This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43f53efc-515e-3e0e-aea2-dbf0a66c269b.roa File: 43f53efc-515e-3e0e-aea2-dbf0a66c269b.roa (raw, json) Hash identifier: uAwFqb7i8KOFD44TcCCWNI+fyhGen5siPzjhh3YBqGA= Subject key identifier: 4E:54:DC:89:EB:CD:D4:1A:ED:3D:59:3D:4B:95:EC:C5:68:54:1F:23 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BD3307A240BA3D11EC9AC2540 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43f53efc-515e-3e0e-aea2-dbf0a66c269b.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 20172 IP address blocks: 2001:502:cbe4::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:7a:24:0b:a3:d1:1e:c9:ac:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=87a693a1-86bd-4afb-a740-7ba3e2bf47de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9a:f5:69:66:35:8c:5b:a9:38:b5:b3:be:fd: be:97:f3:df:22:9b:11:95:c5:10:c1:c8:d5:78:14: 23:13:ac:83:d9:fb:90:cd:52:dc:09:61:ca:5b:6b: 8c:84:84:78:e3:14:50:73:40:74:d7:99:ac:52:39: 41:51:92:71:58:09:38:41:14:32:80:ed:2f:4b:3a: 94:d6:ea:34:66:90:a2:92:b7:96:df:66:1d:df:38: 7a:a2:8d:44:06:aa:5f:fe:f6:d1:ae:54:f4:3f:97: fa:d2:dc:35:4b:9b:55:52:f1:39:59:54:02:53:78: f8:4a:0d:ff:42:a5:b3:ff:e0:23:50:77:a4:ca:a4: d5:d4:64:b1:6c:f3:51:02:fe:6b:b0:bc:f5:0d:b7: 7c:a7:c1:ef:3b:6a:b4:00:b2:1d:f6:ab:9c:cc:cd: 3b:1d:66:d9:ed:fe:55:a9:50:c7:7d:ee:3c:c0:99: 5e:9a:f7:43:9c:16:eb:8a:99:58:06:9a:81:c5:08: c1:49:b3:1f:12:38:14:f2:d1:de:9b:d0:bb:86:47: 30:53:81:d5:6e:71:79:3c:4b:7a:d9:b8:17:e5:54: db:d3:bc:f2:c7:a1:58:64:a8:6e:4e:ac:ed:5e:8f: 16:00:ce:66:be:2a:59:27:78:38:e8:0c:8a:5c:79: 3d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:54:DC:89:EB:CD:D4:1A:ED:3D:59:3D:4B:95:EC:C5:68:54:1F:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43f53efc-515e-3e0e-aea2-dbf0a66c269b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:e5:ec:69:0a:7d:ac:87:4f:78:04:f7:97:2e:ef:97:9f:bd: 02:38:39:47:f9:e7:c2:4b:b1:bc:05:dd:3c:cb:02:83:76:95: 92:13:f1:11:01:22:98:86:15:ee:62:56:58:bd:80:02:5b:b0: a6:3f:8c:93:0f:d4:6f:7e:f9:f0:f4:ed:2c:1f:7a:49:77:4b: 0d:ab:02:68:f1:e2:cb:e8:52:5b:0b:f1:7c:b8:8e:40:45:3d: 55:ed:02:e0:f8:53:d3:12:a7:84:d4:44:24:00:9e:b6:fa:0c: dc:f9:7d:40:83:d2:fb:a6:4e:e8:a4:b8:78:50:d5:57:f8:6a: ef:5f:88:0e:e2:37:0b:4a:59:df:99:78:5c:5b:3c:ad:df:2c: e9:f1:93:a0:94:e3:c3:b2:f2:f0:d0:35:1e:d6:ee:6a:05:1a: 19:e2:f8:c4:5e:49:b4:e6:ec:b3:da:83:da:66:14:72:98:e3: 57:af:77:26:82:08:97:c2:98:e6:cf:da:f8:ac:5e:9d:ff:8c: c3:10:b5:4a:d1:06:2b:21:1d:fc:be:36:dc:ae:f2:9d:77:39: 26:8d:7d:11:99:bc:32:1b:c3:1d:32:69:b2:81:02:c2:c1:30: 3d:23:79:25:44:4f:a2:37:aa:d0:36:2a:d3:1c:f5:c2:62:62: 91:52:3e:fe -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEvTMHokC6PRHsmsJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk ODdhNjkzYTEtODZiZC00YWZiLWE3NDAtN2JhM2UyYmY0N2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZr1aWY1jFupOLWzvv2+l/PfIpsRlcUQwcjV eBQjE6yD2fuQzVLcCWHKW2uMhIR44xRQc0B015msUjlBUZJxWAk4QRQygO0vSzqU 1uo0ZpCikreW32Yd3zh6oo1EBqpf/vbRrlT0P5f60tw1S5tVUvE5WVQCU3j4Sg3/ QqWz/+AjUHekyqTV1GSxbPNRAv5rsLz1Dbd8p8HvO2q0ALId9quczM07HWbZ7f5V qVDHfe48wJlemvdDnBbriplYBpqBxQjBSbMfEjgU8tHem9C7hkcwU4HVbnF5PEt6 2bgX5VTb07zyx6FYZKhuTqztXo8WAM5mvipZJ3g46AyKXHk9WQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFE5U3InrzdQa7T1ZPUuV7MVoVB8jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDNmNTNlZmMtNTE1ZS0z ZTBlLWFlYTItZGJmMGE2NmMyNjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB15expCn2sh094BPeXLu+Xn70CODlH+efCS7G8 Bd08ywKDdpWSE/ERASKYhhXuYlZYvYACW7CmP4yTD9Rvfvnw9O0sH3pJd0sNqwJo 8eLL6FJbC/F8uI5ART1V7QLg+FPTEqeE1EQkAJ62+gzc+X1Ag9L7pk7opLh4UNVX +GrvX4gO4jcLSlnfmXhcWzyt3yzp8ZOglOPDsvLw0DUe1u5qBRoZ4vjEXkm05uyz 2oPaZhRymONXr3cmggiXwpjmz9r4rF6d/4zDELVK0QYrIR38vjbcrvKddzkmjX0R mbwyG8MdMmmygQLCwTA9I3klRE+iN6rQNirTHPXCYmKRUj7+ -----END CERTIFICATE-----Generated at Sat Dec 6 13:13:53 2025 by rpki-client