92:8f:e8:15:18:6c:f5:79:23:06:e4:63:
20:e5:0d:b5:89:ba:65:b8:ba:a4:4b:b7:96:47:a9:
63:15:03:63:7b:86:d0:69:b9:ed:5e:64:45:24:0c:
d6:05:81:0b:41:6c:fb:11:c2:81:a8:3f:7a:a5:99:
eb:5f:05:97:5b:bc:e2:0d:17:7c:92:86:a6:2d:d7:
3c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DE:ED:D7:B4:48:EA:A0:7B:1B:61:0E:B4:AC:C6:1E:DA:85:F5:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8/bb04bac6-ee9f-3c56-997a-f79ab8206811.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8.crl
X509v3 Authority Key Identifier:
keyid:7E:B7:22:0D:4B:75:6C:98:55:1B:C6:BE:49:1C:9F:B6:5E:D6:2D:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:8b:a000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:eb:9d:2c:e0:aa:5d:32:38:05:15:7f:c3:fe:15:83:77:cc:
0f:92:7c:f7:b3:60:15:aa:93:d7:d0:87:17:db:19:fa:dc:03:
0b:ee:6e:ba:f2:f5:a4:a4:2f:2b:96:4c:cf:68:26:01:a3:5f:
24:a9:67:a8:a9:96:d6:84:06:52:34:41:03:6f:fd:ff:e9:93:
f4:35:3d:09:80:96:6a:84:1f:96:e4:87:90:97:0f:78:de:ba:
53:54:1e:52:14:e0:60:66:05:4e:6e:a9:a1:66:ff:4e:4e:b8:
0a:25:94:ef:f2:6a:8b:75:46:d2:a9:29:ce:f4:c7:dc:85:86:
52:60:c9:a6:77:6b:39:63:78:8e:fd:c8:b6:db:f4:16:25:28:
fa:1d:c6:bc:76:7e:c6:41:db:e3:f9:bf:26:ab:19:00:1a:87:
59:a5:d1:e5:f2:50:1d:d9:9f:63:08:89:45:9e:40:94:fa:37:
ab:9b:3b:d7:05:ed:a9:7b:19:3a:10:a8:3d:8a:5c:1b:d8:6a:
81:d4:a0:3f:c4:49:96:ec:fa:8b:12:ef:c7:fb:a6:06:96:77:
71:23:7f:8f:55:e5:86:a9:be:8a:4a:cb:2e:e5:2a:92:a3:cf:
3f:33:ca:a0:82:ec:88:53:5e:4b:1f:73:1a:15:2e:ea:c5:2c:
bb:38:f5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 20:25:14 2025 by rpki-client