This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33cb885f-cbf1-37e0-b4a1-135ea4afa9db.roa
File: 33cb885f-cbf1-37e0-b4a1-135ea4afa9db.roa (raw, json)
Hash identifier: g1hHelp0lq2MDLVGU7PgTvCfoi5y2kDW3hteqxWNTTI=
Subject key identifier: D3:1F:B0:E8:E4:D2:8F:A0:89:7A:F6:6B:11:44:7C:04:ED:8F:C3:8B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584C5931678EFCCDDEC8C8DE6D60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33cb885f-cbf1-37e0-b4a1-135ea4afa9db.roa
Signing time: Mon 29 Dec 2025 14:00:38 +0000
ROA not before: Mon 29 Dec 2025 14:00:38 +0000
ROA not after: Sun 29 Mar 2026 13:00:38 +0000
asID: 396595
IP address blocks: 2001:503:c27::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:59:31:67:8e:fc:cd:de:c8:c8:de:6d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 29 14:00:38 2025 GMT
Not After : Mar 29 13:00:38 2026 GMT
Subject: CN=26f6ff92-8aab-4555-9478-9cd4ea996e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:af:37:3f:5e:2f:9f:e3:1c:f1:43:ae:3a:fb:
62:e4:cb:62:c1:4a:34:2f:c6:dd:69:eb:1c:2e:af:
3e:a2:59:c5:f3:88:ca:8c:ea:70:fa:94:5d:6f:91:
83:3a:b6:08:5d:d7:25:33:60:60:de:30:19:1a:16:
2a:44:01:ce:3d:9c:80:94:ed:60:70:0f:cc:9d:5c:
9b:ed:16:d9:a1:53:e2:c9:c7:dc:13:ab:fb:28:c6:
5c:1c:9a:48:bc:5c:20:9a:3e:67:a6:b0:ed:d2:3d:
2c:44:b7:3e:64:4b:fb:a4:b9:cb:c2:ad:29:08:05:
67:29:23:68:7d:05:f5:df:93:71:21:00:ca:b2:8d:
3f:83:dd:51:91:1a:4b:02:65:56:9f:f8:b7:7b:cf:
d3:1f:16:cf:91:3e:86:7c:0d:c4:fc:82:aa:68:54:
dd:a6:af:9b:09:a3:83:c3:21:95:ab:c6:71:8e:f8:
f6:21:c7:d1:3b:8b:4e:67:43:31:1e:c4:f7:e4:12:
f3:3f:4b:df:86:fb:57:a8:44:29:94:7a:f7:dc:e9:
f2:d8:78:f7:4b:ce:f3:e1:f7:d6:63:50:11:2c:d8:
bc:94:26:fa:f1:87:36:48:d5:ba:8a:bf:eb:d0:6f:
73:55:3b:78:63:a2:5d:1c:ad:b0:ab:53:0f:1e:92:
06:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1F:B0:E8:E4:D2:8F:A0:89:7A:F6:6B:11:44:7C:04:ED:8F:C3:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33cb885f-cbf1-37e0-b4a1-135ea4afa9db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:c27::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:19:c7:a7:47:dc:ee:fa:f4:25:6f:ef:16:11:e2:8e:27:63:
6a:4e:f0:41:7e:7b:fb:aa:5c:16:fd:70:83:53:ec:70:f2:14:
ea:2b:b4:28:98:59:5c:1c:4c:12:c9:af:f3:90:65:2b:8a:e9:
dc:a0:03:15:90:04:bb:f6:a5:f7:e6:52:b1:3f:17:d3:4b:1a:
d7:85:2a:9f:33:c1:56:9b:cc:1a:6d:f9:49:b5:bd:6b:2b:d8:
d8:bb:b8:a5:ba:54:20:26:52:75:4e:c9:36:00:2b:06:dd:65:
c1:bb:e9:64:ac:b8:0f:87:85:09:6f:8c:ae:c8:2a:60:b3:f4:
94:1c:73:48:8e:4e:31:76:a4:53:6a:3e:da:4b:e2:52:f5:9f:
29:0b:f1:66:a5:78:7a:c7:6b:96:1a:e7:b9:fd:5a:e4:66:a7:
9b:10:7b:c3:3e:43:5e:70:3d:d0:80:ad:5d:09:35:0f:54:b9:
38:95:38:08:26:27:46:cd:b5:d0:a8:d0:ec:ad:51:10:5b:6d:
28:4f:81:1f:e8:b4:68:96:57:b5:57:47:f7:7d:f0:e1:58:63:
46:84:a6:c0:a8:9d:e0:9d:5c:d6:f2:dd:02:d5:95:b7:16:79:
79:14:62:59:31:9a:1c:83:f8:77:22:53:81:e6:06:90:87:14:
6f:e0:ce:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:51:16 2026 by rpki-client