This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7aa063f3-ca47-3ba0-b265-7b6d60829448.roa
File: 7aa063f3-ca47-3ba0-b265-7b6d60829448.roa (raw, json)
Hash identifier: VPUEKoo71MAaMPftxYXouoXoY+3QJOeiV4Gkcaa43xU=
Subject key identifier: 2A:F5:4F:48:F1:04:51:CB:24:7F:25:E4:EF:AC:A5:21:85:1A:BF:4B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584C59315F0C5268AE1BB05D2C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7aa063f3-ca47-3ba0-b265-7b6d60829448.roa
Signing time: Mon 29 Dec 2025 14:00:38 +0000
ROA not before: Mon 29 Dec 2025 14:00:38 +0000
ROA not after: Sun 29 Mar 2026 13:00:38 +0000
asID: 20431
IP address blocks: 2001:500:127::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:59:31:5f:0c:52:68:ae:1b:b0:5d:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 29 14:00:38 2025 GMT
Not After : Mar 29 13:00:38 2026 GMT
Subject: CN=c99ea048-9c17-4305-ae59-3129cff2847e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:86:9d:6e:24:94:91:06:c1:cf:7f:cd:62:a2:
0a:bd:42:b9:d4:b9:a7:99:d8:af:84:ba:ff:ee:05:
09:69:ea:f9:a7:41:29:79:4e:44:2e:a1:26:04:38:
8c:7a:b5:af:51:17:60:39:e2:f1:2c:b2:9f:46:e5:
40:0c:72:18:07:62:b7:6e:ee:00:27:87:3c:63:44:
4c:8d:09:c0:3c:bf:0d:8d:9b:6d:97:f7:a0:69:8d:
40:89:ca:d9:34:19:9f:1b:53:97:02:7d:74:e8:f7:
18:a5:f8:f1:61:9b:82:65:76:85:63:a1:ff:46:72:
8b:14:b2:3d:77:6a:62:af:6c:75:92:d9:d1:99:65:
2b:9c:29:be:3c:58:59:21:61:a2:de:4b:88:c9:1d:
e0:12:e5:65:e5:93:21:9e:93:92:96:db:46:19:6d:
de:d9:5c:fb:a9:37:0d:6f:9c:07:2d:86:72:f9:19:
45:31:35:72:94:21:34:3e:06:3b:84:ca:0e:0d:15:
a7:c1:fd:22:6d:e3:67:2b:38:d7:28:5d:bb:36:7a:
dc:7b:e2:ac:3c:c5:0d:23:32:86:d0:d4:ea:ec:3e:
f2:36:fe:e7:74:27:35:a3:25:01:b5:af:fe:24:05:
9e:f6:b3:58:d9:02:02:99:23:f8:03:43:b7:ed:23:
12:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F5:4F:48:F1:04:51:CB:24:7F:25:E4:EF:AC:A5:21:85:1A:BF:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7aa063f3-ca47-3ba0-b265-7b6d60829448.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:127::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:1a:43:a8:7d:ae:e0:05:78:03:9f:a2:57:b7:fd:d8:99:fb:
e9:bf:69:fc:a4:0f:5a:4c:2e:b6:3a:76:13:1e:ae:f4:1a:fa:
99:b0:64:0c:4c:a1:9e:99:93:13:e8:85:88:4e:8c:25:ef:4a:
ad:e8:bc:46:2b:33:91:05:42:db:17:82:58:88:1b:01:d6:2f:
24:fa:84:8f:7c:c1:ed:b4:1b:63:d5:66:ec:0b:93:f6:95:cb:
4f:5e:32:95:1a:fe:38:35:d4:93:c9:ff:62:3e:1a:98:5f:41:
ce:07:97:7a:ec:82:ac:85:f5:82:30:04:ba:24:5a:48:72:0d:
cc:6e:b1:cb:41:95:cc:63:29:d9:43:17:67:03:0c:21:c9:b4:
61:e1:df:58:c1:1c:cb:5d:6a:da:be:bb:98:04:e5:22:e0:7d:
4f:59:7b:94:9e:bb:e0:35:36:87:0c:8c:5e:7b:aa:bd:27:dd:
94:50:54:14:10:af:b1:28:38:78:e3:14:3d:8e:65:c9:3d:af:
1d:cb:f5:ab:ff:18:fe:af:e8:73:2e:58:57:df:0a:86:b9:c3:
a7:2a:d7:33:e4:f6:c7:20:27:e8:fa:e1:ab:3e:1b:f2:b2:35:
71:e0:04:76:b4:d0:9d:7a:db:7b:ea:33:3c:64:ea:9f:27:65:
54:86:e5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:12:10 2026 by rpki-client