This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf5fb8d8-7463-3ce5-9c7c-386fdaa0a56b.roa
File: bf5fb8d8-7463-3ce5-9c7c-386fdaa0a56b.roa (raw, json)
Hash identifier: aIBHP13oMA74LFrlgJTfurCB2HeivxgkPYmuDtjwhTU=
Subject key identifier: 65:EB:C8:CD:78:49:B4:C5:25:FB:9A:1B:A4:D9:57:81:19:0E:BD:5B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584C215BA8CCE86B420885659780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf5fb8d8-7463-3ce5-9c7c-386fdaa0a56b.roa
Signing time: Tue 09 Dec 2025 14:00:38 +0000
ROA not before: Tue 09 Dec 2025 14:00:38 +0000
ROA not after: Mon 09 Mar 2026 13:00:38 +0000
asID: 20940
IP address blocks: 2600:141b:4800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:21:5b:a8:cc:e8:6b:42:08:85:65:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 9 14:00:38 2025 GMT
Not After : Mar 9 13:00:38 2026 GMT
Subject: CN=867d9515-b1d8-43b7-a2a8-f3541c2b04e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:57:f6:4f:8d:9e:38:dd:9d:53:2c:54:bb:e1:
42:5c:e9:82:89:86:51:0c:82:11:5b:79:95:7d:0e:
a3:40:cf:18:6f:3c:c5:22:49:2f:62:34:a9:9e:16:
af:87:b2:6a:c4:c8:7b:79:91:39:e0:dd:7d:8b:90:
44:77:ed:2d:ae:49:96:17:e8:b0:83:57:aa:27:7e:
3d:bb:cc:cd:e1:7d:b3:43:53:70:4f:0e:2c:32:68:
19:49:3f:70:7c:ee:0a:ed:a9:eb:9c:1a:32:af:b4:
d7:95:e2:e6:0e:2f:7d:2a:b9:cf:83:b1:50:f7:f0:
de:7b:d1:c7:0f:48:60:31:3c:0d:84:d7:2b:73:23:
c8:86:db:a1:74:1b:0f:db:2e:b0:96:0e:4f:88:90:
4a:2c:fa:cb:66:b8:a6:58:95:88:14:81:9e:61:a2:
f1:df:93:96:f3:c8:5f:ff:78:33:90:55:bd:81:57:
46:63:c7:8e:33:2f:67:6d:cb:39:18:9e:7e:a4:e8:
42:94:fc:a8:79:df:f3:73:f9:ca:4b:b3:98:a6:f7:
a9:de:d6:e4:f7:d5:23:7c:e5:46:9a:a8:63:06:07:
18:e0:09:11:2d:1a:5b:75:72:3c:d3:04:a3:b0:8b:
a3:b4:13:53:de:01:f4:52:79:2d:07:10:c4:21:b0:
be:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EB:C8:CD:78:49:B4:C5:25:FB:9A:1B:A4:D9:57:81:19:0E:BD:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf5fb8d8-7463-3ce5-9c7c-386fdaa0a56b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:141b:4800::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:53:bc:cf:78:f9:8f:19:97:10:7f:9d:c1:84:92:a7:f9:8b:
5e:7e:98:b4:aa:b3:92:4e:36:cf:af:a2:86:51:59:9b:80:3d:
0b:26:b9:f8:bd:bf:b3:34:9c:3f:cc:53:3b:ad:7a:84:67:1f:
a1:6a:f0:af:0a:17:8d:49:f8:49:ff:0b:a0:f3:16:4e:13:27:
36:23:c1:3e:43:24:ce:e9:d7:e6:a6:95:2b:31:57:5e:9c:52:
0d:60:30:78:fd:3f:e1:bc:db:86:34:db:ef:89:d9:55:75:62:
01:cc:a4:26:8c:c3:95:2d:3e:72:bc:ae:3a:35:b6:f3:2d:af:
4a:ab:3e:30:b7:42:dc:97:ca:44:13:2f:d7:be:b1:31:b3:66:
23:f6:15:92:c0:ce:55:bd:c9:a6:fd:c8:ae:06:ac:54:69:f6:
c0:fe:cb:46:04:65:09:76:6f:82:19:c5:30:08:2f:3d:4d:39:
5e:a4:a1:0f:f9:40:22:b4:f6:94:2d:a7:83:9d:ab:c1:12:4f:
c0:16:df:57:d9:c7:bd:ec:30:95:af:bf:02:b7:74:fc:cb:31:
6a:6b:ff:3c:4e:2d:8c:82:dc:43:03:29:c9:f3:d7:02:cc:9b:
21:88:cf:68:83:d4:ab:0f:ec:a8:ca:42:44:a1:64:78:ad:b5:
e8:34:a0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:59:38 2025 by rpki-client