This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3b72311-b47f-3845-a022-e956794049f2.roa
File: e3b72311-b47f-3845-a022-e956794049f2.roa (raw, json)
Hash identifier: CW67QWPdwSleQAOUqhE/P6tUuK3+vS7X7vY+uLmEKiA=
Subject key identifier: 43:88:34:ED:5F:D0:F8:78:A7:C2:B1:42:E9:FF:94:87:5B:8F:A1:F1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584C794C179B567E109350B16758
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3b72311-b47f-3845-a022-e956794049f2.roa
Signing time: Sat 10 Jan 2026 02:00:31 +0000
ROA not before: Sat 10 Jan 2026 02:00:31 +0000
ROA not after: Fri 10 Apr 2026 01:00:31 +0000
asID: 396826
IP address blocks: 2001:500:123::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:79:4c:17:9b:56:7e:10:93:50:b1:67:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 10 02:00:31 2026 GMT
Not After : Apr 10 01:00:31 2026 GMT
Subject: CN=dbbb1409-c42d-4bad-b607-040f83465b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:69:4e:63:1b:6c:fd:e0:2b:f0:e5:e4:0e:
c2:2b:a8:a4:3b:df:12:50:19:0a:3f:ba:27:06:49:
5a:14:67:f1:4d:dc:dd:b7:3b:02:7a:12:7d:72:64:
a7:51:ea:c2:9e:79:db:2b:58:32:d0:6c:73:8c:61:
64:0f:1a:b1:53:33:04:1d:f4:31:ee:9c:52:b4:70:
c0:7b:79:2a:94:23:3d:51:60:d2:a9:32:f9:39:dd:
7a:85:35:ef:48:7b:80:3f:8f:3d:cc:ef:e1:f3:ce:
26:fc:8a:c6:6c:d3:6c:75:98:92:46:20:2c:83:b6:
fc:97:1d:8d:ef:76:45:66:e7:37:01:ff:7e:0d:8b:
be:da:62:9d:96:ca:96:b6:20:16:0a:9e:13:98:f5:
4d:6b:44:6e:57:ed:e5:ac:5d:ff:d5:38:ed:12:65:
8a:0f:84:44:46:53:9d:82:c8:24:5e:bc:0e:c6:9c:
8b:bc:ab:03:dc:9b:7b:ea:c0:3c:de:c7:c7:65:98:
e3:38:23:e3:ec:3e:20:fa:4f:8e:66:a0:88:69:2e:
63:77:44:7a:81:68:76:d4:52:63:2c:6e:9d:28:19:
a5:f6:b6:10:8d:d3:29:96:2e:aa:bd:93:8d:d4:9c:
ac:a6:51:b6:24:65:0a:86:ba:dc:14:47:3b:c8:6f:
35:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:88:34:ED:5F:D0:F8:78:A7:C2:B1:42:E9:FF:94:87:5B:8F:A1:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3b72311-b47f-3845-a022-e956794049f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:bb:b1:37:36:c0:33:27:b0:f5:21:99:04:a1:19:54:10:63:
47:6b:7f:18:47:57:03:2b:f4:a2:9d:41:09:5e:d4:b7:bd:9e:
ab:0f:35:60:d8:c4:c7:99:41:8b:13:8b:9a:0f:eb:d5:b0:5c:
2d:ed:8d:3b:0b:c5:a1:c8:0c:ca:93:97:47:16:a2:cc:ef:b3:
f3:a7:59:7a:aa:a2:46:3a:72:c2:5b:a7:ca:d0:53:4d:17:f9:
c5:6e:d3:85:74:62:ee:e9:3a:8d:4b:5c:70:52:85:9e:ae:fa:
a3:ad:94:58:86:4d:da:10:bb:35:9d:72:c9:41:c7:85:68:41:
e2:16:ae:83:8b:8f:9d:41:bd:c9:87:81:74:44:8d:5d:d5:77:
8a:75:6d:39:cc:6d:3a:f2:16:55:46:1b:70:77:4c:86:a8:16:
6e:04:50:78:a9:86:f7:26:bb:97:2a:6b:be:6e:19:48:f6:fd:
04:63:4c:16:e2:c1:04:d2:5f:9a:f5:cd:5a:98:d0:9a:4c:31:
ec:51:d1:60:28:c4:ca:f8:6f:98:98:8d:f0:3a:03:21:12:2d:
59:de:8e:49:0c:26:32:0b:5f:e2:69:1c:ed:4e:58:e3:44:eb:
95:eb:f7:1a:b6:a8:bc:64:ba:a8:0a:de:b6:54:a6:0b:d9:ab:
e7:05:73:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:18:30 2026 by rpki-client