This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21e27662-b041-3eea-8923-291d3f8652a8.roa File: 21e27662-b041-3eea-8923-291d3f8652a8.roa (raw, json) Hash identifier: dAL0X0K9du5EVGBICINx2TNtMKtI6wcHhYBoCvmAozQ= Subject key identifier: FD:11:E1:DA:BE:7B:A3:37:F5:DD:EC:0C:EB:E9:00:77:E9:E0:CD:36 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584C1E93C78B5474C21E30F56500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21e27662-b041-3eea-8923-291d3f8652a8.roa Signing time: Mon 08 Dec 2025 14:00:38 +0000 ROA not before: Mon 08 Dec 2025 14:00:38 +0000 ROA not after: Sun 08 Mar 2026 13:00:38 +0000 asID: 33657 IP address blocks: 2001:559:c209::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1e:93:c7:8b:54:74:c2:1e:30:f5:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 8 14:00:38 2025 GMT Not After : Mar 8 13:00:38 2026 GMT Subject: CN=4de16c5f-930d-4fe3-9e49-5538456f6941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cf:3d:db:b8:e2:b7:89:89:2b:92:bb:54:cc: 08:7f:63:ba:bf:33:4d:25:fb:86:48:25:93:46:1b: 33:bf:03:bf:21:ec:e1:1c:3f:37:ac:64:c6:05:5d: 4e:6e:09:04:6e:1c:30:b3:ce:6f:21:87:bb:e7:50: c7:86:6b:89:9e:3e:e8:63:a6:aa:20:ef:0a:e6:37: cb:fb:bb:a6:11:96:28:f1:80:87:a2:18:74:70:dc: 95:4e:d1:9d:eb:4a:78:1e:74:bb:14:bf:dc:57:34: 76:55:85:53:90:c0:82:7b:11:f5:70:55:bf:ca:32: 08:df:bd:c6:9a:f0:c2:9f:d7:2e:d2:cf:88:8f:c5: a8:0b:dc:e1:02:e6:26:3d:30:b0:9d:51:3e:e9:6a: ca:d4:48:90:5e:d6:83:f8:f6:6f:53:13:5a:75:96: 44:11:66:01:7f:0c:28:9c:ec:aa:34:7e:88:1f:a1: 14:56:d4:fe:f3:53:26:89:5f:d9:74:d1:6c:3d:31: 2e:f2:72:3c:97:68:d3:10:b2:24:d0:00:27:88:ea: 88:0b:ae:37:4f:cc:a7:e4:cb:27:b4:18:4c:0a:dd: a4:76:bc:dd:ca:cb:84:96:fb:52:ae:fd:47:13:9a: e3:ff:8b:da:64:de:6a:3e:b4:6f:8e:c8:1a:4c:c0: e7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:11:E1:DA:BE:7B:A3:37:F5:DD:EC:0C:EB:E9:00:77:E9:E0:CD:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21e27662-b041-3eea-8923-291d3f8652a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c209::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:5c:96:5d:d3:b0:4c:3a:a4:0e:48:14:e0:f6:78:37:3d:b2: 6d:ca:fe:e3:4f:f0:3a:cc:d5:6a:c7:28:ff:4f:73:9d:3c:34: a4:84:e0:be:a9:75:03:e9:05:11:0b:c7:b4:06:de:1d:2c:c1: 7f:c5:da:2d:df:ca:44:18:b3:5f:cd:40:7f:63:7e:20:23:fd: b2:f2:80:a9:70:6f:44:84:b6:d9:ad:35:e0:e7:82:fe:9e:19: af:9a:15:68:1f:22:8e:a9:f0:89:a2:45:b9:e4:6e:f0:63:85: d9:93:83:6e:49:bd:0f:dc:b6:c8:1b:8c:e0:42:a7:76:e0:fb: 95:98:79:99:2c:bc:46:6e:60:a5:7e:25:08:3d:d5:23:30:b0: c9:4c:a7:20:17:a4:64:2c:2d:4f:12:6d:1e:85:e9:cb:d2:39: fa:9f:67:dc:ab:e5:b1:13:fc:49:00:5e:bf:2f:66:5e:e9:53: e3:ac:7e:c1:04:27:1d:1e:74:4b:66:2c:55:e7:1d:b0:3f:6c: b3:65:29:5e:a6:eb:c9:e5:83:b0:67:d2:3a:94:34:c2:5b:a0: 61:2c:f5:62:75:89:a9:de:5b:6d:19:fe:b5:15:5e:1a:76:b3: 61:34:d8:85:c2:ec:38:e7:f2:65:fa:33:34:15:4b:79:2f:96: 21:a0:e0:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwek8eLVHTCHjD1ZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTIwODE0MDAzOFoXDTI2MDMwODEzMDAzOFowLzEtMCsGA1UEAxMk NGRlMTZjNWYtOTMwZC00ZmUzLTllNDktNTUzODQ1NmY2OTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc8927jit4mJK5K7VMwIf2O6vzNNJfuGSCWT RhszvwO/IezhHD83rGTGBV1ObgkEbhwws85vIYe751DHhmuJnj7oY6aqIO8K5jfL +7umEZYo8YCHohh0cNyVTtGd60p4HnS7FL/cVzR2VYVTkMCCexH1cFW/yjII373G mvDCn9cu0s+Ij8WoC9zhAuYmPTCwnVE+6WrK1EiQXtaD+PZvUxNadZZEEWYBfwwo nOyqNH6IH6EUVtT+81MmiV/ZdNFsPTEu8nI8l2jTELIk0AAniOqIC643T8yn5Msn tBhMCt2kdrzdysuElvtSrv1HE5rj/4vaZN5qPrRvjsgaTMDnlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP0R4dq+e6M39d3sDOvpAHfp4M02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjFlMjc2NjItYjA0MS0z ZWVhLTg5MjMtMjkxZDNmODY1MmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcIJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA9cll3TsEw6pA5IFOD2eDc9sm3K/uNP8DrM1WrHKP9Pc508NKSE 4L6pdQPpBRELx7QG3h0swX/F2i3fykQYs1/NQH9jfiAj/bLygKlwb0SEttmtNeDn gv6eGa+aFWgfIo6p8ImiRbnkbvBjhdmTg25JvQ/ctsgbjOBCp3bg+5WYeZksvEZu YKV+JQg91SMwsMlMpyAXpGQsLU8SbR6F6cvSOfqfZ9yr5bET/EkAXr8vZl7pU+Os fsEEJx0edEtmLFXnHbA/bLNlKV6m68nlg7Bn0jqUNMJboGEs9WJ1ianeW20Z/rUV Xhp2s2E02IXC7Djn8mX6MzQVS3kvliGg4LQ= -----END CERTIFICATE-----Generated at Sun Dec 21 00:15:03 2025 by rpki-client