This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/902840e6-1d2d-3d3f-9bc8-1748a8670fc9.roa
File: 902840e6-1d2d-3d3f-9bc8-1748a8670fc9.roa (raw, json)
Hash identifier: yizYBGydySRweP09lOIcluVu4/XdtSqojRTOlTWCneo=
Subject key identifier: D3:01:28:23:AD:7E:25:64:57:9E:A1:4E:02:E9:3D:58:58:81:B6:BD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BEAEB28B91A47B2911839DA60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/902840e6-1d2d-3d3f-9bc8-1748a8670fc9.roa
Signing time: Thu 20 Nov 2025 02:00:30 +0000
ROA not before: Thu 20 Nov 2025 02:00:30 +0000
ROA not after: Wed 18 Feb 2026 02:00:30 +0000
asID: 396605
IP address blocks: 2001:502:1ca1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ea:eb:28:b9:1a:47:b2:91:18:39:da:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 20 02:00:30 2025 GMT
Not After : Feb 18 02:00:30 2026 GMT
Subject: CN=d0f235ce-14b1-4a9f-b091-cc1d9c6f4949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:53:83:e7:ca:7b:9b:36:bc:96:8c:ea:a2:
e0:43:7d:c1:03:27:bb:6b:bd:86:10:97:77:9e:7f:
c5:15:fa:99:1f:98:1d:34:93:c8:9a:e4:2c:53:f1:
bb:11:59:e7:0d:82:b4:9e:64:18:da:78:7c:a8:34:
5b:2f:52:62:53:b8:ce:8c:88:9d:38:7f:17:f3:fa:
81:87:ec:55:1e:b0:42:04:43:2b:f4:82:2f:98:58:
72:7c:d0:7b:76:d2:8b:55:7a:07:df:6e:ce:2c:ce:
ef:51:8b:1f:3c:d5:da:a0:45:c5:de:6b:02:fa:d0:
91:1c:12:fb:f3:76:1b:0e:e2:66:6b:27:7b:79:94:
b6:a2:2d:72:61:8c:58:06:54:14:3b:a4:68:9a:17:
cc:a6:70:82:f0:3b:c2:98:e0:ea:0b:be:0a:5f:e4:
41:fb:ee:f0:b0:42:a2:b9:5c:fd:42:cc:48:ba:f2:
0d:d1:0b:12:c3:8f:bc:78:ec:f2:fc:4b:97:ba:1b:
67:4f:d8:b1:b7:31:31:c1:9d:a8:57:8d:92:b5:db:
74:83:ac:ef:d3:46:8b:69:90:0d:09:e8:1b:ee:ac:
64:bc:9a:fe:b6:4b:64:b1:85:e6:68:77:d1:4f:d0:
eb:fa:2b:71:cc:76:c2:21:88:fe:db:78:ef:42:43:
fc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:01:28:23:AD:7E:25:64:57:9E:A1:4E:02:E9:3D:58:58:81:B6:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/902840e6-1d2d-3d3f-9bc8-1748a8670fc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:1ca1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:60:c7:e4:a0:8d:31:b6:e5:6c:25:a0:b5:ed:84:09:f3:7e:
32:ab:4d:11:31:bb:f0:5e:ea:1a:77:a2:45:87:0a:30:94:3e:
c9:46:c6:22:f4:13:ec:c5:12:6d:d0:1f:d8:06:7f:65:48:4a:
05:6e:2e:ba:8c:3d:65:e9:e9:51:7b:6d:98:b4:18:f0:e3:93:
c3:8c:76:9c:0d:59:ac:1a:c7:25:50:aa:28:3b:ba:24:11:a7:
ba:4e:b7:5a:54:07:18:13:2c:33:2f:79:3a:6e:a8:d0:36:ca:
26:07:26:3f:6b:3c:0c:34:69:a7:08:c4:00:6c:18:ec:46:ab:
bc:b4:8b:34:a1:3d:d7:8e:0e:d7:c7:0a:c3:bd:2b:ae:82:85:
e6:87:58:25:5e:b4:e0:c7:e1:02:c8:1a:8a:56:fc:58:d8:1f:
02:43:87:76:f6:96:f3:b9:c5:f5:74:62:37:97:c0:4b:26:64:
bc:c4:d8:f8:3c:c9:9f:e3:de:3a:fd:63:ce:95:d8:32:3f:15:
49:aa:3e:cb:3e:7e:aa:2e:10:e2:c5:c8:63:68:86:f9:5a:bb:
7b:02:08:bb:17:61:cb:3c:88:7e:da:73:4a:5b:c3:d6:5a:fb:
57:fa:76:3b:70:40:7c:2d:8e:5e:d2:4c:ad:ec:ae:1b:62:e1:
44:86:5e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:20:27 2025 by rpki-client