This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33497220-350a-3ed9-99be-fda9946df3c1.roa File: 33497220-350a-3ed9-99be-fda9946df3c1.roa (raw, json) Hash identifier: tOTJdQqDEQDXBc63e6skHauhKiQgZID0cy46GcrQwjQ= Subject key identifier: 22:83:23:57:9A:35:A9:C3:F8:54:9C:77:E2:5A:E1:60:75:20:F1:59 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BCAD059E6EE6F77BA30F109A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33497220-350a-3ed9-99be-fda9946df3c1.roa Signing time: Sat 08 Nov 2025 14:00:39 +0000 ROA not before: Sat 08 Nov 2025 14:00:39 +0000 ROA not after: Fri 06 Feb 2026 14:00:39 +0000 asID: 36630 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ca:d0:59:e6:ee:6f:77:ba:30:f1:09:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 8 14:00:39 2025 GMT Not After : Feb 6 14:00:39 2026 GMT Subject: CN=3eff5ccd-2002-4607-81f9-767b609e6006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e7:a2:a8:8b:5e:fc:0c:36:4b:fe:37:72:08: 03:6e:a3:30:d6:8e:4e:5a:1c:70:33:7f:79:c6:8f: 73:d1:d0:e5:c8:af:46:a4:b5:4f:e6:c4:03:ed:1e: 05:dc:48:fe:aa:7b:fe:c1:64:be:b1:d8:6e:72:28: 66:0a:51:4f:a8:55:fe:4f:05:43:9b:e1:6d:1c:42: 55:27:86:5c:c8:fc:4e:ae:aa:40:5d:f5:20:51:e9: 74:c0:16:06:b4:e1:e9:1d:cf:78:4b:13:51:aa:ad: eb:41:69:db:8e:8f:69:8d:80:61:7f:32:0e:da:0b: 7b:33:d7:69:96:e4:eb:2c:06:47:ea:09:71:18:97: ca:1b:17:a2:70:39:9f:7f:e4:1d:d2:24:97:38:b7: 08:e4:04:45:40:ad:25:09:09:23:44:12:38:0c:61: aa:37:1c:55:86:32:83:af:29:78:38:c9:9a:97:ba: c9:11:3c:c4:7f:74:59:c5:14:ea:be:b8:96:c2:a3: b2:9f:76:e1:db:59:d5:55:d6:8c:09:b9:c9:b9:7f: 5d:73:97:c6:da:f2:e5:a0:e5:08:90:7c:53:f8:47: 23:8d:10:e7:bf:ff:49:17:15:87:aa:b0:fd:ba:d7: 3d:6d:13:db:ff:58:92:8f:55:2d:67:d2:94:24:ca: 16:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:83:23:57:9A:35:A9:C3:F8:54:9C:77:E2:5A:E1:60:75:20:F1:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33497220-350a-3ed9-99be-fda9946df3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:af:3a:ab:ae:52:52:16:ec:92:73:24:b5:57:b9:70:95:11: 36:23:a3:e3:9a:e6:17:a5:41:73:f9:eb:72:bc:8d:72:f6:db: 73:19:5a:20:76:17:6e:97:fc:9e:fe:8b:40:cd:21:71:50:8a: c2:6a:50:8e:46:bc:57:ea:29:e6:89:ad:77:de:3e:91:1b:10: c1:f9:bd:d5:ef:5f:0a:a4:6c:fb:94:55:3b:d4:cd:17:26:2d: a0:41:5e:03:6e:00:fa:73:97:ea:5a:e7:42:dc:50:69:43:c2: 3d:94:83:a6:0f:d2:57:80:5f:b5:a6:8c:0f:46:c2:6c:f4:5f: 94:4a:76:2a:85:e1:4b:00:14:d7:7f:5e:7f:3b:be:6a:6f:a2: a0:74:37:bc:46:01:18:b8:5f:41:cd:82:5e:e6:d4:3c:b5:dd: 6a:d2:41:62:d4:a9:ec:b5:a1:8f:07:c0:7c:73:29:98:62:65: f6:bf:f1:d1:89:37:e1:79:60:2f:85:c9:7f:d2:fd:5e:7d:0b: a4:97:40:56:bc:80:89:81:3c:2a:d7:91:a2:ba:4a:cf:25:b2: 63:02:20:ec:a9:14:ce:02:28:3f:0b:d9:c3:be:02:4a:80:82: 4c:f3:f2:84:8c:07:be:de:0e:5a:81:b9:f5:8a:da:dd:b2:03: c9:81:63:1a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEvK0Fnm7m93ujDxCaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwODE0MDAzOVoXDTI2MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk M2VmZjVjY2QtMjAwMi00NjA3LTgxZjktNzY3YjYwOWU2MDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOeiqIte/Aw2S/43cggDbqMw1o5OWhxwM395 xo9z0dDlyK9GpLVP5sQD7R4F3Ej+qnv+wWS+sdhucihmClFPqFX+TwVDm+FtHEJV J4ZcyPxOrqpAXfUgUel0wBYGtOHpHc94SxNRqq3rQWnbjo9pjYBhfzIO2gt7M9dp luTrLAZH6glxGJfKGxeicDmff+Qd0iSXOLcI5ARFQK0lCQkjRBI4DGGqNxxVhjKD ryl4OMmal7rJETzEf3RZxRTqvriWwqOyn3bh21nVVdaMCbnJuX9dc5fG2vLloOUI kHxT+EcjjRDnv/9JFxWHqrD9utc9bRPb/1iSj1UtZ9KUJMoWBQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCKDI1eaNanD+FScd+Ja4WB1IPFZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzM0OTcyMjAtMzUwYS0z ZWQ5LTk5YmUtZmRhOTk0NmRmM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC4rzqrrlJSFuyScyS1V7lwlRE2I6PjmuYXpUFz +etyvI1y9ttzGVogdhdul/ye/otAzSFxUIrCalCORrxX6inmia133j6RGxDB+b3V 718KpGz7lFU71M0XJi2gQV4DbgD6c5fqWudC3FBpQ8I9lIOmD9JXgF+1powPRsJs 9F+USnYqheFLABTXf15/O75qb6KgdDe8RgEYuF9BzYJe5tQ8td1q0kFi1KnstaGP B8B8cymYYmX2v/HRiTfheWAvhcl/0v1efQukl0BWvICJgTwq15GiukrPJbJjAiDs qRTOAig/C9nDvgJKgIJM8/KEjAe+3g5agbn1itrdsgPJgWMa -----END CERTIFICATE-----Generated at Sat Dec 6 15:26:57 2025 by rpki-client