This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a20a9c10-fe85-3c52-88b2-71a1f1d4a817.roa
File: a20a9c10-fe85-3c52-88b2-71a1f1d4a817.roa (raw, json)
Hash identifier: Gz1Er3xlLysFpah9IvhLeRxWZ9qlhHxopvDDEupeE5o=
Subject key identifier: 69:09:09:78:3C:7E:A3:42:5F:BC:8E:8C:FF:A7:8C:CA:89:63:8D:BC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584CA32CDB03023D36D715D84440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a20a9c10-fe85-3c52-88b2-71a1f1d4a817.roa
Signing time: Sun 25 Jan 2026 02:00:31 +0000
ROA not before: Sun 25 Jan 2026 02:00:31 +0000
ROA not after: Sat 25 Apr 2026 01:00:31 +0000
asID: 36626
IP address blocks: 2001:500:126::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a3:2c:db:03:02:3d:36:d7:15:d8:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:31 2026 GMT
Not After : Apr 25 01:00:31 2026 GMT
Subject: CN=e21b7281-c8c6-4783-8e19-4dad99b30021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3a:ea:9d:e8:be:d9:93:8c:c7:69:9b:4d:a2:
3a:9f:9c:29:de:e0:e7:e7:b0:3d:62:a1:d0:ac:63:
84:c4:ad:0d:f1:5b:55:24:ae:95:d5:5d:1c:8e:b5:
8e:77:56:cc:85:66:91:ac:59:86:97:d0:ae:d5:9e:
3b:1b:16:35:a6:3b:ba:eb:3e:a5:6e:d0:33:7f:83:
ee:4f:99:bf:80:88:fc:ec:ad:6c:26:4b:ec:98:65:
34:0b:c9:01:6f:fd:10:90:2c:56:4d:e5:0f:40:f8:
4c:c6:58:f2:0d:b6:5c:15:7e:9d:65:0f:38:69:05:
a2:fe:36:96:8b:4e:cd:9d:bb:7d:fe:0e:92:12:36:
af:26:17:a6:72:12:34:e4:4b:2f:80:b2:19:26:53:
d3:40:1d:f4:33:a6:41:4d:c5:85:d3:9d:d6:13:05:
68:d8:70:71:17:00:75:bf:f6:b4:5a:57:5b:cc:b8:
51:17:f2:11:05:cd:34:6c:d2:fc:fe:6f:77:d3:0d:
dc:d4:21:c4:7c:a9:cf:66:49:be:43:22:31:87:45:
7c:18:ab:7b:a2:6d:30:ad:e9:a4:c3:53:cb:50:5d:
55:ed:4a:ba:7c:9b:77:48:22:b8:ba:a3:76:54:ec:
13:bc:83:e7:8f:b7:68:4f:7c:92:63:d9:f6:90:a0:
18:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:09:09:78:3C:7E:A3:42:5F:BC:8E:8C:FF:A7:8C:CA:89:63:8D:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a20a9c10-fe85-3c52-88b2-71a1f1d4a817.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:29:2a:17:6e:50:cc:5a:47:97:98:db:01:23:d5:23:60:99:
5b:7d:97:c6:f2:1b:04:05:af:a3:01:31:9b:a3:a4:0d:c1:8d:
b5:be:0d:3c:41:2a:44:c1:a0:1c:92:dc:f4:6a:d3:84:b3:b0:
0d:16:ec:ed:59:db:23:d5:f2:0f:c1:09:f5:e5:5a:d9:5c:af:
61:e4:17:c8:b1:7b:2a:9f:01:6b:d1:da:51:ce:b4:93:cf:5b:
58:b4:c8:d4:2d:0b:7a:f9:6b:af:04:33:12:c7:0b:fe:6a:30:
ea:c1:cb:bc:03:b9:ed:84:cb:b1:d7:58:d1:ec:d6:bf:80:82:
9d:6b:cb:bd:1b:ab:12:3f:18:2c:5a:5e:dc:ce:b7:6d:16:51:
51:16:f4:86:40:c2:7a:f0:f9:f4:1d:35:76:d7:8a:2b:3a:8a:
eb:6f:b4:c5:61:2d:90:85:a2:42:1f:8d:3f:1e:dc:75:ad:27:
76:66:f4:30:bf:aa:57:8c:8e:96:50:b8:07:8a:9d:b1:e1:82:
06:1e:7d:49:a6:34:b1:d1:2d:34:c6:6d:ec:b0:61:91:f2:d1:
cf:8d:2e:88:88:4b:50:9a:28:ab:c1:2d:5f:3a:87:04:ae:3f:
ec:b8:e9:89:1f:7b:9f:65:4d:63:f7:c1:ed:5c:70:6f:21:17:
3f:31:0e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:47:25 2026 by rpki-client