This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86e40ae2-d15d-398d-ad9e-1fa773eddd23.roa
File: 86e40ae2-d15d-398d-ad9e-1fa773eddd23.roa (raw, json)
Hash identifier: LhLL7u92isPeQDnShqC42eluWlgcI0iVxhedU0GqQWs=
Subject key identifier: E2:86:44:C7:4E:90:05:4F:3B:2A:66:BB:5C:A7:5D:FA:0C:16:54:D3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584C5EC6C81F8E735DD3C1F1BE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86e40ae2-d15d-398d-ad9e-1fa773eddd23.roa
Signing time: Wed 31 Dec 2025 14:00:38 +0000
ROA not before: Wed 31 Dec 2025 14:00:38 +0000
ROA not after: Tue 31 Mar 2026 13:00:38 +0000
asID: 396560
IP address blocks: 2001:500:126::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:5e:c6:c8:1f:8e:73:5d:d3:c1:f1:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 31 14:00:38 2025 GMT
Not After : Mar 31 13:00:38 2026 GMT
Subject: CN=592f89dc-4a87-4c8e-bbef-ca0a8d0c48af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:06:f5:d7:39:dd:da:95:74:e3:19:d4:12:
f1:b3:99:d6:17:0a:32:24:35:6e:ed:eb:07:55:72:
af:e8:0c:82:9e:6e:f8:5b:a4:a8:de:00:63:dc:1a:
1e:53:10:33:34:f3:69:60:b9:33:b7:95:38:49:79:
ce:7d:60:6c:64:75:10:11:45:09:cf:31:6b:ee:bd:
f4:5e:62:5c:af:01:09:d2:8f:28:9d:a0:e3:b2:35:
f0:c9:3b:25:d2:aa:c4:7e:97:78:fe:d9:08:b8:44:
48:53:7b:df:fb:a4:98:fd:41:ef:13:33:f9:f9:75:
1f:0c:cc:58:b8:f5:de:21:96:fd:33:48:f5:85:32:
1a:23:a0:3d:a4:15:9a:0a:69:63:d3:86:7f:26:76:
46:6e:19:0e:67:ff:80:ae:02:27:b0:9b:84:0d:58:
a0:5f:36:04:89:a2:a7:09:3f:ac:a4:d5:e8:ad:6a:
aa:67:17:36:12:33:bd:63:b9:db:52:f6:41:c0:78:
5c:26:58:96:2b:11:60:b7:31:8d:99:1f:e5:6a:a1:
14:fc:5c:da:aa:17:0f:50:6a:57:29:1f:e6:f8:02:
46:6a:06:59:84:6c:35:47:f7:99:f9:74:bc:4a:2e:
f4:3d:9a:a2:af:18:b9:ac:02:16:30:8e:5a:86:a4:
c6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:86:44:C7:4E:90:05:4F:3B:2A:66:BB:5C:A7:5D:FA:0C:16:54:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86e40ae2-d15d-398d-ad9e-1fa773eddd23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:15:0d:dd:94:55:76:9d:b7:f3:f1:1b:e8:cb:bf:fc:88:6b:
5f:20:25:42:dc:24:c2:be:92:4b:20:3a:df:1c:17:7f:b2:cf:
3c:30:13:ce:74:c1:ed:62:db:52:9d:63:41:09:1c:54:62:b4:
5c:06:25:d1:58:df:91:07:54:a9:da:c1:23:d6:ec:4e:83:f3:
50:57:67:e1:9a:b3:bb:b1:ff:99:fb:57:a5:76:ab:e5:55:e9:
92:bf:71:c3:27:af:9c:90:92:00:8b:cb:2f:10:bf:78:14:04:
e2:c5:9d:78:75:2c:31:6a:08:c1:78:87:f0:56:0d:c9:ed:e0:
a1:ae:db:aa:20:8c:27:fd:03:94:32:fa:aa:b9:5c:a7:ff:fe:
c5:44:a4:d2:2f:42:c2:86:fd:b2:87:db:2b:dc:4e:85:30:96:
33:b5:81:ed:c3:01:7d:fd:45:65:82:17:cc:f3:91:d0:e5:ba:
6d:4b:4b:ee:85:31:36:43:9f:79:e3:ec:d6:e1:df:65:a1:1b:
0c:5e:47:f8:4c:ce:b2:3a:c6:a9:a5:19:4e:31:31:03:d7:f2:
96:3e:2f:9b:ea:5a:d0:6f:82:02:a3:7c:d0:b1:bf:30:da:64:
21:27:af:09:0e:c5:a5:88:7e:8f:63:f7:c7:32:f8:f4:ec:7d:
a5:53:1c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:47:52 2026 by rpki-client