This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1938f346-fefc-3c0b-a7d0-86089e02356e.roa
File: 1938f346-fefc-3c0b-a7d0-86089e02356e.roa (raw, json)
Hash identifier: gwl3SoMuTjefW8lGxg/lirvUxMA7rGzQMoDnqUXcfDw=
Subject key identifier: 43:D7:E7:1C:C1:E3:44:E8:8C:39:C9:C3:DE:B8:FF:83:8B:AE:69:9F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584C4011372FDD7510A905DA4510
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1938f346-fefc-3c0b-a7d0-86089e02356e.roa
Signing time: Sat 20 Dec 2025 14:00:38 +0000
ROA not before: Sat 20 Dec 2025 14:00:38 +0000
ROA not after: Fri 20 Mar 2026 13:00:38 +0000
asID: 396573
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 24 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:40:11:37:2f:dd:75:10:a9:05:da:45:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 20 14:00:38 2025 GMT
Not After : Mar 20 13:00:38 2026 GMT
Subject: CN=152a4093-9fc3-443c-a40b-3955dc167c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f4:bb:19:f7:6f:70:d4:33:e7:b2:1f:95:d3:
95:1f:4f:38:08:ad:58:42:68:6f:e0:1f:7a:99:89:
43:58:d2:97:9c:f2:67:f8:db:e4:ee:c7:d8:7d:4f:
2e:59:26:ee:76:16:50:58:80:c4:c6:14:81:ed:99:
a2:85:1c:a2:ce:58:f5:33:1a:6f:31:17:b6:4f:15:
20:2d:b5:09:56:f9:f5:1b:29:30:eb:a3:f5:1a:2b:
b3:50:c7:a1:f9:21:26:4d:9b:bb:77:04:37:a3:f2:
a4:b0:cf:d1:b8:e4:51:3c:9d:92:1a:ad:48:f1:1e:
0b:b5:66:a1:e5:2e:1e:b7:53:9b:fe:33:52:b8:fe:
27:c4:d5:8d:43:4d:fa:88:9e:32:70:ed:86:49:9b:
26:b5:74:14:d1:45:ca:56:59:b5:1a:af:6b:34:fc:
4f:79:48:d8:26:94:e4:e6:01:95:e8:0c:b9:70:fc:
6a:bf:67:8d:15:6a:cd:72:ff:31:24:b1:f5:21:af:
50:90:30:dc:4b:95:ca:9f:89:9f:ed:7d:ee:3b:fd:
85:02:a8:59:23:bd:b2:b3:2f:ab:e4:93:44:2e:bd:
b9:0f:3b:0d:fa:07:0e:c6:e8:4a:04:1a:bb:66:88:
fc:14:be:97:60:09:86:e6:5f:6e:cd:05:26:15:c2:
70:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D7:E7:1C:C1:E3:44:E8:8C:39:C9:C3:DE:B8:FF:83:8B:AE:69:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1938f346-fefc-3c0b-a7d0-86089e02356e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:70:8d:0d:e4:3a:b3:43:88:bd:64:17:81:64:6c:14:2a:9a:
60:50:bc:85:4f:01:9e:eb:75:8d:f3:72:15:73:40:b1:59:d8:
be:8d:cd:7e:61:a7:c0:99:cb:74:ab:92:33:0e:77:5f:ca:9d:
5b:c7:c5:f0:5e:df:20:40:2a:f8:8a:ef:e3:9e:6a:69:9c:e2:
1a:2f:09:3a:f0:fd:59:48:0d:1d:a0:a1:24:0f:84:84:51:cf:
89:72:d0:c4:5a:2c:8a:55:56:ca:7a:ac:21:5e:12:a1:18:c2:
62:7f:d0:3c:50:0a:c9:e9:8f:3e:c4:61:87:38:b4:2d:b9:34:
bb:02:e1:bd:d8:1c:8e:70:6c:84:b5:ac:19:a6:29:3b:0b:77:
49:d8:27:11:84:f3:16:74:26:6e:59:0e:a3:f8:51:34:7f:e6:
e3:bc:e9:d0:c7:92:5a:50:6c:f9:16:b5:c0:2f:82:18:1b:2a:
bd:dd:be:d9:73:fc:5a:45:72:94:85:3d:60:7f:8b:96:5d:c9:
54:e1:aa:c4:1b:af:6b:ad:ca:f0:86:90:7e:9d:2a:d7:f2:8d:
10:3b:06:a6:a2:ff:d5:4c:b1:fb:65:d9:68:65:76:58:fa:d1:
d9:b4:f6:58:cc:ce:fc:db:9d:3b:70:7c:68:9e:62:e3:5c:c7:
93:e8:de:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 15:46:13 2025 by rpki-client