This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a65a893-6bc5-3c8e-a0b4-ce2ec7d14b86.roa File: 3a65a893-6bc5-3c8e-a0b4-ce2ec7d14b86.roa (raw, json) Hash identifier: 9k+U35erEDD/q7Lb9SzfGHacC5J05bAMX+Z3YmSlDdg= Subject key identifier: 0E:D4:6C:23:CA:72:5D:05:FA:CB:D0:C8:48:14:4C:9F:8E:F9:2A:3E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C470BD26D1B8266C11833A200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a65a893-6bc5-3c8e-a0b4-ce2ec7d14b86.roa Signing time: Tue 23 Dec 2025 02:00:31 +0000 ROA not before: Tue 23 Dec 2025 02:00:31 +0000 ROA not after: Mon 23 Mar 2026 01:00:31 +0000 asID: 22547 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:0b:d2:6d:1b:82:66:c1:18:33:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 23 02:00:31 2025 GMT Not After : Mar 23 01:00:31 2026 GMT Subject: CN=6447e1bb-64cf-4e86-85b5-b73610012dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:08:ed:22:ee:0c:99:05:61:5a:11:f2:a8:e9: ca:37:25:f7:c1:78:26:99:dc:e6:49:1c:55:50:b6: cf:54:30:a3:47:33:b3:04:4f:46:52:b9:a5:b2:74: 58:cc:4e:ed:94:4a:5e:b7:7e:75:c3:21:1a:04:af: 6c:d1:cc:b0:9a:73:18:00:96:6d:5d:4e:6f:d0:bf: 70:45:5b:4e:e3:f3:da:c6:0c:84:6d:8c:d3:d2:82: 26:8a:f7:73:2a:be:13:e3:d9:63:dc:78:ed:ff:87: 3b:fa:7c:78:bb:92:af:9f:d9:8e:30:67:6a:e5:3e: 29:f5:4e:25:7e:ad:b6:d0:3a:8c:0f:04:6c:92:0a: bf:1b:22:0d:0c:aa:57:28:8d:22:8b:a7:2a:33:28: 83:8c:a8:1c:23:41:44:8c:c5:b9:2e:47:6d:bb:a4: cc:18:3b:54:b9:8b:c0:67:5d:43:cd:d0:89:30:a8: ff:65:79:8e:ea:a4:88:7d:71:7c:74:3a:d3:39:4f: 75:12:40:db:e9:2a:38:86:1e:a4:3a:b7:b7:c2:7d: 1b:af:f1:51:71:da:80:3f:26:01:08:a6:31:9e:d7: eb:85:51:db:4e:32:fd:17:1f:4e:09:72:4c:f3:26: a9:57:46:6a:5f:36:95:ec:8b:31:9c:26:1e:d2:ac: 0a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D4:6C:23:CA:72:5D:05:FA:CB:D0:C8:48:14:4C:9F:8E:F9:2A:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a65a893-6bc5-3c8e-a0b4-ce2ec7d14b86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:d4:db:9e:12:49:d8:ee:0b:25:c9:52:bb:1b:15:ea:82:f1: 6e:f7:8b:7b:9b:41:d8:8e:f8:87:aa:fa:fd:34:e0:44:71:9d: 9d:3d:23:8d:45:0f:18:0b:0b:8d:83:60:da:cb:ac:78:83:dd: 9b:42:11:f1:c9:c5:83:db:56:5c:a6:7f:fa:80:48:d0:ad:dc: 54:10:a4:8c:93:9a:88:1b:c4:03:ab:7b:8d:cd:07:17:2e:e3: d2:57:86:59:e8:00:a4:2b:df:8f:61:d3:74:bc:0e:04:8c:5e: c0:23:bf:e9:bc:70:78:c4:6e:30:45:d1:0c:09:68:42:a2:3e: 07:cd:dd:97:9e:a5:64:65:2a:bb:3e:37:16:e3:0f:10:3b:34: 68:d8:99:12:76:10:a7:2e:c6:fe:c0:d7:42:d2:af:57:ad:20: f3:db:b4:57:b9:d4:26:aa:b8:58:fb:9c:b9:66:53:0b:ae:37: cd:42:62:74:b9:9f:f0:f3:1b:da:77:b6:90:bc:94:81:fd:a6: 6d:c8:c9:2b:ba:5d:04:78:05:15:99:31:6d:61:7f:1a:7f:25: cf:62:bd:ce:56:81:93:ae:a5:37:d2:96:65:ba:82:0d:d1:5d: 81:84:94:81:18:7c:d1:1b:c0:c0:56:db:5d:bb:fe:43:bb:d7: 4a:63:56:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExHC9JtG4JmwRgzogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk NjQ0N2UxYmItNjRjZi00ZTg2LTg1YjUtYjczNjEwMDEyZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywjtIu4MmQVhWhHyqOnKNyX3wXgmmdzmSRxV ULbPVDCjRzOzBE9GUrmlsnRYzE7tlEpet351wyEaBK9s0cywmnMYAJZtXU5v0L9w RVtO4/PaxgyEbYzT0oImivdzKr4T49lj3Hjt/4c7+nx4u5Kvn9mOMGdq5T4p9U4l fq220DqMDwRskgq/GyINDKpXKI0ii6cqMyiDjKgcI0FEjMW5Lkdtu6TMGDtUuYvA Z11DzdCJMKj/ZXmO6qSIfXF8dDrTOU91EkDb6So4hh6kOre3wn0br/FRcdqAPyYB CKYxntfrhVHbTjL9Fx9OCXJM8yapV0ZqXzaV7IsxnCYe0qwK4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA7UbCPKcl0F+svQyEgUTJ+O+So+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2E2NWE4OTMtNmJjNS0z YzhlLWEwYjQtY2UyZWM3ZDE0Yjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHDU254SSdjuCyXJUrsbFeqC8W73i3ubQdiO+Ieq+v004ERxnZ09 I41FDxgLC42DYNrLrHiD3ZtCEfHJxYPbVlymf/qASNCt3FQQpIyTmogbxAOre43N Bxcu49JXhlnoAKQr349h03S8DgSMXsAjv+m8cHjEbjBF0QwJaEKiPgfN3ZeepWRl Krs+NxbjDxA7NGjYmRJ2EKcuxv7A10LSr1etIPPbtFe51CaquFj7nLlmUwuuN81C YnS5n/DzG9p3tpC8lIH9pm3IySu6XQR4BRWZMW1hfxp/Jc9ivc5WgZOupTfSlmW6 gg3RXYGElIEYfNEbwMBW2127/kO710pjVvM= -----END CERTIFICATE-----Generated at Sun Jan 25 20:17:50 2026 by rpki-client