This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/3c7bdba5-8362-330b-97ea-a2d35f272c00.roa
File: 3c7bdba5-8362-330b-97ea-a2d35f272c00.roa (raw, json)
Hash identifier: +4K20z6GeXqk2L2n1b9xA+SAyGYw2M+gP268Ug1eeEQ=
Subject key identifier: 38:D5:47:A0:D9:F0:02:BF:4A:27:B2:F2:04:96:2B:1B:20:7A:C2:D7
Certificate issuer: /CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Certificate serial: 010D0C9F4328584C3BE137446C5DB94B2A5F1300
Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/3c7bdba5-8362-330b-97ea-a2d35f272c00.roa
Signing time: Fri 19 Dec 2025 02:00:31 +0000
ROA not before: Fri 19 Dec 2025 02:00:31 +0000
ROA not after: Thu 19 Mar 2026 01:00:31 +0000
asID: 26768
IP address blocks: 2602:2a4:9d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:3b:e1:37:44:6c:5d:b9:4b:2a:5f:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Validity
Not Before: Dec 19 02:00:31 2025 GMT
Not After : Mar 19 01:00:31 2026 GMT
Subject: CN=1fcfa0af-b9be-42eb-8d83-955eb38fe87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:9b:e8:db:a4:38:c9:ad:05:fd:eb:03:15:
7e:d2:23:89:69:a9:ee:8a:4c:f1:03:29:12:26:40:
1f:f7:13:db:c7:11:39:d0:81:d4:d9:7b:3a:53:fe:
e8:f8:b6:3d:df:d7:7d:98:d2:61:09:d7:23:e2:31:
21:2a:23:87:c5:48:0f:c8:00:cb:8e:34:8d:c1:ac:
a0:82:cc:c2:41:21:ed:c6:62:b0:53:7b:9e:98:83:
8d:57:cc:b0:5f:f1:23:cc:47:30:4b:6a:b3:ef:e6:
c2:58:f5:44:34:ec:46:ae:1f:6a:43:42:17:a1:36:
1e:3d:76:70:55:31:1c:f2:d9:a9:79:66:d3:33:3f:
9e:31:6f:ef:2e:54:1f:b3:6d:b1:d9:2c:52:55:94:
fa:de:e7:98:b3:b6:20:10:3d:01:00:c9:f4:c0:ad:
82:59:41:7b:a2:f9:b5:12:a5:29:3f:d6:c7:47:a1:
05:d6:b7:8f:64:d3:7a:43:93:67:5a:09:61:a5:f6:
9c:77:d3:5b:f6:81:89:c8:6f:c3:2d:cc:1f:86:06:
12:41:95:63:14:66:b3:ce:0e:e9:99:c5:8e:34:7f:
4d:b9:a9:41:b5:88:23:a2:88:cd:1b:d3:61:d7:47:
5f:28:81:38:29:5b:fd:23:4c:2d:df:cd:78:06:41:
38:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D5:47:A0:D9:F0:02:BF:4A:27:B2:F2:04:96:2B:1B:20:7A:C2:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/3c7bdba5-8362-330b-97ea-a2d35f272c00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl
X509v3 Authority Key Identifier:
keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2a4:9d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:09:e1:02:7d:67:03:b9:4a:fe:67:13:a6:8f:f5:43:75:61:
b6:0b:77:da:e1:db:62:32:d2:36:9e:ed:81:e6:3b:9c:1f:c0:
01:67:bc:c2:7e:b7:61:af:bb:19:5f:23:dc:42:ab:ee:82:18:
2c:b3:5e:f0:13:ba:47:3c:c1:be:0f:25:60:66:21:ba:de:df:
3f:6b:a6:0f:aa:e3:9d:7e:56:4f:a5:aa:87:83:fc:b6:fe:5b:
f1:40:5f:a7:1e:eb:42:63:14:c8:fd:c8:1e:fd:e6:f3:e4:12:
50:9d:c8:87:13:b5:27:97:6d:d7:c2:73:ba:19:7a:09:02:48:
e8:a5:e3:d2:e9:dd:a1:7c:f5:b2:75:92:9f:be:f7:3a:ef:bc:
80:a8:87:09:61:39:21:e3:72:5d:ff:97:e7:c4:f0:cd:94:71:
28:c6:94:44:cd:9c:fa:aa:ac:85:62:97:4b:90:de:73:58:60:
68:e9:d2:74:2c:dc:33:71:84:24:1b:22:51:76:c5:d2:cd:ac:
a1:06:e7:19:f1:18:42:73:cd:0f:c4:9c:81:5c:a6:64:55:2a:
5b:fb:fa:e6:b6:ed:a7:a3:09:ee:32:46:b6:08:20:f7:7a:94:
fc:82:43:5c:42:3a:67:3f:e1:09:ff:b6:86:4e:7d:7b:5c:2c:
35:93:9d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:56:03 2025 by rpki-client