This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9b3f1d6-2a64-3a24-8609-1c2198435f4f.roa
File: d9b3f1d6-2a64-3a24-8609-1c2198435f4f.roa (raw, json)
Hash identifier: PqFH9zLMj+9wW0BzbvnOxZWxqRq3DuaG67EKDLvXbjw=
Subject key identifier: 4B:03:4F:4B:18:B5:62:F0:EF:EB:33:A0:0D:AE:88:B0:05:F9:52:5A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584CB981EEBA79AFB12D280A4E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9b3f1d6-2a64-3a24-8609-1c2198435f4f.roa
Signing time: Mon 02 Feb 2026 02:00:32 +0000
ROA not before: Mon 02 Feb 2026 02:00:32 +0000
ROA not after: Sun 03 May 2026 01:00:32 +0000
asID: 36618
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 12 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b9:81:ee:ba:79:af:b1:2d:28:0a:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 2 02:00:32 2026 GMT
Not After : May 3 01:00:32 2026 GMT
Subject: CN=6b13404f-b704-4ddc-8a74-fb122b1b6ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1d:a8:27:53:fd:f3:0f:85:43:31:95:81:f5:
c7:c3:57:ec:24:84:e7:5e:d3:c9:04:31:8f:11:99:
42:b8:c1:bc:f6:fa:d7:44:a0:61:74:b4:4b:7e:1d:
7f:ad:25:a0:ee:da:63:e2:50:5d:95:ca:e9:cf:3d:
31:b0:dd:ac:ce:34:e9:9c:7a:89:35:bd:1f:72:3f:
43:e2:57:15:d6:0c:f1:bf:4d:63:08:c2:f7:a1:9b:
1e:18:e2:03:b6:16:a2:f6:97:5c:75:34:d4:9c:df:
57:da:6f:37:a3:2b:4f:a2:ff:5b:d4:06:0f:51:71:
2b:d8:1d:a6:69:e8:0b:25:7a:7d:d0:85:e6:97:88:
33:93:db:e8:16:86:06:b8:39:93:14:e0:d1:9d:cc:
5a:d5:4e:44:21:fc:57:ee:e4:78:74:c8:03:5c:bd:
b5:18:2b:f1:ad:3c:31:77:14:74:ac:f3:1a:d3:1a:
d4:0e:c2:da:8f:16:0e:08:56:a3:19:be:bf:03:67:
77:ba:58:ab:7a:f3:50:96:d8:f1:cd:91:92:a2:16:
62:0f:c4:31:6c:28:04:3e:47:0c:cc:ad:e9:93:d8:
a3:0d:1b:2c:b3:b7:73:85:57:cc:e1:53:d6:dc:ec:
34:52:54:ff:03:47:c1:4f:7d:31:87:20:d0:08:e7:
53:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:03:4F:4B:18:B5:62:F0:EF:EB:33:A0:0D:AE:88:B0:05:F9:52:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9b3f1d6-2a64-3a24-8609-1c2198435f4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:a9:47:cf:fd:de:80:f9:e0:ed:22:95:bb:ee:53:bc:1d:ab:
7a:c0:60:61:4e:44:6f:13:c5:b8:b4:74:40:aa:42:0a:72:92:
c8:25:05:9f:1a:96:79:5b:1c:2c:1c:11:8e:e5:ae:6f:38:dc:
18:84:f4:82:2c:df:d9:35:08:fc:40:26:48:41:a8:b0:54:fd:
e0:ef:c0:78:7c:91:bb:71:e8:09:7d:c0:3c:f8:ed:04:86:c2:
f0:84:99:b7:5a:86:e0:87:ec:3c:ed:e9:f9:d8:dc:20:d2:90:
9d:3e:3b:a2:8a:2a:3b:10:9d:bc:c0:e8:1f:06:c5:df:4a:ea:
e7:08:a6:c7:53:22:63:22:19:57:ea:22:fd:d7:7f:51:b4:01:
5a:77:0e:d4:35:9b:e0:bc:75:f7:33:b7:41:89:54:9d:e1:d1:
85:51:c0:c4:4d:56:22:df:28:cd:06:1c:54:cc:35:c6:ae:aa:
05:e1:9d:35:aa:7c:19:bc:cc:6f:fb:4d:1a:f0:13:df:5e:51:
f0:15:09:57:71:72:45:0a:dc:4e:e0:fa:54:a6:e8:84:4c:d3:
7c:41:0d:cd:2a:81:18:c6:69:2d:2e:3a:be:6d:19:9d:ae:65:
2e:62:55:72:54:b1:f4:08:49:ad:3f:b8:1c:b3:ba:28:1a:27:
df:32:fb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:52:25 2026 by rpki-client