This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/2102d3b5-5c47-3181-bcb5-1cd7600fa6c7.roa
File: 2102d3b5-5c47-3181-bcb5-1cd7600fa6c7.roa (raw, json)
Hash identifier: XHfux+nTyuxHZAIqTkIkVsySzZQLDLQegNTepMa0O4o=
Subject key identifier: 45:9C:BA:C4:AB:4C:2A:EA:C3:A1:7A:36:F0:6C:AC:5D:34:E1:A6:1A
Certificate issuer: /CN=bc061f95-a504-48f1-88f1-fae53628511e
Certificate serial: 010D0C9F4328584C39165097FE672EDE1B1E27C0
Authority key identifier: 14:50:15:A2:CB:AD:07:77:38:CC:81:8B:92:AD:A3:2E:51:4A:F3:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/2102d3b5-5c47-3181-bcb5-1cd7600fa6c7.roa
Signing time: Thu 18 Dec 2025 02:00:31 +0000
ROA not before: Thu 18 Dec 2025 02:00:31 +0000
ROA not after: Wed 18 Mar 2026 01:00:31 +0000
asID: 398885
IP address blocks: 2607:b940::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 23 Dec 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:39:16:50:97:fe:67:2e:de:1b:1e:27:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc061f95-a504-48f1-88f1-fae53628511e
Validity
Not Before: Dec 18 02:00:31 2025 GMT
Not After : Mar 18 01:00:31 2026 GMT
Subject: CN=11c23181-84da-4ed1-88e1-76c1198e5009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:aa:b5:14:63:2e:13:76:85:b2:8a:2e:b9:68:
6c:15:29:04:d6:5d:d4:00:3d:ec:03:37:3a:10:45:
88:61:8d:c2:99:f4:cd:80:68:4c:2b:cf:59:4b:ce:
2a:b9:b9:18:a0:b7:20:f9:5d:ce:34:ee:e1:d8:3f:
46:76:f3:33:2e:59:8a:ab:e5:79:41:f9:c7:ed:99:
8a:ea:2a:32:fa:d7:82:af:7e:f0:7c:61:7b:9f:37:
b2:3f:f1:e2:47:b6:f3:1b:27:25:a3:31:b7:56:25:
94:f6:e6:bc:97:ae:a9:24:92:86:62:ff:0c:1f:2a:
72:85:f0:7f:46:d7:69:a7:b0:4d:69:a2:a9:33:56:
ea:74:2e:7b:26:69:1d:5c:45:0e:55:1e:2c:c9:5e:
3a:d5:03:2c:b2:54:1a:09:48:7c:11:1c:12:14:f8:
fd:45:62:e3:9b:a4:bc:50:5c:01:c9:3c:46:c7:1d:
0e:ec:06:41:32:23:f8:35:ec:0d:ad:34:f0:bc:b3:
bd:68:1c:49:4e:fd:aa:64:21:92:74:f8:93:f7:7b:
bd:35:16:04:7f:b8:46:b4:08:e7:c0:f9:53:39:1b:
b5:a9:cb:e9:a9:31:3c:36:79:55:16:8d:d0:ac:d8:
d0:59:47:69:8a:ff:2e:67:b7:98:55:0b:89:c8:b7:
85:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9C:BA:C4:AB:4C:2A:EA:C3:A1:7A:36:F0:6C:AC:5D:34:E1:A6:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/2102d3b5-5c47-3181-bcb5-1cd7600fa6c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.crl
X509v3 Authority Key Identifier:
keyid:14:50:15:A2:CB:AD:07:77:38:CC:81:8B:92:AD:A3:2E:51:4A:F3:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:b940::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:2a:b2:3a:2f:c4:87:ef:9a:cd:66:88:be:cb:7c:45:3f:3f:
4c:cc:a3:7e:0d:05:4e:83:c0:4f:08:18:e0:32:3d:2c:e3:75:
70:3e:e7:f6:11:3b:81:17:6d:da:77:ce:a8:46:3a:3d:41:5b:
57:10:d9:2d:04:dd:c1:0f:aa:52:30:f7:47:d8:83:6f:66:19:
64:e6:75:20:b6:ea:93:1a:7b:45:f2:54:e8:5b:1f:ec:f3:7b:
75:5b:b0:0d:a7:ad:70:cb:d3:0b:6b:f1:a9:6c:90:f5:cc:9f:
af:9c:17:bd:05:84:7f:5a:c8:c2:78:90:7e:e4:10:a0:0b:fe:
67:1c:b5:d1:04:af:84:58:9e:31:1f:e5:84:fb:5c:4a:96:34:
3c:da:c4:83:57:29:2e:69:95:4e:b1:57:72:84:22:90:c7:8d:
e4:5f:55:03:c6:91:7e:25:aa:08:12:f9:0c:43:56:45:89:5f:
ca:fc:01:dc:4c:ee:95:21:1c:b5:28:56:e5:09:b6:fc:2d:67:
7a:99:c5:68:06:2c:0a:09:52:5b:05:30:e0:be:88:6a:db:00:
46:95:ad:c6:94:6a:99:03:18:2e:fc:4a:0a:90:b3:53:26:15:
d7:42:12:48:82:e7:2f:2a:99:b1:98:70:23:63:4a:21:6f:45:
7e:d2:2c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 03:07:09 2025 by rpki-client