This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/420e788d-42c4-34fa-845a-c7f6c1d45f0d.roa
File: 420e788d-42c4-34fa-845a-c7f6c1d45f0d.roa (raw, json)
Hash identifier: h3r6faw/3wrBJWq32V90AW9yee0ijylonMjuwlCQ9mc=
Subject key identifier: 4A:08:CD:B8:F9:DC:1E:E5:7D:D5:07:E7:4D:6B:CC:01:FF:CB:15:0C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BCAD05B570D2D2798E00A6900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/420e788d-42c4-34fa-845a-c7f6c1d45f0d.roa
Signing time: Sat 08 Nov 2025 14:00:39 +0000
ROA not before: Sat 08 Nov 2025 14:00:39 +0000
ROA not after: Fri 06 Feb 2026 14:00:39 +0000
asID: 397200
IP address blocks: 2001:500:121::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ca:d0:5b:57:0d:2d:27:98:e0:0a:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 8 14:00:39 2025 GMT
Not After : Feb 6 14:00:39 2026 GMT
Subject: CN=60e8a058-9fee-4128-a8a7-3c971014e681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b0:7b:88:3f:15:a2:4e:0b:0b:2d:14:c0:ab:
3a:ec:87:f9:b7:97:e6:5e:b7:c3:4c:ba:3b:2f:9a:
72:1f:fb:c7:56:e0:7f:9f:8c:45:a4:b0:ad:17:bc:
71:4a:61:e9:aa:d9:68:92:57:df:09:dc:c0:fb:97:
0d:67:58:13:cb:d0:b6:8d:62:a0:52:f1:f4:ec:28:
46:4d:98:f8:50:22:f0:70:b5:b4:b0:3b:c3:fd:fe:
3b:63:0f:bb:4e:e4:31:5c:99:2a:d3:df:5b:52:c0:
2a:ca:61:ac:f8:cd:09:3f:1d:14:5f:28:f2:b5:3a:
c2:2d:d2:31:2c:55:5b:2c:fe:54:77:16:1e:ed:e2:
6e:14:6f:18:4d:e2:cb:ea:cb:64:37:55:6a:47:cb:
5e:31:87:06:3b:2c:ce:a1:69:d0:ef:cd:a0:8e:a8:
4a:c6:15:4c:db:20:9e:ad:a0:a7:65:fb:60:d7:42:
a8:03:4f:6d:fb:8d:48:6c:64:c2:a4:71:c2:2c:21:
ef:5a:97:78:ed:b2:bd:7c:df:16:65:75:b6:e9:36:
81:70:2f:e0:dd:fe:8f:a3:01:d7:f1:06:5e:24:7d:
fe:ee:dd:60:9e:05:bf:0d:ac:92:17:29:e3:13:bc:
1b:5a:c1:7c:ee:b7:ba:32:ce:0c:33:76:a1:a0:a6:
30:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:08:CD:B8:F9:DC:1E:E5:7D:D5:07:E7:4D:6B:CC:01:FF:CB:15:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/420e788d-42c4-34fa-845a-c7f6c1d45f0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:121:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:b3:64:20:c2:ea:32:9c:fd:59:8d:ec:0c:c0:2b:b9:46:17:
d1:3a:a4:01:69:06:48:a8:f2:62:96:45:18:6f:03:5b:ba:5c:
fc:06:ac:14:b4:bd:0e:42:05:46:0a:47:eb:1b:e7:37:6c:df:
83:86:75:79:ef:bd:63:37:75:4c:10:f7:24:04:bf:4c:f3:11:
3c:a1:0e:77:97:d9:f6:26:be:27:be:e1:f2:52:78:6f:1a:87:
9c:14:69:18:36:0c:fd:89:a1:df:dc:7d:3c:1f:18:e8:63:49:
b8:34:b7:d8:47:13:73:65:bd:f2:28:6a:93:78:4e:5f:e6:4b:
f0:ca:9e:7e:ce:df:1c:16:63:b0:7a:e5:e1:4e:b2:8f:33:e7:
1a:b2:b5:a7:67:36:3d:5b:59:a8:33:49:43:11:5c:91:6e:2b:
af:9e:9f:0f:88:25:5a:f1:0f:84:5a:b0:9e:a9:0f:95:c6:be:
b6:da:4f:21:dd:da:c8:56:4a:65:00:3b:04:d2:7f:67:4c:7c:
25:b7:69:af:38:3d:73:1f:be:af:5e:59:9e:36:a6:92:76:cf:
36:d9:86:fc:9d:fa:c2:84:24:7f:2f:51:75:3a:42:d1:29:da:
71:50:47:56:81:e3:73:06:fe:34:61:f9:f5:98:14:df:c5:1f:
6a:c6:25:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:23:36 2025 by rpki-client