This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f94d214b-9fa5-3d7c-b796-879fd8a0f239.roa
File: f94d214b-9fa5-3d7c-b796-879fd8a0f239.roa (raw, json)
Hash identifier: l3gQZ9C4reNVt7CX7AiXB0L5MFv/LkuWBeQJ4T7irNM=
Subject key identifier: DD:D7:5E:5D:E4:DE:47:FA:75:BE:FD:79:32:40:DA:64:5C:75:C1:CC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584C40113BD0EAC75289600CC340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f94d214b-9fa5-3d7c-b796-879fd8a0f239.roa
Signing time: Sat 20 Dec 2025 14:00:38 +0000
ROA not before: Sat 20 Dec 2025 14:00:38 +0000
ROA not after: Fri 20 Mar 2026 13:00:38 +0000
asID: 396600
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:40:11:3b:d0:ea:c7:52:89:60:0c:c3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 20 14:00:38 2025 GMT
Not After : Mar 20 13:00:38 2026 GMT
Subject: CN=54f98658-5e6a-43bd-b71f-4bd8cbbd1658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:d2:54:c7:96:d4:19:8a:bf:b3:4b:09:2d:
67:cc:06:f1:cd:eb:53:46:79:8a:76:45:21:65:46:
60:7f:17:a3:1c:96:5b:98:f2:f0:4a:8a:a9:29:2d:
41:8d:c3:cd:3a:61:d1:e8:af:84:39:0d:de:f9:92:
43:99:25:5b:3a:e1:b4:f0:07:d5:c3:c8:e9:11:b4:
dc:44:16:3f:e5:71:dd:5f:10:fe:d0:12:eb:16:61:
95:73:c4:0f:db:89:d4:f8:b1:01:5c:37:f8:68:fb:
8b:2f:47:3b:cc:c0:b8:bc:32:3e:58:89:cf:b9:bb:
ac:49:d5:b5:8b:6b:48:ac:d9:f3:14:96:68:f9:af:
1e:a9:f4:2d:34:2c:10:76:ba:54:db:63:37:01:da:
01:70:a5:42:c5:6e:35:f1:c3:62:8b:50:64:61:e6:
c9:29:bc:de:2a:e7:e5:dc:c1:f8:2e:af:5a:0b:32:
1f:7e:25:74:18:a8:22:d3:dd:97:e8:2c:db:8c:7e:
5f:43:d2:9e:21:b2:06:a5:85:20:a9:59:a2:dc:d5:
7f:c2:f2:74:2c:6e:0f:00:fe:a3:6e:98:b1:d4:cc:
02:05:84:61:30:4b:13:65:14:b7:59:69:6b:a6:09:
ef:da:c0:81:e1:d8:8c:04:ce:be:de:4d:69:2c:63:
d5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D7:5E:5D:E4:DE:47:FA:75:BE:FD:79:32:40:DA:64:5C:75:C1:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f94d214b-9fa5-3d7c-b796-879fd8a0f239.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:90:98:25:93:1d:9c:67:0b:5b:fe:a5:24:02:e5:c4:67:94:
23:3f:27:96:0b:b2:84:3c:db:27:cf:a9:44:51:21:15:ba:da:
19:22:66:ec:1b:7f:b8:37:fa:b2:40:d2:b1:ff:11:53:8d:e2:
a1:9e:87:7b:a2:c3:ba:40:2b:64:f8:57:79:50:b2:e5:36:f9:
83:c8:26:2e:98:b6:89:52:b5:81:43:6e:79:7c:42:a6:ef:9e:
09:96:7d:46:61:b3:98:1c:63:d3:e0:1d:5a:a3:69:66:f8:25:
f2:67:21:2c:be:f4:13:6e:01:20:77:23:5c:36:83:4f:29:24:
86:4f:c6:ce:2f:d7:a8:dd:54:d2:5d:23:99:d4:02:3f:2c:19:
74:62:78:6c:f3:0b:b4:1c:70:4a:e1:ec:6f:13:50:d4:13:b3:
70:d1:b4:9f:93:d0:71:f9:c4:74:c1:41:27:08:af:42:05:7d:
f8:d9:82:2c:e2:90:ac:1a:5a:1f:26:c1:91:72:fa:7c:d6:05:
f1:64:e2:ab:87:0a:38:3b:a5:0d:60:bf:83:dd:c6:5a:d8:6a:
f7:e3:57:37:6e:0f:30:45:ce:0d:75:a7:d1:0f:7f:cd:e2:eb:
0d:8d:bd:d2:6f:e1:c8:17:2a:d4:df:14:a5:fd:0c:b6:c5:f3:
6d:83:74:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:25:09 2025 by rpki-client