This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2950c1c2-056a-378b-964c-92406628b086.roa File: 2950c1c2-056a-378b-964c-92406628b086.roa (raw, json) Hash identifier: 3Y2m3Pp7XwV90LiYo6rtX4tPPNh2GwkMXATd1JyQIzE= Subject key identifier: 06:0E:B4:59:69:F2:E7:69:58:EE:A3:01:6B:FC:F6:67:5D:3C:FE:3C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C401138BA0053574D165B5E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2950c1c2-056a-378b-964c-92406628b086.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 397210 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:38:ba:00:53:57:4d:16:5b:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=46aeebce-0484-4f76-8cc1-804d9883a5ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ea:e2:e1:ba:2e:65:71:f7:73:03:d9:d8:c1: 0e:45:7d:db:66:a6:dd:0d:6a:91:cd:63:05:72:04: 1a:ff:31:ba:2c:a3:42:fc:d3:59:81:d1:97:32:8b: aa:7b:2b:70:a0:36:5a:77:82:36:93:1d:db:b3:d4: 8b:f8:0f:df:3f:d2:ef:af:a5:ce:bf:1f:03:b5:7a: a2:e1:21:4b:65:cf:89:26:93:10:5b:ae:cc:39:40: 46:83:a4:84:04:ce:37:a9:6b:6f:c7:33:c5:f9:ea: ed:87:f7:64:f5:96:3e:31:e7:8c:0a:ab:31:b6:be: 96:15:13:68:65:05:ce:f2:26:7e:49:5c:1f:3b:c1: ea:ba:97:af:ba:a2:51:ef:05:a0:e6:ee:d0:33:f7: 9a:0e:c7:08:f3:c4:e1:37:29:6c:59:a9:8c:2d:97: ae:5d:47:05:3c:9b:f7:9d:68:28:5f:40:c0:df:bc: b4:ae:95:ba:0b:5a:12:34:88:54:ce:d5:50:fd:69: e1:ea:e1:fd:2b:5b:0c:b1:7d:28:4f:1e:2c:78:64: 14:28:de:e6:cc:c4:4f:f3:db:d4:29:81:45:de:c0: 83:10:bf:c1:2a:83:a0:38:3f:ba:e2:9f:4f:15:5e: a2:5d:fb:64:79:c2:06:ec:3a:a2:33:ae:bd:3d:49: 40:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0E:B4:59:69:F2:E7:69:58:EE:A3:01:6B:FC:F6:67:5D:3C:FE:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2950c1c2-056a-378b-964c-92406628b086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:5d:ef:49:ce:09:a2:41:85:e4:fd:0f:fc:27:d0:1f:1c:f2: fe:dd:bb:8f:c8:aa:03:7d:40:26:1c:68:89:85:59:c6:b0:6b: da:93:0e:de:e2:40:59:8f:0a:87:51:ea:3f:11:66:7c:f5:1d: 5d:e7:4d:6e:e2:cf:cc:d4:bc:7d:22:48:ee:c1:d1:07:bd:00: 82:7e:35:f5:d6:ef:95:32:e0:08:6f:85:5a:cd:55:04:f3:cc: 84:ce:ff:25:56:9c:24:1d:e8:33:d0:ac:a2:79:03:19:b0:c6: 0c:d8:be:4b:3b:c0:1f:7a:42:e2:e6:1d:51:05:5c:7f:f5:0d: d3:a8:99:5a:10:3c:d6:7d:ee:c3:a0:06:9f:ab:c5:37:1e:5b: 76:c4:8f:3d:a0:47:0b:5f:fb:6a:f6:dd:bf:f6:f1:5e:21:e8: ae:3b:ea:91:ee:ee:dd:6d:bf:c4:66:a5:de:d1:07:15:43:41: 9e:82:06:2a:b3:5d:c2:0a:03:d8:76:71:9c:32:f5:0b:78:b1: 18:f1:98:9b:a5:af:9e:af:0b:16:51:47:92:0a:6b:96:1b:70: 41:6e:67:d0:33:c0:a9:48:4a:a0:10:b8:32:e2:be:ab:14:62: 25:b2:29:80:87:2c:ab:41:b7:7e:70:98:3d:43:d7:f7:aa:ce: c1:7d:cd:25 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExAETi6AFNXTRZbXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk NDZhZWViY2UtMDQ4NC00Zjc2LThjYzEtODA0ZDk4ODNhNWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuri4bouZXH3cwPZ2MEORX3bZqbdDWqRzWMF cgQa/zG6LKNC/NNZgdGXMouqeytwoDZad4I2kx3bs9SL+A/fP9Lvr6XOvx8DtXqi 4SFLZc+JJpMQW67MOUBGg6SEBM43qWtvxzPF+erth/dk9ZY+MeeMCqsxtr6WFRNo ZQXO8iZ+SVwfO8HqupevuqJR7wWg5u7QM/eaDscI88ThNylsWamMLZeuXUcFPJv3 nWgoX0DA37y0rpW6C1oSNIhUztVQ/Wnh6uH9K1sMsX0oTx4seGQUKN7mzMRP89vU KYFF3sCDEL/BKoOgOD+64p9PFV6iXftkecIG7DqiM669PUlA+wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAYOtFlp8udpWO6jAWv89mddPP48MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjk1MGMxYzItMDU2YS0z NzhiLTk2NGMtOTI0MDY2MjhiMDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC7Xe9JzgmiQYXk/Q/8J9AfHPL+3buPyKoDfUAm HGiJhVnGsGvakw7e4kBZjwqHUeo/EWZ89R1d501u4s/M1Lx9IkjuwdEHvQCCfjX1 1u+VMuAIb4VazVUE88yEzv8lVpwkHegz0KyieQMZsMYM2L5LO8AfekLi5h1RBVx/ 9Q3TqJlaEDzWfe7DoAafq8U3Hlt2xI89oEcLX/tq9t2/9vFeIeiuO+qR7u7dbb/E ZqXe0QcVQ0GeggYqs13CCgPYdnGcMvULeLEY8Zibpa+erwsWUUeSCmuWG3BBbmfQ M8CpSEqgELgy4r6rFGIlsimAhyyrQbd+cJg9Q9f3qs7Bfc0l -----END CERTIFICATE-----Generated at Sun Jan 25 21:52:44 2026 by rpki-client