This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8422d8c8-8203-300f-b746-36edd1959c67.roa
File: 8422d8c8-8203-300f-b746-36edd1959c67.roa (raw, json)
Hash identifier: ENZB+Z1d8/SVM46DdgOwUGikSGd/1grlT2NeAx1Q6z0=
Subject key identifier: 2E:3A:17:5F:DD:50:4D:E9:F3:A3:82:9F:77:97:5B:3F:AA:B4:06:D4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584C4011388A4F91C2340C44E180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8422d8c8-8203-300f-b746-36edd1959c67.roa
Signing time: Sat 20 Dec 2025 14:00:38 +0000
ROA not before: Sat 20 Dec 2025 14:00:38 +0000
ROA not after: Fri 20 Mar 2026 13:00:38 +0000
asID: 396546
IP address blocks: 2001:500:133::53/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:40:11:38:8a:4f:91:c2:34:0c:44:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 20 14:00:38 2025 GMT
Not After : Mar 20 13:00:38 2026 GMT
Subject: CN=a4eabc68-4e35-4718-994c-564d56bf9d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:73:19:6d:74:a6:1f:1a:5a:00:ac:f8:b0:42:
df:6f:05:1f:15:98:f3:45:8b:46:84:92:95:c5:2b:
3e:a7:d2:a2:1a:03:17:db:ee:5f:6b:8a:66:12:37:
97:37:07:90:db:7f:cb:9a:28:e9:94:df:9e:0c:71:
6f:26:bd:4e:87:3c:c3:e5:15:9f:8a:32:a0:e6:8e:
6f:b5:98:f5:92:26:12:9b:38:b0:db:bc:34:65:f9:
2a:ab:34:28:43:db:90:ce:ab:c4:d2:19:9c:4e:54:
2d:16:9f:c2:fe:a1:e6:be:20:d5:74:34:0b:53:0e:
cc:27:59:fb:46:5e:18:bd:18:fb:ea:07:fb:17:56:
10:28:27:fe:c9:25:83:79:ef:79:62:31:b8:5f:db:
bd:28:dd:26:b9:9c:ff:12:61:35:3f:86:cb:1a:9f:
ea:28:cb:d5:97:f9:0f:fd:e7:f1:b6:4a:c4:70:6d:
a0:cd:12:1e:81:5c:44:7b:65:17:6b:60:d2:52:03:
a8:a2:1d:68:ed:16:86:6f:9c:ff:b4:6a:88:9d:4d:
fc:cf:9d:96:be:7f:55:46:09:dd:81:18:85:e8:7c:
1d:86:a5:7a:fe:bd:1b:fd:71:95:7a:a6:c8:42:d1:
dc:d1:e7:30:fe:2c:12:1c:96:6d:81:f9:fc:f5:fd:
ae:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3A:17:5F:DD:50:4D:E9:F3:A3:82:9F:77:97:5B:3F:AA:B4:06:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8422d8c8-8203-300f-b746-36edd1959c67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:133:0:0:0:0:53/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:7a:1d:10:3b:46:d1:5b:1a:76:ae:99:fc:43:34:5d:63:e9:
23:39:96:f2:1f:a2:b8:7e:4a:30:9d:56:ae:6e:cb:4b:2f:e3:
d9:9c:aa:e8:38:f9:df:7c:36:ef:3d:05:96:b7:f3:2f:36:93:
01:1f:95:80:c5:8f:68:03:8b:a9:4f:49:fc:c5:27:5a:71:93:
3a:1c:94:d9:c8:8f:a8:47:92:3d:a2:00:e6:8f:ed:63:4e:7e:
bc:3f:19:b1:3d:63:13:1d:4c:a5:0c:7d:2f:d6:dd:da:fd:f4:
a8:73:9a:7e:12:4f:74:35:8c:4a:c1:f5:69:dd:9f:05:fd:0a:
3a:de:b3:f0:71:e5:aa:50:ce:d4:d5:d1:ca:4a:23:ab:8e:f1:
fa:f8:c2:39:e8:8f:c7:95:18:74:dd:36:0c:01:40:e2:23:26:
38:be:3d:9c:b2:69:63:04:3f:1d:05:f5:44:54:dd:b8:77:2b:
6a:fb:57:ff:44:82:3e:d4:f0:77:57:e7:ec:77:08:0b:06:89:
d3:c4:d5:38:48:01:b7:bd:ef:ae:b0:0f:b9:89:70:4f:5c:1b:
d2:b8:12:e6:0b:7c:ad:f7:88:fe:ad:0a:4b:b8:f6:c9:8d:25:
5f:5c:f4:6c:b3:c6:9d:3f:db:0c:d3:40:4c:ab:a4:21:36:35:
bd:f5:76:5c
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExAETiKT5HCNAxE4YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk
YTRlYWJjNjgtNGUzNS00NzE4LTk5NGMtNTY0ZDU2YmY5ZDBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXMZbXSmHxpaAKz4sELfbwUfFZjzRYtGhJKV
xSs+p9KiGgMX2+5fa4pmEjeXNweQ23/LmijplN+eDHFvJr1OhzzD5RWfijKg5o5v
tZj1kiYSmziw27w0ZfkqqzQoQ9uQzqvE0hmcTlQtFp/C/qHmviDVdDQLUw7MJ1n7
Rl4YvRj76gf7F1YQKCf+ySWDee95YjG4X9u9KN0muZz/EmE1P4bLGp/qKMvVl/kP
/efxtkrEcG2gzRIegVxEe2UXa2DSUgOooh1o7RaGb5z/tGqInU38z52Wvn9VRgnd
gRiF6HwdhqV6/r0b/XGVeqbIQtHc0ecw/iwSHJZtgfn89f2u+QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFC46F1/dUE3p86OCn3eXWz+qtAbUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODQyMmQ4YzgtODIwMy0z
MDBmLWI3NDYtMzZlZGQxOTU5YzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBgeh0QO0bRWxp2rpn8QzRdY+kjOZbyH6K4fkow
nVaubstLL+PZnKroOPnffDbvPQWWt/MvNpMBH5WAxY9oA4upT0n8xSdacZM6HJTZ
yI+oR5I9ogDmj+1jTn68PxmxPWMTHUylDH0v1t3a/fSoc5p+Ek90NYxKwfVp3Z8F
/Qo63rPwceWqUM7U1dHKSiOrjvH6+MI56I/HlRh03TYMAUDiIyY4vj2csmljBD8d
BfVEVN24dytq+1f/RII+1PB3V+fsdwgLBonTxNU4SAG3ve+usA+5iXBPXBvSuBLm
C3yt94j+rQpLuPbJjSVfXPRss8adP9sM00BMq6QhNjW99XZc
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:20:32 2026 by rpki-client