This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/128e9646-cdf1-3d0e-8049-37a4c61c3b2c.roa File: 128e9646-cdf1-3d0e-8049-37a4c61c3b2c.roa (raw, json) Hash identifier: SA8QKwnVynL/PO53PK24FFkcgTLwZS4HfX7TXutb2cM= Subject key identifier: DB:1E:1A:A9:EE:B1:70:0B:01:13:8B:2F:95:F4:01:11:85:74:8F:E8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BEAEB5799A1C543E8F6990E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/128e9646-cdf1-3d0e-8049-37a4c61c3b2c.roa Signing time: Thu 20 Nov 2025 02:00:30 +0000 ROA not before: Thu 20 Nov 2025 02:00:30 +0000 ROA not after: Wed 18 Feb 2026 02:00:30 +0000 asID: 396595 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ea:eb:57:99:a1:c5:43:e8:f6:99:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 20 02:00:30 2025 GMT Not After : Feb 18 02:00:30 2026 GMT Subject: CN=7250d459-69b8-4306-8e0c-d4169e57dbbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2c:86:a8:74:10:98:3a:6b:1f:62:36:4f:46: e6:b5:76:be:3e:55:81:08:9e:e1:32:f6:2f:b6:66: 19:7c:4b:53:3f:51:46:8a:dd:8a:53:9e:4b:6d:69: ee:ee:85:dd:87:23:02:ab:6b:16:16:a1:2e:3f:b3: d3:9e:11:a2:47:10:31:a6:32:4b:49:ad:3d:2c:ca: c6:bc:86:bc:75:dd:0a:47:a4:39:c4:97:cc:b1:7e: b1:c9:2f:5a:b3:34:86:37:9e:d5:30:f1:15:8d:fe: 8d:71:e5:2e:57:46:be:81:b4:c6:06:7c:70:78:93: 65:9f:f0:08:4c:c9:f3:ec:ae:67:f9:9e:0b:4a:8a: 83:38:7a:50:dd:fe:7a:82:61:a4:e4:f4:84:fe:47: 36:60:d4:9b:60:6b:5d:a7:bc:cf:63:3c:c5:26:07: 30:c8:0d:ce:64:2d:ed:e0:54:60:07:3b:57:00:49: 21:d7:a0:97:73:5f:df:7f:35:aa:ac:d8:08:af:c9: 11:4a:93:0a:07:94:0a:41:ee:d2:85:7e:11:9a:bd: 04:8f:d0:53:4a:d3:09:b9:76:8f:d8:29:f6:05:27: d9:a3:51:66:4c:c4:64:98:f1:3e:a6:ac:9a:49:ab: d5:13:a5:33:92:85:05:c5:90:6b:3f:e6:ca:6d:86: 47:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1E:1A:A9:EE:B1:70:0B:01:13:8B:2F:95:F4:01:11:85:74:8F:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/128e9646-cdf1-3d0e-8049-37a4c61c3b2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b1:01:9c:a9:e3:f7:da:55:44:95:87:5e:b1:bc:64:5b:8c: 41:77:11:99:a7:08:58:92:07:8c:b0:47:6e:19:a1:c0:34:c5: 00:8c:69:9d:e1:f0:35:70:da:d2:5f:1b:bd:b1:2c:0c:d1:89: b9:2f:49:4a:d2:13:c2:09:8d:c5:79:f4:47:55:55:41:98:8f: 50:20:76:5d:72:c3:55:dd:db:c8:2d:4a:16:05:a2:53:93:64: f1:26:c0:a3:1e:a4:eb:fc:bc:12:0d:36:8a:36:9e:23:fe:94: 91:88:e8:c4:7a:c2:88:ae:b4:70:f0:01:c5:59:28:04:a4:58: 96:04:a8:68:68:c0:92:8a:00:15:e9:be:ea:3e:11:fb:a9:24: 1f:23:f5:6c:c1:3a:3e:97:70:48:1a:40:b9:d9:fc:7f:b7:2a: 76:1c:e9:97:bc:04:81:dc:23:e1:f1:f5:f3:6e:a7:57:d9:4c: 98:06:8b:fb:c9:7b:40:79:fb:05:60:83:f8:e6:f9:6a:53:dc: 22:5f:55:1c:a9:d5:fb:b5:6f:fe:24:1f:36:dd:45:5f:cd:d8: e5:fd:fc:69:95:78:b6:da:f8:45:b8:ea:2e:9c:77:fa:c8:93: 56:b3:e3:c8:7e:ab:47:bc:46:4d:c8:f2:02:7a:99:d1:3e:d1: 0f:c8:a6:3c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvq61eZocVD6PaZDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEyMDAyMDAzMFoXDTI2MDIxODAyMDAzMFowLzEtMCsGA1UEAxMk NzI1MGQ0NTktNjliOC00MzA2LThlMGMtZDQxNjllNTdkYmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyyGqHQQmDprH2I2T0bmtXa+PlWBCJ7hMvYv tmYZfEtTP1FGit2KU55LbWnu7oXdhyMCq2sWFqEuP7PTnhGiRxAxpjJLSa09LMrG vIa8dd0KR6Q5xJfMsX6xyS9aszSGN57VMPEVjf6NceUuV0a+gbTGBnxweJNln/AI TMnz7K5n+Z4LSoqDOHpQ3f56gmGk5PSE/kc2YNSbYGtdp7zPYzzFJgcwyA3OZC3t 4FRgBztXAEkh16CXc1/ffzWqrNgIr8kRSpMKB5QKQe7ShX4Rmr0Ej9BTStMJuXaP 2Cn2BSfZo1FmTMRkmPE+pqyaSavVE6UzkoUFxZBrP+bKbYZH9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNseGqnusXALAROLL5X0ARGFdI/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTI4ZTk2NDYtY2RmMS0z ZDBlLTgwNDktMzdhNGM2MWMzYjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB+xAZyp4/faVUSVh16xvGRbjEF3EZmnCFiSB4ywR24ZocA0xQCM aZ3h8DVw2tJfG72xLAzRibkvSUrSE8IJjcV59EdVVUGYj1Agdl1yw1Xd28gtShYF olOTZPEmwKMepOv8vBINNoo2niP+lJGI6MR6woiutHDwAcVZKASkWJYEqGhowJKK ABXpvuo+EfupJB8j9WzBOj6XcEgaQLnZ/H+3KnYc6Ze8BIHcI+Hx9fNup1fZTJgG i/vJe0B5+wVgg/jm+WpT3CJfVRyp1fu1b/4kHzbdRV/N2OX9/GmVeLba+EW46i6c d/rIk1az48h+q0e8Rk3I8gJ6mdE+0Q/Ipjw= -----END CERTIFICATE-----Generated at Sat Dec 6 14:21:43 2025 by rpki-client