This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1523e39a-7cf2-37e3-9369-b0d63da25707.roa
File: 1523e39a-7cf2-37e3-9369-b0d63da25707.roa (raw, json)
Hash identifier: 23qTwcVRLgjlfocykBJJCvkSZpobM8Wexz+kjBs8shs=
Subject key identifier: D3:6D:C2:CA:46:EE:2F:FC:FD:8C:E0:42:92:D8:01:61:EB:A3:10:C3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BDA2B234F2FBC09FBDCB581F0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1523e39a-7cf2-37e3-9369-b0d63da25707.roa
Signing time: Fri 14 Nov 2025 02:00:30 +0000
ROA not before: Fri 14 Nov 2025 02:00:30 +0000
ROA not after: Thu 12 Feb 2026 02:00:30 +0000
asID: 36626
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:da:2b:23:4f:2f:bc:09:fb:dc:b5:81:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 14 02:00:30 2025 GMT
Not After : Feb 12 02:00:30 2026 GMT
Subject: CN=8149ab9b-4975-48d7-98df-505874dd0959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:6b:60:c6:c6:65:38:1f:73:33:fe:49:2b:
1d:a7:aa:79:81:5a:cd:6f:fd:aa:45:db:a5:23:c3:
1d:ab:70:7f:67:90:c9:d6:22:6a:d7:88:bf:4e:01:
de:99:2b:b2:fa:d8:bc:60:10:1e:f0:a5:cb:db:40:
35:1a:ac:32:bb:ce:3a:d1:1d:b3:ac:05:28:f0:7c:
23:ac:af:5c:93:ba:6c:9f:fa:bb:d5:33:88:1b:e1:
9c:49:57:a9:ad:1f:13:0f:bc:27:86:2a:6a:04:ef:
ef:29:b7:a0:9d:98:61:0a:c2:48:c3:34:fd:38:56:
0d:14:db:f6:84:63:62:9e:78:35:f1:bb:5a:66:65:
15:49:15:6f:0e:e2:87:6c:31:58:71:96:13:7a:d0:
77:4c:26:40:e3:70:d4:ee:eb:1d:03:1f:8f:13:09:
7e:5b:8f:6a:c2:65:a4:10:04:dc:74:ff:d4:ec:d7:
50:f9:24:1f:a2:9b:20:99:88:56:e0:33:1a:b9:d5:
2d:0d:01:47:d0:da:49:44:c6:ca:56:fb:45:50:46:
58:90:f5:fb:87:2e:bc:57:04:d5:92:16:5d:ae:be:
f1:66:f2:f9:3d:64:29:4f:4f:a8:18:fe:bf:12:d7:
31:f1:da:3b:02:65:25:09:73:b4:e0:46:17:bb:59:
d0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6D:C2:CA:46:EE:2F:FC:FD:8C:E0:42:92:D8:01:61:EB:A3:10:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1523e39a-7cf2-37e3-9369-b0d63da25707.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:fa:3d:64:ce:70:b1:97:7f:9c:af:d0:9f:04:4c:d3:f7:20:
ef:8b:dc:db:c3:95:ff:58:ba:1b:6a:35:a2:3e:2e:99:97:fd:
ae:e2:61:13:3d:08:e8:d5:9a:23:71:01:75:a7:7a:92:8b:8d:
12:2d:cf:8e:a3:03:6b:49:61:cd:09:25:b9:1a:12:25:36:d8:
a6:e8:cf:63:1f:7b:98:66:ea:18:79:a0:88:a0:0b:b6:7f:a3:
8e:9a:fd:96:2a:94:1d:b2:98:c5:47:53:73:e4:ca:0d:a9:f1:
0f:38:3f:62:26:99:60:ee:fe:15:31:b7:99:ff:37:8e:06:46:
bf:e8:fa:02:ce:0b:6f:c2:a9:dd:b5:f5:f1:b3:70:db:92:0d:
1c:02:25:d8:c3:22:f3:75:50:0b:6e:70:b4:76:d6:d0:0f:d7:
7b:de:1d:03:8d:08:91:60:49:03:59:1f:6e:6a:87:35:fa:30:
f3:c2:3d:80:81:a4:74:8c:f2:78:b7:10:32:59:b7:27:3a:c1:
b6:a7:5a:41:66:69:7f:a5:07:39:dd:fc:12:7a:d2:31:d2:94:
3a:61:2c:ed:44:20:ad:90:3b:27:18:10:1d:f6:eb:72:e5:74:
ac:66:fb:82:38:1b:d2:6f:0c:65:0e:59:3e:b9:49:d0:de:fc:
fe:44:37:a8
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEvaKyNPL7wJ+9y1gfAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTExNDAyMDAzMFoXDTI2MDIxMjAyMDAzMFowLzEtMCsGA1UEAxMk
ODE0OWFiOWItNDk3NS00OGQ3LTk4ZGYtNTA1ODc0ZGQwOTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMNrYMbGZTgfczP+SSsdp6p5gVrNb/2qRdul
I8Mdq3B/Z5DJ1iJq14i/TgHemSuy+ti8YBAe8KXL20A1Gqwyu8460R2zrAUo8Hwj
rK9ck7psn/q71TOIG+GcSVeprR8TD7wnhipqBO/vKbegnZhhCsJIwzT9OFYNFNv2
hGNinng18btaZmUVSRVvDuKHbDFYcZYTetB3TCZA43DU7usdAx+PEwl+W49qwmWk
EATcdP/U7NdQ+SQfopsgmYhW4DMaudUtDQFH0NpJRMbKVvtFUEZYkPX7hy68VwTV
khZdrr7xZvL5PWQpT0+oGP6/Etcx8do7AmUlCXO04EYXu1nQMwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNNtwspG7i/8/YzgQpLYAWHroxDDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTUyM2UzOWEtN2NmMi0z
N2UzLTkzNjktYjBkNjNkYTI1NzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCo+j1kznCxl3+cr9CfBEzT9yDvi9zbw5X/WLob
ajWiPi6Zl/2u4mETPQjo1ZojcQF1p3qSi40SLc+OowNrSWHNCSW5GhIlNtim6M9j
H3uYZuoYeaCIoAu2f6OOmv2WKpQdspjFR1Nz5MoNqfEPOD9iJplg7v4VMbeZ/zeO
Bka/6PoCzgtvwqndtfXxs3Dbkg0cAiXYwyLzdVALbnC0dtbQD9d73h0DjQiRYEkD
WR9uaoc1+jDzwj2AgaR0jPJ4txAyWbcnOsG2p1pBZml/pQc53fwSetIx0pQ6YSzt
RCCtkDsnGBAd9uty5XSsZvuCOBvSbwxlDlk+uUnQ3vz+RDeo
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:32:47 2025 by rpki-client