This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a32ffd9-7eb3-39bb-88f3-0707b2e13c22.roa
File: 2a32ffd9-7eb3-39bb-88f3-0707b2e13c22.roa (raw, json)
Hash identifier: S6ta0Y0zFBKxUa3nKpjN1fIzS9AnezaBcCE/J/7nQHY=
Subject key identifier: 14:39:2F:15:7A:49:85:33:D2:BA:34:4D:FB:34:3E:4F:DA:69:5F:69
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BFBAB43745DCB14A94E79BE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a32ffd9-7eb3-39bb-88f3-0707b2e13c22.roa
Signing time: Wed 26 Nov 2025 02:00:31 +0000
ROA not before: Wed 26 Nov 2025 02:00:31 +0000
ROA not after: Tue 24 Feb 2026 02:00:31 +0000
asID: 396595
IP address blocks: 2001:503:39c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:fb:ab:43:74:5d:cb:14:a9:4e:79:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 26 02:00:31 2025 GMT
Not After : Feb 24 02:00:31 2026 GMT
Subject: CN=bf1da48b-b51b-47db-a50a-5f64934daa60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0a:3b:3c:24:33:84:75:31:de:f2:1d:18:91:
cb:6f:bd:0f:5c:7a:63:25:ae:6b:ab:ab:30:65:2a:
16:23:f5:4e:8c:08:08:35:24:c8:e5:dc:10:7d:3e:
61:1d:66:9e:a7:f5:5a:ea:3e:e3:7d:81:61:22:c2:
17:ed:3a:fc:d4:22:4b:c1:71:1b:fc:3f:1a:00:84:
bb:8d:80:a4:5c:76:64:4e:91:5f:7e:90:38:5a:42:
3d:ba:88:9e:62:6e:d3:14:33:1d:25:a7:e2:33:ac:
dc:78:ba:8d:a7:5a:fc:23:db:2c:d3:1d:ec:1b:68:
12:a5:59:53:c9:e0:a8:79:eb:9c:75:82:84:c3:5d:
ca:74:e5:3e:02:63:d1:8a:f3:30:9d:57:82:53:07:
7b:4b:b2:f3:bb:60:9d:b0:45:24:d8:51:d8:ba:72:
fa:1e:58:e8:b5:e8:aa:e2:80:04:c0:8d:f0:3a:0f:
e8:95:c5:a4:13:93:55:54:95:58:ab:20:09:29:fc:
c9:51:06:c1:8f:ef:e3:42:1c:74:eb:ff:af:64:18:
c3:6d:bd:76:12:87:05:95:8b:50:6d:4c:90:a7:64:
a5:32:a6:93:01:64:66:a3:64:cb:a9:52:76:71:64:
7c:25:64:fd:f8:23:1a:9d:d4:7f:b8:82:5e:eb:e1:
48:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:39:2F:15:7A:49:85:33:D2:BA:34:4D:FB:34:3E:4F:DA:69:5F:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a32ffd9-7eb3-39bb-88f3-0707b2e13c22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:39c1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:df:2a:5c:5c:f8:4e:29:a1:5a:06:60:a9:a8:b4:e9:54:a2:
09:58:47:69:45:49:ff:b5:bc:99:44:8f:88:89:8a:79:76:19:
15:77:1b:7c:16:1a:1c:68:1f:de:3a:20:6b:9d:2b:be:80:78:
92:91:ae:27:ce:eb:45:00:36:c5:8b:08:c8:55:27:9b:ea:46:
b5:3e:41:5a:ba:01:64:9a:50:58:7f:0e:c8:95:4d:44:0a:a6:
d0:f6:9f:54:4d:40:e1:2b:ac:d4:2e:aa:c6:38:3c:b1:4e:03:
62:09:0d:bd:24:84:18:05:01:98:39:64:0d:40:4b:35:45:47:
5a:d0:96:be:51:f7:87:d8:82:f0:23:e6:2e:39:10:46:f4:3b:
e1:73:11:83:37:d4:c6:0a:85:bb:40:7a:b1:d2:cf:fe:65:9c:
c9:c9:27:a6:63:4a:ba:5c:62:c1:d8:12:c5:ab:5f:9e:6a:70:
51:46:12:53:7f:ea:8c:12:6c:7d:50:61:0c:fa:71:67:b6:40:
a8:8d:2a:b7:6d:9a:e7:7b:ae:b7:02:48:37:a5:d4:fb:81:d2:
f6:0d:15:1d:ca:a7:9f:d2:91:a6:5e:b3:b7:1f:fb:68:93:25:
e6:e4:73:b9:91:9f:6a:3b:d9:0e:78:e8:a1:36:19:6f:5e:14:
76:21:ff:b2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEv7q0N0XcsUqU55vgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTEyNjAyMDAzMVoXDTI2MDIyNDAyMDAzMVowLzEtMCsGA1UEAxMk
YmYxZGE0OGItYjUxYi00N2RiLWE1MGEtNWY2NDkzNGRhYTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwo7PCQzhHUx3vIdGJHLb70PXHpjJa5rq6sw
ZSoWI/VOjAgINSTI5dwQfT5hHWaep/Va6j7jfYFhIsIX7Tr81CJLwXEb/D8aAIS7
jYCkXHZkTpFffpA4WkI9uoieYm7TFDMdJafiM6zceLqNp1r8I9ss0x3sG2gSpVlT
yeCoeeucdYKEw13KdOU+AmPRivMwnVeCUwd7S7Lzu2CdsEUk2FHYunL6Hljoteiq
4oAEwI3wOg/olcWkE5NVVJVYqyAJKfzJUQbBj+/jQhx06/+vZBjDbb12EocFlYtQ
bUyQp2SlMqaTAWRmo2TLqVJ2cWR8JWT9+CMandR/uIJe6+FILwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBQ5LxV6SYUz0ro0Tfs0Pk/aaV9pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmEzMmZmZDktN2ViMy0z
OWJiLTg4ZjMtMDcwN2IyZTEzYzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACffKlxc+E4poVoGYKmotOlUoglYR2lFSf+1vJlEj4iJinl2GRV3
G3wWGhxoH946IGudK76AeJKRrifO60UANsWLCMhVJ5vqRrU+QVq6AWSaUFh/DsiV
TUQKptD2n1RNQOErrNQuqsY4PLFOA2IJDb0khBgFAZg5ZA1ASzVFR1rQlr5R94fY
gvAj5i45EEb0O+FzEYM31MYKhbtAerHSz/5lnMnJJ6ZjSrpcYsHYEsWrX55qcFFG
ElN/6owSbH1QYQz6cWe2QKiNKrdtmud7rrcCSDel1PuB0vYNFR3Kp5/SkaZes7cf
+2iTJebkc7mRn2o72Q546KE2GW9eFHYh/7I=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:25:18 2025 by rpki-client