This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9b3f1d6-2a64-3a24-8609-1c2198435f4f.roa
File: d9b3f1d6-2a64-3a24-8609-1c2198435f4f.roa (raw, json)
Hash identifier: Pt9rfC5V0sKbDQMqiRQF70D2Isvktdd4d/wzzwSDBwA=
Subject key identifier: 8F:6F:51:89:C7:77:48:7E:CD:5F:06:4E:4D:5D:98:B4:BA:3B:17:49
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584BDA2B22389477FD66DAD64F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9b3f1d6-2a64-3a24-8609-1c2198435f4f.roa
Signing time: Fri 14 Nov 2025 02:00:30 +0000
ROA not before: Fri 14 Nov 2025 02:00:30 +0000
ROA not after: Thu 12 Feb 2026 02:00:30 +0000
asID: 36618
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:da:2b:22:38:94:77:fd:66:da:d6:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 14 02:00:30 2025 GMT
Not After : Feb 12 02:00:30 2026 GMT
Subject: CN=4ef3168c-e279-4b94-9580-77773d7f71d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:f9:51:f3:bc:d1:9f:38:f9:b2:6f:01:e0:
12:b2:71:91:31:0e:2b:55:25:c0:f4:04:22:10:07:
8d:ba:02:39:e8:e1:a4:d6:78:4c:b9:b4:52:3e:f5:
b3:5f:43:b1:bc:e8:73:b6:9f:c2:c4:90:7c:e2:89:
e7:1a:e0:68:2b:ba:60:0c:98:3d:47:64:68:28:8c:
66:0b:4a:a7:f0:73:bc:c0:da:45:0a:7b:3c:fc:45:
55:8a:f0:dd:38:f8:35:4d:c3:2e:ea:09:0c:3e:50:
fc:bb:11:b4:c8:22:e4:0d:a4:37:0f:35:38:04:76:
2e:77:f2:fa:53:a0:36:5c:29:70:79:b2:b8:de:cf:
25:16:db:b5:2a:4f:0b:ed:17:05:c6:a2:e2:93:bb:
44:b3:ae:b6:2d:e3:d7:63:63:fd:cb:77:97:ff:e4:
63:45:ce:ac:8f:97:72:84:7d:a4:f1:22:18:67:ff:
b4:36:3d:5b:ce:93:c2:89:9d:1b:b1:69:09:ea:22:
5f:5d:e1:5f:90:91:79:35:57:90:73:b5:6a:8c:56:
be:41:50:53:33:47:93:91:a9:25:4d:96:1b:f3:84:
99:26:82:74:7b:b1:29:56:0c:f1:d7:ba:13:d5:d0:
28:77:bf:75:c2:2b:6e:63:16:16:ee:65:54:14:68:
4d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6F:51:89:C7:77:48:7E:CD:5F:06:4E:4D:5D:98:B4:BA:3B:17:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9b3f1d6-2a64-3a24-8609-1c2198435f4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:d1:0a:90:35:58:4e:61:d0:da:58:ae:ce:d1:71:00:1d:78:
bc:bf:13:33:48:28:bb:7c:22:02:ca:45:9d:e5:55:cb:db:2a:
c9:3c:46:30:56:4f:75:fb:65:bd:ed:8d:42:f4:2e:82:c7:db:
b2:91:3d:83:19:d8:7f:74:ef:12:d4:8c:9c:08:cd:13:98:42:
7d:13:cb:2f:21:4c:a7:e7:c2:08:e8:c7:cd:f1:df:c5:7d:5d:
2e:6c:e9:d4:92:78:d8:e1:90:2d:3b:fe:92:e2:c6:74:f6:3c:
ea:4d:5e:62:71:83:2b:c5:60:d1:c9:30:e2:ff:5d:8a:d2:60:
b1:ab:60:bb:46:73:64:45:31:28:d0:14:59:15:17:49:f4:81:
0e:d1:38:5a:0a:b5:67:85:8d:6d:b6:ad:74:c6:fd:e3:b1:28:
ae:53:21:b0:db:7d:d3:fb:c3:1b:e4:8d:0c:41:be:f0:48:df:
19:35:b8:00:01:8f:58:88:92:9a:28:f7:72:9a:f2:7d:4e:47:
64:dd:38:48:51:e3:11:26:3d:ec:e2:5c:06:33:80:1a:77:97:
ea:45:67:eb:81:9b:0d:93:c9:7a:f1:e3:61:6b:1d:28:e8:e9:
8a:09:7d:ce:67:eb:f1:59:e0:ca:8c:96:58:1f:8c:1e:68:a9:
da:16:8a:50
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEvaKyI4lHf9ZtrWT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTExNDAyMDAzMFoXDTI2MDIxMjAyMDAzMFowLzEtMCsGA1UEAxMk
NGVmMzE2OGMtZTI3OS00Yjk0LTk1ODAtNzc3NzNkN2Y3MWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvf5UfO80Z84+bJvAeASsnGRMQ4rVSXA9AQi
EAeNugI56OGk1nhMubRSPvWzX0OxvOhztp/CxJB84onnGuBoK7pgDJg9R2RoKIxm
C0qn8HO8wNpFCns8/EVVivDdOPg1TcMu6gkMPlD8uxG0yCLkDaQ3DzU4BHYud/L6
U6A2XClwebK43s8lFtu1Kk8L7RcFxqLik7tEs662LePXY2P9y3eX/+RjRc6sj5dy
hH2k8SIYZ/+0Nj1bzpPCiZ0bsWkJ6iJfXeFfkJF5NVeQc7VqjFa+QVBTM0eTkakl
TZYb84SZJoJ0e7EpVgzx17oT1dAod791wituYxYW7mVUFGhNHQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFI9vUYnHd0h+zV8GTk1dmLS6OxdJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDliM2YxZDYtMmE2NC0z
YTI0LTg2MDktMWMyMTk4NDM1ZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCK0QqQNVhOYdDaWK7O0XEAHXi8vxMzSCi7fCIC
ykWd5VXL2yrJPEYwVk91+2W97Y1C9C6Cx9uykT2DGdh/dO8S1IycCM0TmEJ9E8sv
IUyn58II6MfN8d/FfV0ubOnUknjY4ZAtO/6S4sZ09jzqTV5icYMrxWDRyTDi/12K
0mCxq2C7RnNkRTEo0BRZFRdJ9IEO0ThaCrVnhY1ttq10xv3jsSiuUyGw233T+8Mb
5I0MQb7wSN8ZNbgAAY9YiJKaKPdymvJ9Tkdk3ThIUeMRJj3s4lwGM4Aad5fqRWfr
gZsNk8l68eNhax0o6OmKCX3OZ+vxWeDKjJZYH4weaKnaFopQ
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:12:15 2025 by rpki-client