This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28f4fc42-3f49-332d-9bd5-b4434487e138.roa
File: 28f4fc42-3f49-332d-9bd5-b4434487e138.roa (raw, json)
Hash identifier: M1SMZsdr8GOqxbczXqnoFfo5rtGDmcPi0i34EdPcrC4=
Subject key identifier: 80:8E:98:83:A3:10:05:5D:78:31:FF:57:5C:01:7C:E1:7B:74:D9:7E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584CAE56FFE390D6A3E69A1AAD40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28f4fc42-3f49-332d-9bd5-b4434487e138.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 396586
IP address blocks: 2001:502:8cc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 12 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:56:ff:e3:90:d6:a3:e6:9a:1a:ad:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=4fdee640-d3ad-4212-87e9-54b53ee30d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2e:68:30:d1:a0:0e:22:22:de:94:d9:d9:13:
1f:33:6a:8f:61:8b:e9:ef:65:d5:a4:a9:40:c8:ee:
e8:e5:b6:cc:25:45:63:ec:fa:a8:3e:bd:5a:e0:6c:
05:f2:b3:1e:24:96:9d:81:7b:87:81:72:81:99:91:
cc:a2:cd:5c:3d:40:4e:38:d6:9d:e9:59:1a:b9:a4:
59:a6:2d:83:a2:aa:e0:f8:17:ba:7d:e5:db:0a:bc:
d4:2c:66:d4:e2:4a:dd:86:d4:ea:14:49:1f:96:9e:
75:0a:cd:27:cb:19:7e:45:d1:89:2b:d6:a3:82:0a:
21:65:65:bb:7e:95:b3:65:32:97:61:f4:bc:45:50:
8d:20:34:30:1b:6b:50:bb:f3:f9:10:70:c9:cc:3b:
e8:5e:e3:4a:37:d9:9e:aa:9c:86:d9:0c:4e:04:7c:
97:66:72:0a:0b:e6:5f:48:01:4e:dd:60:c9:46:d6:
8d:f3:07:63:7d:b1:c4:2f:c0:95:81:b8:f6:82:30:
52:f9:0b:c7:4b:9f:e3:0c:34:2a:49:59:5e:93:93:
23:6f:04:da:7d:8f:ca:4b:20:c0:58:b7:3a:30:1d:
b4:c9:81:2a:c3:52:5e:f0:5f:58:9e:6e:ed:82:34:
c4:c4:24:ae:0c:68:5b:3d:96:4e:1e:1d:a4:f2:77:
29:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8E:98:83:A3:10:05:5D:78:31:FF:57:5C:01:7C:E1:7B:74:D9:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28f4fc42-3f49-332d-9bd5-b4434487e138.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:8cc::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:4b:74:70:30:ec:b0:98:f9:e8:40:28:11:c5:45:e7:33:a5:
b9:8e:00:4c:a4:9a:8b:89:f4:a9:7a:09:6a:a1:9c:d8:14:2d:
a4:26:2d:5c:60:37:18:92:94:29:63:b8:ed:53:57:82:89:e6:
38:cb:3c:28:11:f5:de:c2:17:f8:1e:53:1d:b2:e7:2f:95:1b:
bd:12:0f:f5:b5:99:e7:4d:ee:ed:b8:43:8b:0a:12:0c:a7:64:
eb:e3:90:29:25:61:10:04:f1:9a:17:6e:eb:5f:ce:13:dd:81:
67:03:5e:af:d4:1b:f4:d0:c4:25:b8:30:c4:6a:77:0d:0f:30:
72:4c:16:90:70:7a:09:8a:e7:1c:8b:43:86:24:19:46:67:64:
d8:a1:13:8a:61:15:64:25:ae:ad:fd:c2:8e:7e:48:30:4b:e2:
01:7f:e4:07:db:03:84:8e:f0:63:b9:4d:26:45:68:89:bb:ce:
72:9f:f8:cc:11:33:de:32:04:4a:93:d7:f5:9b:07:3d:47:99:
b1:cb:88:ec:8f:71:9b:c8:23:37:e8:df:3e:fb:d4:a7:76:b7:
00:94:4d:57:ea:8f:33:41:b1:fb:3f:47:d5:51:83:7a:d8:ab:
6f:94:e3:bf:e3:d2:62:fd:4f:25:f6:2b:fc:3c:ac:e4:63:27:
36:fc:88:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:22:04 2026 by rpki-client