This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/968c2740-9d33-3505-bd27-9206f2c52b76.roa
File: 968c2740-9d33-3505-bd27-9206f2c52b76.roa (raw, json)
Hash identifier: cbCt6HLIrL+iZTmHs6+gCYvdytbhHZfAewlTY9ospvA=
Subject key identifier: FD:52:D7:B7:F9:48:3D:4D:83:EE:E7:D0:EE:7D:B9:A9:E5:9B:88:D7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584C40113CD0C3D3F512076C55C5
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/968c2740-9d33-3505-bd27-9206f2c52b76.roa
Signing time: Sat 20 Dec 2025 14:00:38 +0000
ROA not before: Sat 20 Dec 2025 14:00:38 +0000
ROA not after: Fri 20 Mar 2026 13:00:38 +0000
asID: 36630
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 28 Dec 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:40:11:3c:d0:c3:d3:f5:12:07:6c:55:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 20 14:00:38 2025 GMT
Not After : Mar 20 13:00:38 2026 GMT
Subject: CN=5d753ba8-fe75-4d3b-8496-971507174da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:20:46:02:2b:84:a0:92:a4:cb:12:43:54:bb:
5c:9e:ea:41:de:cf:09:cf:b3:38:e7:e8:a2:1b:46:
43:ce:d8:e9:f8:9b:da:b0:ad:db:cf:d2:c5:57:19:
5c:54:6e:42:c0:af:5b:58:82:4c:c3:2c:2b:5c:b6:
48:dd:5a:b7:be:be:ac:64:8e:8d:d2:83:6d:e6:2e:
b5:a8:a0:0c:8f:3a:4f:9e:0c:1d:f8:c0:f6:3b:cf:
98:36:7a:1a:a0:72:4a:ec:e3:e0:b0:f9:d5:d2:f9:
b2:21:68:2c:cc:bb:3a:07:08:7d:88:2e:cb:cf:0a:
31:33:b5:db:81:23:bd:b2:95:0f:09:3f:a5:58:a8:
cd:87:88:59:e6:17:ee:86:6f:1f:35:cb:e0:f8:84:
6d:db:ce:20:01:de:16:17:cc:ab:80:61:af:6e:b4:
18:d9:75:45:01:c1:f7:11:81:f5:35:4f:e3:1a:9f:
89:4e:cd:85:3a:ff:1a:12:16:65:46:c9:82:9a:18:
bc:a7:1c:d2:9d:c3:ef:8c:f8:f5:a8:2f:ef:19:75:
97:eb:61:63:1c:d3:ae:fc:b3:4f:37:36:bf:dd:db:
90:90:7b:a6:7d:d3:71:1c:e6:33:cc:20:bb:bf:99:
4a:e5:da:05:62:85:93:1e:be:14:24:58:2b:3f:e0:
f5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:52:D7:B7:F9:48:3D:4D:83:EE:E7:D0:EE:7D:B9:A9:E5:9B:88:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/968c2740-9d33-3505-bd27-9206f2c52b76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:05:12:6f:9e:11:f6:23:50:14:21:4d:04:a9:ac:32:c1:ed:
6b:54:11:fa:68:55:0e:b7:9b:6c:06:05:6c:9b:37:38:74:1e:
48:e2:11:4b:24:e1:3a:c6:0d:19:d7:0e:ca:41:5d:82:0c:02:
cc:26:b8:79:98:a2:d9:d9:44:7e:8b:bf:2d:e8:30:0c:3e:8c:
23:7a:3e:39:c8:c0:50:47:c5:3d:93:43:ad:a3:fd:68:05:0d:
55:87:84:8d:db:62:f7:6e:f3:ed:df:e3:5b:c2:20:72:8e:67:
3d:73:e1:b6:bc:75:89:6e:3e:cd:c1:1a:31:e7:52:0a:64:a1:
69:8a:b8:30:54:92:10:0a:3b:65:89:92:89:bd:2b:72:37:20:
e9:a7:eb:4e:e6:de:6b:a6:ee:b5:1b:98:cc:ca:55:3d:8e:80:
f7:8c:19:1c:85:e1:81:e4:a2:98:07:fe:0a:0e:90:d2:01:91:
f1:0d:33:12:a9:b9:42:3f:b4:e9:2c:fa:30:53:58:da:0c:c2:
71:68:68:2f:f8:45:d1:bf:2b:98:27:65:fb:5a:e9:f5:94:44:
e3:c7:95:51:b3:0f:cf:a3:3a:73:5d:bd:b5:cf:cc:23:68:7b:
99:d6:bf:0f:0b:e7:51:72:be:78:53:bf:3c:4b:67:27:1f:45:
37:36:f2:47
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExAETzQw9P1EgdsVcUwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk
NWQ3NTNiYTgtZmU3NS00ZDNiLTg0OTYtOTcxNTA3MTc0ZGE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCBGAiuEoJKkyxJDVLtcnupB3s8Jz7M45+ii
G0ZDztjp+JvasK3bz9LFVxlcVG5CwK9bWIJMwywrXLZI3Vq3vr6sZI6N0oNt5i61
qKAMjzpPngwd+MD2O8+YNnoaoHJK7OPgsPnV0vmyIWgszLs6Bwh9iC7LzwoxM7Xb
gSO9spUPCT+lWKjNh4hZ5hfuhm8fNcvg+IRt284gAd4WF8yrgGGvbrQY2XVFAcH3
EYH1NU/jGp+JTs2FOv8aEhZlRsmCmhi8pxzSncPvjPj1qC/vGXWX62FjHNOu/LNP
Nza/3duQkHumfdNxHOYzzCC7v5lK5doFYoWTHr4UJFgrP+D1hwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFP1S17f5SD1Ng+7n0O59uanlm4jXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTY4YzI3NDAtOWQzMy0z
NTA1LWJkMjctOTIwNmYyYzUyYjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBBBRJvnhH2I1AUIU0Eqawywe1rVBH6aFUOt5ts
BgVsmzc4dB5I4hFLJOE6xg0Z1w7KQV2CDALMJrh5mKLZ2UR+i78t6DAMPowjej45
yMBQR8U9k0Oto/1oBQ1Vh4SN22L3bvPt3+NbwiByjmc9c+G2vHWJbj7NwRox51IK
ZKFpirgwVJIQCjtliZKJvStyNyDpp+tO5t5rpu61G5jMylU9joD3jBkcheGB5KKY
B/4KDpDSAZHxDTMSqblCP7TpLPowU1jaDMJxaGgv+EXRvyuYJ2X7Wun1lETjx5VR
sw/PozpzXb21z8wjaHuZ1r8PC+dRcr54U788S2cnH0U3NvJH
-----END CERTIFICATE-----
Generated at Sat Dec 27 04:01:19 2025 by rpki-client