This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcae0b3d-5e30-3533-b641-420adc0fe41f.roa
File: bcae0b3d-5e30-3533-b641-420adc0fe41f.roa (raw, json)
Hash identifier: lNXcfq9oHcbP9e4A+zNrElLUw+jblDSctjxwROQjxhU=
Subject key identifier: 98:C1:A9:AE:9B:18:3C:5C:82:CA:8F:13:D7:C5:09:EC:8D:CF:57:99
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584C1BC62FFC2FDA642955927200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcae0b3d-5e30-3533-b641-420adc0fe41f.roa
Signing time: Sun 07 Dec 2025 14:00:38 +0000
ROA not before: Sun 07 Dec 2025 14:00:38 +0000
ROA not after: Sat 07 Mar 2026 14:00:38 +0000
asID: 36626
IP address blocks: 2001:500:30ff::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:1b:c6:2f:fc:2f:da:64:29:55:92:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 7 14:00:38 2025 GMT
Not After : Mar 7 14:00:38 2026 GMT
Subject: CN=f920c27b-50b3-421b-8de5-feb92da7dd5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:9e:9d:40:12:ad:f1:21:3e:1a:72:9a:be:
78:cb:c9:6d:a5:49:d3:dc:c4:8e:a3:82:d7:35:d0:
31:bc:ff:b1:d7:f5:9f:82:2a:63:6b:5f:0f:07:f3:
b3:ab:6a:a6:bb:ea:bb:75:14:4a:77:e9:1e:37:66:
5f:a2:e9:67:a4:ab:94:f1:24:2a:2f:6e:eb:52:8a:
86:24:0b:d9:ba:ef:ec:c0:d9:25:87:9e:39:62:f1:
d9:3f:9c:e1:19:77:ad:9e:00:ed:f2:52:f5:d5:84:
7f:15:0e:40:73:fd:b0:e1:02:d3:01:be:75:78:52:
e2:26:59:f1:50:bd:33:a4:1f:9b:33:b6:cf:fc:79:
51:a0:d4:6a:34:c1:88:a7:ed:69:7d:99:f3:67:3e:
0f:49:b6:b6:c5:3a:2c:e8:93:a7:93:b9:e9:a0:f2:
99:56:cc:68:30:b8:dc:1e:89:54:df:f7:1a:ac:5a:
fb:8e:68:3a:bd:e6:93:55:b1:12:7f:63:60:9e:2a:
5f:c4:1f:a8:8a:62:d4:fa:79:44:75:17:e2:5a:f8:
2e:e9:75:6c:63:2e:6e:6d:08:8d:43:41:f3:62:42:
87:67:e6:7f:83:fc:72:57:ee:32:db:b4:4a:49:11:
07:9a:f6:cf:f1:61:a0:2d:f8:96:4f:21:f3:da:97:
44:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C1:A9:AE:9B:18:3C:5C:82:CA:8F:13:D7:C5:09:EC:8D:CF:57:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcae0b3d-5e30-3533-b641-420adc0fe41f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:30ff:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:f1:44:10:8c:e1:a8:da:09:ac:a0:3e:e4:d5:29:02:a2:2d:
53:7b:24:61:f3:f0:a3:c7:91:db:c0:68:ee:8d:60:0f:30:ba:
7d:13:39:88:5f:af:c7:b6:cc:b7:a1:d4:ff:ba:1c:d2:08:85:
b9:cb:a8:1d:60:c1:c0:5a:a3:b5:24:52:ab:81:93:d7:44:ee:
2e:ab:52:77:31:dd:bd:d6:ed:5e:47:fb:2a:1e:83:0f:b6:fd:
47:18:14:fa:e2:31:c9:59:fd:a6:09:d9:10:f8:92:93:1d:2c:
cf:9e:98:71:94:5c:e0:05:94:f6:2e:24:04:64:b3:3f:a9:0b:
87:4c:fb:85:2b:77:da:1b:47:91:f5:71:46:6b:4e:a3:9f:a5:
c8:46:75:7a:6e:fa:55:e9:98:83:e8:d8:d1:b4:cf:2f:6f:48:
ad:2c:b8:bf:00:85:12:0a:78:62:1e:88:7d:08:3b:94:f4:4d:
b6:c9:32:1d:c7:5b:97:a1:04:e7:c4:55:dd:ef:0a:25:65:ab:
23:bd:f8:c6:f3:4e:ce:d9:72:55:f6:b5:78:7e:2c:af:50:01:
50:76:12:fa:ba:ac:31:02:f3:56:fa:28:47:86:88:f7:c1:19:
ab:0f:5d:34:37:a7:4d:a1:5e:a7:a6:61:5f:d7:81:85:63:2b:
0f:84:7b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 13:53:53 2025 by rpki-client