This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21feb637-6145-398f-b38d-f445fad8747c.roa File: 21feb637-6145-398f-b38d-f445fad8747c.roa (raw, json) Hash identifier: ekohjDDOkaSr3TXrJ07D6qwm1pgF45mw0y8iKsgbzv8= Subject key identifier: BC:61:E2:B8:90:E1:B5:F0:59:B9:09:DD:64:E3:A2:18:E7:E5:F5:FF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BEAEB2C95EA8CF0D53C3B3B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21feb637-6145-398f-b38d-f445fad8747c.roa Signing time: Thu 20 Nov 2025 02:00:30 +0000 ROA not before: Thu 20 Nov 2025 02:00:30 +0000 ROA not after: Wed 18 Feb 2026 02:00:30 +0000 asID: 40717 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ea:eb:2c:95:ea:8c:f0:d5:3c:3b:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 20 02:00:30 2025 GMT Not After : Feb 18 02:00:30 2026 GMT Subject: CN=e4228db7-e3b1-4688-84ad-31799ccc03fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:00:d4:c1:6a:f7:86:1b:4c:d2:2b:11:a7:e9: 92:03:ba:df:f5:0e:5a:ab:c1:78:53:26:aa:e7:f8: 05:73:49:1b:77:cd:73:fd:cc:c4:0a:78:40:47:08: 67:70:f6:a4:d1:c0:05:75:78:b5:00:1f:86:bb:d2: 58:21:51:cd:cb:69:6c:90:28:ab:7a:44:27:76:1d: 21:48:aa:cc:4f:8a:33:f8:9f:9c:e1:9f:d4:88:c3: 73:cf:f9:0d:15:b4:7f:75:aa:c2:82:fe:3b:27:12: ac:af:66:bb:05:18:86:bd:4e:c1:d8:c1:20:e2:70: a7:08:58:c7:68:33:8b:d2:8b:e8:5b:1b:03:88:61: 14:0a:9c:a5:58:be:89:cd:01:df:fe:c2:34:eb:8f: ae:03:62:d8:18:e2:10:79:b6:6b:d7:d4:66:55:5e: 72:8a:1f:00:c7:98:c9:31:89:62:fb:0f:39:66:f6: cc:64:ce:86:48:ac:d1:db:90:1c:29:e0:5e:2b:39: fe:24:c3:d0:fb:a0:23:3c:c5:7b:59:24:1b:86:94: 63:b2:86:5b:1e:ab:d3:6f:24:97:ac:89:65:82:7f: 94:d2:05:41:2d:ec:56:02:24:19:d2:17:26:ef:77: e6:8a:28:c0:fd:bd:37:96:e9:d0:4f:ed:04:db:4b: a8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:61:E2:B8:90:E1:B5:F0:59:B9:09:DD:64:E3:A2:18:E7:E5:F5:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21feb637-6145-398f-b38d-f445fad8747c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:d9:22:d8:ad:5b:1f:cd:cf:1c:05:7f:3d:5a:d2:26:5d:1c: 80:d1:23:77:ad:25:31:61:f4:4f:bd:8e:a2:0c:c6:11:ea:5a: 16:b7:e7:b5:8a:a5:6e:56:36:7e:27:31:64:a6:29:28:86:74: 2b:53:7c:9f:d4:c5:08:65:e0:b7:f5:02:44:8a:cc:60:c0:aa: ca:42:21:4d:e7:ea:e1:dd:8f:43:f6:f9:fb:53:49:f7:aa:54: bd:68:fc:85:4c:29:cc:e2:cf:01:22:00:fc:19:fe:0f:aa:04: 42:bd:0e:72:5c:a5:2d:70:55:77:d0:a8:91:71:48:05:6a:6a: 84:93:8c:f8:43:69:a5:79:ae:6a:65:b6:4c:eb:47:94:2f:2a: f9:25:a7:34:2e:88:02:2a:68:96:38:33:e1:09:09:b0:c7:c8: ea:6a:e4:50:9a:cf:90:89:9d:c6:2c:d6:24:95:df:c7:14:3d: c4:e5:9d:b9:03:85:c0:31:47:1e:c6:2f:3b:e3:61:9d:9d:86: 15:93:9e:77:a2:4a:e3:d1:9c:8f:48:c3:dc:89:22:d8:d0:fd: eb:eb:b9:e1:d4:b9:c6:66:0a:4d:b2:43:ed:09:f4:34:6c:a9: bf:c4:1f:d4:12:92:0e:ce:35:59:09:a6:6e:67:0f:92:3e:79: 3b:76:4d:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvq6yyV6ozw1Tw7O4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEyMDAyMDAzMFoXDTI2MDIxODAyMDAzMFowLzEtMCsGA1UEAxMk ZTQyMjhkYjctZTNiMS00Njg4LTg0YWQtMzE3OTljY2MwM2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigDUwWr3hhtM0isRp+mSA7rf9Q5aq8F4Uyaq 5/gFc0kbd81z/czECnhARwhncPak0cAFdXi1AB+Gu9JYIVHNy2lskCirekQndh0h SKrMT4oz+J+c4Z/UiMNzz/kNFbR/darCgv47JxKsr2a7BRiGvU7B2MEg4nCnCFjH aDOL0ovoWxsDiGEUCpylWL6JzQHf/sI064+uA2LYGOIQebZr19RmVV5yih8Ax5jJ MYli+w85ZvbMZM6GSKzR25AcKeBeKzn+JMPQ+6AjPMV7WSQbhpRjsoZbHqvTbySX rIllgn+U0gVBLexWAiQZ0hcm73fmiijA/b03lunQT+0E20uoqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLxh4riQ4bXwWbkJ3WTjohjn5fX/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjFmZWI2MzctNjE0NS0z OThmLWIzOGQtZjQ0NWZhZDg3NDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJzZItitWx/NzxwFfz1a0iZdHIDRI3etJTFh9E+9jqIMxhHqWha3 57WKpW5WNn4nMWSmKSiGdCtTfJ/UxQhl4Lf1AkSKzGDAqspCIU3n6uHdj0P2+ftT SfeqVL1o/IVMKczizwEiAPwZ/g+qBEK9DnJcpS1wVXfQqJFxSAVqaoSTjPhDaaV5 rmpltkzrR5QvKvklpzQuiAIqaJY4M+EJCbDHyOpq5FCaz5CJncYs1iSV38cUPcTl nbkDhcAxRx7GLzvjYZ2dhhWTnneiSuPRnI9Iw9yJItjQ/evrueHUucZmCk2yQ+0J 9DRsqb/EH9QSkg7ONVkJpm5nD5I+eTt2TWw= -----END CERTIFICATE-----Generated at Sat Dec 6 18:52:06 2025 by rpki-client