This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afc1a02a-6020-3778-b751-bf392ca96e77.roa
File: afc1a02a-6020-3778-b751-bf392ca96e77.roa (raw, json)
Hash identifier: q71562ZXXRmCxlrxnbQavyjx8HJytxhSjI0S+k/s9hI=
Subject key identifier: B7:FB:88:85:B1:21:3E:2E:99:CA:AC:B2:A8:D3:88:21:D0:A5:4F:51
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584C1E9224C938EA2D1982495800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afc1a02a-6020-3778-b751-bf392ca96e77.roa
Signing time: Mon 08 Dec 2025 14:00:38 +0000
ROA not before: Mon 08 Dec 2025 14:00:38 +0000
ROA not after: Sun 08 Mar 2026 13:00:38 +0000
asID: 33287
IP address blocks: 2001:559:c30e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:1e:92:24:c9:38:ea:2d:19:82:49:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 8 14:00:38 2025 GMT
Not After : Mar 8 13:00:38 2026 GMT
Subject: CN=3c3ace6e-dbbf-42f2-963c-8f22d15f9e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:26:7d:3e:12:99:61:35:dd:45:97:1c:a2:
e0:13:00:5b:96:bf:af:a1:06:38:49:59:bd:85:0e:
97:13:c0:40:cd:2c:78:15:7e:59:f0:ee:03:5b:96:
dd:ac:84:01:d7:21:d0:59:f8:19:83:23:9a:bb:11:
e6:3d:ca:3f:44:b9:a7:d1:ff:2a:32:4d:df:8a:15:
37:aa:8e:57:24:1e:75:28:72:4a:a9:f3:f1:1f:f5:
6b:a5:69:f4:63:45:10:1a:f9:5e:07:6f:be:a1:03:
90:1d:7a:4b:f9:75:b8:e8:01:75:f0:78:6d:bc:9d:
ca:d9:de:d4:a1:75:48:0a:bb:e5:77:30:71:db:d1:
f6:ba:10:45:1c:45:d0:d5:24:12:2e:d0:e9:9c:d0:
b4:75:74:83:62:ca:9d:44:2c:5d:7e:f9:03:a4:7d:
db:7a:e7:81:4c:f9:cb:b9:05:c0:ae:6a:b7:c5:c3:
5b:46:fc:27:92:41:0c:b3:fc:d9:46:5b:75:5b:4d:
37:df:1a:ff:f2:34:cd:36:bd:6e:27:16:af:91:3a:
e6:e5:b8:9a:6e:c7:fd:87:6a:f9:8e:65:83:f8:44:
81:75:73:30:ca:cb:19:16:6e:88:eb:a7:55:3d:30:
10:a1:74:60:fd:da:46:c3:a5:ba:e4:5d:d3:1a:47:
f5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FB:88:85:B1:21:3E:2E:99:CA:AC:B2:A8:D3:88:21:D0:A5:4F:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afc1a02a-6020-3778-b751-bf392ca96e77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:c30e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:cb:b8:2c:62:4b:39:00:09:1b:ff:0a:d0:be:10:f3:88:27:
63:a9:84:a3:f1:fb:ab:85:f2:79:bb:a6:41:5c:f8:4b:3f:a9:
1f:b4:3c:4a:83:88:28:de:16:26:61:46:32:bc:70:e9:b3:03:
66:e9:40:41:73:1e:34:ad:c0:63:db:37:e4:96:cf:a0:c2:92:
b4:59:6c:50:5c:92:0a:a8:3a:22:d9:6c:6e:4a:f8:cd:ef:0a:
de:72:c4:33:d4:df:78:05:74:ae:ed:6b:d5:16:d1:a8:8b:52:
c9:b1:c1:d9:ff:77:91:b7:6e:d8:12:1f:c0:76:49:c2:3e:59:
93:50:60:95:ad:af:b7:bf:8c:94:83:e7:57:e1:26:5b:6e:b7:
6c:66:25:c8:af:43:e7:42:b8:c2:1e:1a:3d:18:f6:c3:11:9f:
6b:7d:fc:6b:1b:5e:5e:c9:54:3a:19:fd:ca:18:2a:86:ec:42:
b7:8d:1f:f4:0c:65:0f:2a:4e:09:70:39:fb:7b:ba:5c:6f:a7:
10:31:85:95:9c:93:fe:d5:31:c1:bb:22:1e:24:92:54:35:03:
f2:fa:d2:be:93:a5:1f:7a:ab:83:e4:3e:bc:30:1e:fa:56:b2:
73:c5:e4:61:c3:9e:7e:64:44:e7:90:4c:c3:24:cc:18:51:97:
e3:11:fa:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:09:53 2025 by rpki-client