This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/ba9a810b-7813-37e1-af36-bff0ee61d4a8.roa
File: ba9a810b-7813-37e1-af36-bff0ee61d4a8.roa (raw, json)
Hash identifier: RJNgxO4/bt5jy0nnKHQeFRK0RPOji+uagm2DMMzML28=
Subject key identifier: B6:13:51:57:AD:A2:12:5F:D8:C8:34:C0:D0:D4:47:DC:96:03:59:61
Certificate issuer: /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Certificate serial: 010D0C9F4328584C4871341AC1405E7F0B9A7E00
Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/ba9a810b-7813-37e1-af36-bff0ee61d4a8.roa
Signing time: Tue 23 Dec 2025 14:00:39 +0000
ROA not before: Tue 23 Dec 2025 14:00:39 +0000
ROA not after: Mon 23 Mar 2026 13:00:39 +0000
asID: 16509
IP address blocks: 2607:6bc0::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 26 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:48:71:34:1a:c1:40:5e:7f:0b:9a:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Validity
Not Before: Dec 23 14:00:39 2025 GMT
Not After : Mar 23 13:00:39 2026 GMT
Subject: CN=a21a8d67-c39c-4d76-be1a-1da951ee6277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:5e:19:60:ef:ec:02:e5:50:71:ee:1b:60:
b9:3b:5d:01:aa:fc:0b:d0:6f:bb:fc:69:15:79:e7:
d3:47:af:56:cd:64:66:16:37:c5:95:80:68:a1:1c:
c2:d6:9e:12:c6:d6:8a:20:b4:38:0e:45:ba:14:28:
c1:d8:38:96:38:f1:6a:b5:16:c0:1d:09:c7:a0:de:
0a:d2:23:33:81:b3:90:66:e3:06:c2:0b:7b:62:18:
63:58:07:10:4e:8f:f5:ae:dd:0e:23:e1:1c:60:67:
64:72:bf:80:0d:42:c1:e0:25:cb:58:25:8c:e8:06:
ca:8c:da:1e:e7:d2:db:3c:48:e7:20:f4:96:57:87:
c8:81:70:4e:6f:e6:4e:97:02:2b:67:a6:f5:31:29:
5c:59:7c:97:8f:bc:b3:3b:a8:cb:dd:fa:cc:c7:99:
25:7b:75:81:cf:6a:40:27:f0:fc:08:fc:15:7c:32:
aa:9e:d8:09:51:47:f5:fe:0c:1a:db:ff:ca:19:52:
85:33:ea:09:41:74:62:56:d4:fd:9d:05:cf:80:4c:
01:23:30:92:e9:aa:6b:75:71:2d:b5:dc:ea:c7:04:
e7:a6:7e:1d:fb:f3:fb:eb:dd:8d:e8:eb:4c:f6:c9:
93:19:06:ae:90:f4:34:a5:5c:d7:87:6f:cf:b0:6a:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:13:51:57:AD:A2:12:5F:D8:C8:34:C0:D0:D4:47:DC:96:03:59:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/ba9a810b-7813-37e1-af36-bff0ee61d4a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl
X509v3 Authority Key Identifier:
keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:6bc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:96:e7:2e:25:47:21:22:2e:86:79:22:13:53:45:cd:e2:d9:
95:3d:b4:14:99:ee:b1:a6:a5:38:18:d3:f7:5b:d0:a1:48:c2:
ae:ed:16:55:42:01:c6:a1:81:95:68:d7:e9:8a:ba:d9:50:86:
50:90:bc:fb:b5:34:8e:8e:00:27:17:ff:96:65:7d:88:47:4a:
04:f9:9e:f4:cc:91:20:8e:3b:05:b7:07:16:70:56:e3:29:6e:
92:1d:a8:51:ab:e9:b9:f1:51:2a:4a:61:8c:e8:cb:f6:41:88:
1a:40:f8:9a:39:8d:56:27:36:6f:e8:82:98:af:38:b7:71:50:
ec:5d:41:93:e1:93:fe:15:65:52:e0:95:8f:37:9d:6f:26:c8:
85:05:e4:4f:c2:47:43:06:cc:9f:12:93:52:25:94:8e:bb:a0:
b9:d4:e8:ce:fa:38:08:c2:ff:94:9e:86:a0:6b:41:7b:3c:41:
3a:1f:52:55:cf:6b:0b:01:7a:98:87:b6:3f:94:42:06:46:dc:
96:8b:df:b6:9d:5e:3f:71:68:ad:35:cf:bb:49:7c:1d:8a:3e:
3e:b9:6f:b9:ea:32:a8:78:f6:d0:68:10:40:d1:4a:ce:f9:ea:
66:6a:65:cb:d0:7f:63:25:06:f9:a1:c4:1a:30:cd:e3:21:cb:
ac:c3:d3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 07:24:36 2025 by rpki-client