This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a9a18f4-8b67-3ab0-88e9-05651871d975.roa
File: 3a9a18f4-8b67-3ab0-88e9-05651871d975.roa (raw, json)
Hash identifier: i/950FOnUFLjXsUy1Qd58dlazQ1v0tbdL24uG1CWRlg=
Subject key identifier: F7:00:AD:11:92:07:6A:8F:33:9B:8F:AF:40:6A:2A:20:E9:35:DD:C2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BF8E089C56EC4E22CC73C3700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a9a18f4-8b67-3ab0-88e9-05651871d975.roa
Signing time: Tue 25 Nov 2025 02:00:31 +0000
ROA not before: Tue 25 Nov 2025 02:00:31 +0000
ROA not after: Mon 23 Feb 2026 02:00:31 +0000
asID: 397194
IP address blocks: 2001:501:b1f9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:f8:e0:89:c5:6e:c4:e2:2c:c7:3c:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 25 02:00:31 2025 GMT
Not After : Feb 23 02:00:31 2026 GMT
Subject: CN=a39c83df-58a2-4c9d-80bc-20f360651b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:be:76:49:84:cc:1f:5e:ff:77:9c:85:59:c4:
9b:27:37:5b:80:0c:a9:44:d8:9c:f1:a0:8f:17:d5:
ba:56:0d:37:e8:21:a8:a2:42:eb:08:48:9a:db:58:
28:bf:9a:93:7c:2a:25:ea:96:50:d6:05:c7:54:59:
63:64:55:54:c7:3b:c9:ff:ec:30:a4:19:ac:6e:99:
8b:2e:97:e3:d2:db:e7:64:d6:c1:b6:33:07:04:aa:
d9:53:da:33:03:27:6b:d0:a4:0d:8e:85:70:d6:d8:
ed:ed:20:cf:e0:1e:f4:a5:03:6f:98:20:a7:7f:17:
da:2e:56:cd:5b:86:b3:1a:6a:2e:a4:28:3f:d1:c9:
2c:02:d4:f3:97:c2:8b:c0:98:07:eb:c0:79:50:4f:
2b:90:92:c3:53:ad:26:c9:7f:f0:6b:82:b3:70:01:
86:cc:ce:3d:a7:d0:13:8d:86:f5:d1:9a:4e:87:22:
d8:fb:c4:c1:b9:75:9f:00:e0:7b:fd:08:c9:55:da:
7e:2f:f3:8f:9f:32:a5:3f:f5:72:94:f7:f0:c1:e2:
12:63:de:fb:a1:90:80:f4:66:07:d1:bd:da:fc:14:
d2:44:41:e6:9e:23:ce:2f:9c:dc:8a:42:5d:3c:b9:
f8:ca:e8:7b:24:22:07:ca:f8:66:9c:ec:e0:c8:56:
c0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:00:AD:11:92:07:6A:8F:33:9B:8F:AF:40:6A:2A:20:E9:35:DD:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a9a18f4-8b67-3ab0-88e9-05651871d975.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:b1f9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:ef:2a:b7:2e:ef:5e:a0:8b:c7:35:76:c0:7e:8a:b4:1d:70:
62:06:40:17:77:d7:72:48:b2:64:f1:11:bf:79:dd:68:a1:af:
da:d9:d5:88:c8:de:9b:c0:cb:41:fd:90:1f:6e:be:32:50:45:
15:95:aa:75:d8:a7:a4:33:53:ac:1a:ca:36:53:b5:a3:90:a6:
6a:25:12:db:96:d6:90:da:28:5c:c8:6e:98:f2:da:85:d2:e0:
70:f8:78:77:06:6a:75:60:09:04:0a:50:7c:64:84:7a:0b:cb:
4f:b2:60:02:57:eb:91:04:e1:5a:d0:97:dd:1c:df:6d:96:1c:
d3:b2:36:96:36:49:81:07:f2:d5:af:21:95:d7:e1:44:46:7e:
28:00:c1:cd:27:9a:fd:0d:20:cd:7a:d4:d7:7d:89:85:54:ed:
5d:72:a2:05:00:4e:5f:06:52:40:ef:67:ea:60:19:b7:37:84:
6b:69:45:87:8d:42:7c:a0:32:50:f7:90:79:9a:79:6f:f3:cb:
ab:0e:4f:7f:aa:a4:51:1f:0d:fd:0c:77:47:fc:9b:bd:aa:91:
94:f3:47:50:6a:4e:82:0a:c5:33:13:d6:51:91:f6:2e:f9:d6:
c2:23:c7:e2:8a:28:6d:28:19:59:b1:74:ac:06:86:61:48:70:
64:a5:0a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:25:47 2025 by rpki-client