This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14e45b69-de92-32dd-90bd-f9e5cc1e7088.roa
File: 14e45b69-de92-32dd-90bd-f9e5cc1e7088.roa (raw, json)
Hash identifier: 09iqsH8rAW4lqAuMOPWep6MP5JAj+jh9klgrFGal8xo=
Subject key identifier: 42:A1:5D:4C:33:F3:DF:DF:BA:94:39:C0:CE:3D:64:FB:CA:EC:B6:E4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584C109B93EF432CBF3B47990E60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14e45b69-de92-32dd-90bd-f9e5cc1e7088.roa
Signing time: Wed 03 Dec 2025 14:00:38 +0000
ROA not before: Wed 03 Dec 2025 14:00:38 +0000
ROA not after: Tue 03 Mar 2026 14:00:38 +0000
asID: 36631
IP address blocks: 2001:502:1ca1::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:10:9b:93:ef:43:2c:bf:3b:47:99:0e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 3 14:00:38 2025 GMT
Not After : Mar 3 14:00:38 2026 GMT
Subject: CN=d167fbab-c0a3-4ec6-8c2d-8f28775e6d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7f:c7:c1:4a:27:a5:e3:85:6e:15:6c:88:70:
63:c6:a8:d8:03:c5:11:86:97:e8:a0:45:11:3c:8a:
d3:b7:db:0b:1b:f2:22:52:99:4b:75:6b:ae:f6:ed:
85:98:d3:71:88:a4:d5:53:48:1c:d4:5c:2e:d6:74:
56:7d:8c:43:90:4f:76:96:28:ca:27:c8:b1:92:9d:
c7:64:ff:7f:8a:5b:24:fb:96:1b:b8:4f:5a:4d:ad:
56:df:90:cb:d3:4d:62:f2:a5:6c:43:9b:49:e8:87:
34:83:30:40:d2:59:45:51:9b:33:aa:32:be:76:1d:
05:37:ab:a7:bd:8e:62:2f:4d:8a:6d:eb:27:e3:f9:
1f:91:e5:82:ac:60:d4:fb:e3:a3:12:51:97:b3:41:
ff:d8:25:91:12:cf:73:fd:03:77:68:75:ad:5c:c1:
62:87:fd:b8:01:c1:2d:88:0f:03:b7:f8:76:15:c5:
7b:cb:3c:c0:81:7f:11:ba:d8:c5:f4:4b:80:08:b8:
29:56:9f:42:24:b4:04:06:92:a6:0e:d3:a7:45:35:
a3:25:c1:96:3c:99:fb:03:c8:8e:60:23:a1:a3:5a:
77:e9:d5:a3:be:7e:75:62:49:73:1b:5c:e7:19:45:
23:d2:b3:59:89:85:17:39:5c:5c:86:37:3d:2a:7a:
4a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A1:5D:4C:33:F3:DF:DF:BA:94:39:C0:CE:3D:64:FB:CA:EC:B6:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14e45b69-de92-32dd-90bd-f9e5cc1e7088.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:e5:74:b3:92:25:b9:91:98:40:59:84:cd:28:2e:1c:d5:b9:
b9:21:60:1b:5a:3b:df:b6:52:57:16:a2:ca:1f:91:5d:e3:82:
c2:7a:5d:73:03:af:74:b9:1e:0e:b8:c8:c1:0b:98:51:8b:29:
95:a9:18:04:00:21:35:34:26:36:c4:c1:19:c9:de:aa:03:b8:
d2:12:78:25:13:75:da:ea:bf:19:60:d3:aa:77:26:79:80:14:
49:8b:d7:03:fc:90:12:da:f0:32:37:65:af:45:bd:d9:4a:ab:
5c:78:b8:85:7a:42:76:bb:99:9b:87:08:4b:8f:b5:97:a3:be:
aa:e4:d5:06:60:2e:d6:a0:71:3a:12:52:20:45:eb:95:4b:da:
ff:00:3f:ba:2e:08:f2:f3:d4:91:68:3f:c2:07:8a:03:b5:29:
fe:53:d8:0f:86:3d:e9:39:17:65:bb:01:e3:53:d8:7e:9b:40:
76:b6:1f:84:f8:ee:a9:86:90:49:25:2b:e9:be:73:78:6d:c9:
03:5e:8f:1e:2d:ab:94:de:ae:8b:30:7a:68:8e:ca:cd:6f:c7:
a6:b0:b0:d0:e2:89:92:81:8d:b8:ef:c0:9b:bc:51:09:58:70:
22:b1:36:4a:e9:b2:7b:9d:97:da:cd:2e:23:1f:33:51:27:c1:
cd:1c:a2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:27:25 2025 by rpki-client