This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb96f424-563c-3a18-aaf4-756d57e76911.roa
File: cb96f424-563c-3a18-aaf4-756d57e76911.roa (raw, json)
Hash identifier: 5rLVFplBUFFEjfg8ITnm9temep75pdqchevwtY3Vdnw=
Subject key identifier: 9E:AC:AB:92:5C:0B:3C:7F:F4:31:1F:A5:0E:5C:B6:9A:D8:8F:2C:C9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BC53B1D232937FFAF3D7D3880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb96f424-563c-3a18-aaf4-756d57e76911.roa
Signing time: Thu 06 Nov 2025 14:00:41 +0000
ROA not before: Thu 06 Nov 2025 14:00:41 +0000
ROA not after: Wed 04 Feb 2026 14:00:41 +0000
asID: 396587
IP address blocks: 2001:500:122::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c5:3b:1d:23:29:37:ff:af:3d:7d:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 6 14:00:41 2025 GMT
Not After : Feb 4 14:00:41 2026 GMT
Subject: CN=aaef2ab5-06bc-4916-a51a-f897c01d558e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:ca:a4:93:79:4b:f5:33:96:15:1d:ea:ff:
f9:a4:e8:d0:01:2f:b8:f2:65:51:89:47:2d:58:a0:
63:32:88:c5:ff:a1:cd:ea:65:a4:8e:a3:ce:e7:3a:
fc:0c:3d:5b:0b:5f:9c:53:50:58:50:6c:51:6d:ec:
33:61:db:9d:f4:3e:8a:6a:9a:e2:7d:90:d7:0a:38:
05:57:12:26:b0:13:49:7e:2b:10:2a:21:c4:4b:c1:
63:95:87:86:bd:f0:5e:b2:8f:79:27:95:94:22:de:
60:62:8a:3f:55:f8:33:be:bd:de:e7:20:c1:71:06:
4b:82:38:39:ab:4d:60:ef:23:eb:4f:08:65:79:ee:
84:d8:bd:ea:59:67:36:c5:94:4c:6e:1c:73:f2:fb:
e6:ea:1f:52:29:6d:3c:ce:ea:af:94:cc:f3:42:9a:
64:38:33:05:8d:6f:43:b0:b8:b3:13:f6:08:99:f4:
c3:c9:99:f5:69:27:d8:77:b8:14:3c:25:9a:75:26:
37:3d:a8:6c:71:a1:78:01:c3:a0:d0:07:ec:01:cf:
20:66:67:60:e9:9d:6e:c1:ee:9b:b5:8f:07:ea:4a:
3e:f4:cd:ae:c8:7c:1e:52:ea:13:2d:d4:b2:38:45:
af:e5:21:41:63:c3:44:0f:4a:ec:bf:dc:4f:cd:18:
d5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AC:AB:92:5C:0B:3C:7F:F4:31:1F:A5:0E:5C:B6:9A:D8:8F:2C:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb96f424-563c-3a18-aaf4-756d57e76911.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:122:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:82:e0:e1:b0:96:99:f2:96:4c:0c:62:22:db:52:14:e9:91:
ab:35:b0:7e:7a:aa:65:e8:68:26:20:cb:91:54:f9:3f:d0:63:
20:11:33:3e:f6:9a:3c:0d:84:82:3b:6c:50:8a:76:46:01:eb:
73:b2:df:16:8f:77:3a:6a:12:a1:70:5b:41:5e:87:1d:06:0a:
49:b4:4b:4b:4f:30:5c:22:78:24:14:ec:e4:29:da:2f:81:c1:
06:0f:09:d1:8d:e8:25:ce:82:74:27:66:0a:50:eb:2f:13:cd:
cd:7e:10:fd:65:3a:c5:47:30:57:c0:d9:1c:01:cc:de:3e:23:
c5:c6:46:67:84:9f:5c:21:7c:d6:ce:6d:f9:85:05:7a:07:aa:
e8:3c:86:bd:19:ed:07:39:dd:fc:47:2a:e3:4c:d7:84:5a:29:
20:17:c0:91:02:2c:96:88:d8:70:63:7f:88:1d:e0:53:1e:3b:
fe:a7:a5:d3:9e:4f:76:c5:ec:96:7a:c9:b7:a7:40:ce:0a:ee:
5f:8c:e1:97:b5:9a:47:0e:b4:93:92:a6:ca:e4:ac:4e:f9:d7:
fd:e9:6c:4a:d1:d8:2c:1e:b3:33:d9:cd:56:1b:8c:53:38:7e:
4b:a3:d1:d6:1f:d7:f3:d8:42:86:e6:b3:7d:ef:5a:d0:4d:78:
65:98:7a:59
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEvFOx0jKTf/rz19OIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
YWFlZjJhYjUtMDZiYy00OTE2LWE1MWEtZjg5N2MwMWQ1NThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D7KpJN5S/UzlhUd6v/5pOjQAS+48mVRiUct
WKBjMojF/6HN6mWkjqPO5zr8DD1bC1+cU1BYUGxRbewzYdud9D6KaprifZDXCjgF
VxImsBNJfisQKiHES8FjlYeGvfBeso95J5WUIt5gYoo/Vfgzvr3e5yDBcQZLgjg5
q01g7yPrTwhlee6E2L3qWWc2xZRMbhxz8vvm6h9SKW08zuqvlMzzQppkODMFjW9D
sLizE/YImfTDyZn1aSfYd7gUPCWadSY3PahscaF4AcOg0AfsAc8gZmdg6Z1uwe6b
tY8H6ko+9M2uyHweUuoTLdSyOEWv5SFBY8NED0rsv9xPzRjVvwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJ6sq5JcCzx/9DEfpQ5ctprYjyzJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2I5NmY0MjQtNTYzYy0z
YTE4LWFhZjQtNzU2ZDU3ZTc2OTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB6guDhsJaZ8pZMDGIi21IU6ZGrNbB+eqpl6Ggm
IMuRVPk/0GMgETM+9po8DYSCO2xQinZGAetzst8Wj3c6ahKhcFtBXocdBgpJtEtL
TzBcIngkFOzkKdovgcEGDwnRjeglzoJ0J2YKUOsvE83NfhD9ZTrFRzBXwNkcAcze
PiPFxkZnhJ9cIXzWzm35hQV6B6roPIa9Ge0HOd38RyrjTNeEWikgF8CRAiyWiNhw
Y3+IHeBTHjv+p6XTnk92xeyWesm3p0DOCu5fjOGXtZpHDrSTkqbK5KxO+df96WxK
0dgsHrMz2c1WG4xTOH5Lo9HWH9fz2EKG5rN971rQTXhlmHpZ
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:26:41 2025 by rpki-client