This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d2aae62-d7a3-3463-ad84-cdda5495d3af.roa File: 8d2aae62-d7a3-3463-ad84-cdda5495d3af.roa (raw, json) Hash identifier: gjDT5NfHq8HXJPbvAIfR20P7F3znS1XYUntYu8KTRg8= Subject key identifier: 3A:32:B0:DF:52:80:7D:E0:12:40:6C:D9:05:69:F4:25:F6:02:97:D8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BD7605585028A33CD1C728820 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d2aae62-d7a3-3463-ad84-cdda5495d3af.roa Signing time: Thu 13 Nov 2025 02:00:31 +0000 ROA not before: Thu 13 Nov 2025 02:00:31 +0000 ROA not after: Wed 11 Feb 2026 02:00:31 +0000 asID: 396554 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d7:60:55:85:02:8a:33:cd:1c:72:88:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 13 02:00:31 2025 GMT Not After : Feb 11 02:00:31 2026 GMT Subject: CN=4a31b5e0-8d17-4196-a7bc-d9396685daa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ad:7c:26:4e:2d:f1:48:dd:4e:07:6d:a2:72: c7:69:e7:78:fe:bc:b7:da:89:fa:6d:8d:11:22:bf: 81:83:6a:33:b5:4a:a2:a6:ff:a9:7d:8c:4a:26:82: 4c:d2:1e:2a:6c:ec:80:d1:5e:ff:27:1f:33:82:24: 72:22:7d:b7:3a:db:d2:d9:a1:c0:fa:03:df:81:d0: be:24:b4:90:23:af:66:d2:94:2b:cb:1a:7e:59:91: f4:08:2b:73:10:8c:88:18:be:61:cb:ef:c0:fb:53: bd:c0:36:46:45:10:1b:08:69:6c:3e:04:42:04:f2: 70:35:f0:f1:8a:23:78:75:b1:a8:10:20:46:27:40: 08:ac:57:9a:a4:70:78:03:f6:79:ca:bd:63:ac:c4: 61:52:a0:85:37:2f:cc:5c:f9:15:8a:05:2e:b0:11: 8a:2e:a1:20:28:9a:15:a4:20:1e:65:c6:e4:77:ce: af:43:45:71:22:8a:a6:08:10:28:2b:37:3e:2e:d1: e8:6b:77:de:90:0c:95:f9:3b:3e:95:63:eb:de:27: e7:cc:06:42:8a:4e:cb:12:1b:61:d7:1c:d8:2e:be: 1d:1f:06:1e:ef:48:28:c0:ad:5d:ec:e9:80:13:72: f7:ea:c0:25:49:94:d9:fe:8b:71:b2:9a:84:51:f6: c5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:32:B0:DF:52:80:7D:E0:12:40:6C:D9:05:69:F4:25:F6:02:97:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d2aae62-d7a3-3463-ad84-cdda5495d3af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:93:30:da:7a:3c:7b:1b:f9:da:9b:f0:c0:4c:5d:55:a1:6c: ff:53:e8:93:b6:b7:1b:95:2a:cc:ae:83:42:2b:85:3e:53:0a: 91:11:23:ee:8e:29:01:ae:e7:d0:af:e6:6f:e4:2a:41:65:6c: 89:a5:05:2f:b7:88:33:b9:01:77:62:82:4c:2a:c1:3b:88:5c: 73:60:e0:e5:ab:d5:e9:b6:d9:3c:8a:14:45:5e:e8:50:de:e6: df:67:e5:78:2b:e1:bc:13:b3:c0:67:a9:43:24:2f:02:6f:4a: f1:e0:ef:19:58:41:89:94:dc:05:cd:32:92:14:e7:d3:9c:b3: 7c:07:bb:ad:03:b0:cf:e7:68:06:62:47:5d:e5:89:cb:47:55: 78:ee:8e:7e:a0:c3:0d:a8:29:67:07:66:17:f7:db:8a:47:72: 83:6b:0c:16:ca:d4:c2:c6:1b:6f:ad:8c:64:98:91:3e:5a:be: 5a:8b:c3:95:26:ae:e6:00:89:b2:b0:74:b9:a9:87:73:5b:4d: 3c:18:43:0d:5a:02:75:c2:9a:ed:1f:2e:5a:69:0f:74:29:af: ef:a4:99:1a:38:c2:90:08:70:37:61:8f:bf:df:89:e0:1a:19: 59:65:de:f6:8c:77:92:60:1d:19:6b:b4:6f:d9:3d:56:0c:12: 3c:a4:33:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvXYFWFAoozzRxyiCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTExMzAyMDAzMVoXDTI2MDIxMTAyMDAzMVowLzEtMCsGA1UEAxMk NGEzMWI1ZTAtOGQxNy00MTk2LWE3YmMtZDkzOTY2ODVkYWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq18Jk4t8UjdTgdtonLHaed4/ry32on6bY0R Ir+Bg2oztUqipv+pfYxKJoJM0h4qbOyA0V7/Jx8zgiRyIn23OtvS2aHA+gPfgdC+ JLSQI69m0pQryxp+WZH0CCtzEIyIGL5hy+/A+1O9wDZGRRAbCGlsPgRCBPJwNfDx iiN4dbGoECBGJ0AIrFeapHB4A/Z5yr1jrMRhUqCFNy/MXPkVigUusBGKLqEgKJoV pCAeZcbkd86vQ0VxIoqmCBAoKzc+LtHoa3fekAyV+Ts+lWPr3ifnzAZCik7LEhth 1xzYLr4dHwYe70gowK1d7OmAE3L36sAlSZTZ/otxspqEUfbFJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDoysN9SgH3gEkBs2QVp9CX2ApfYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGQyYWFlNjItZDdhMy0z NDYzLWFkODQtY2RkYTU0OTVkM2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI2TMNp6PHsb+dqb8MBMXVWhbP9T6JO2txuVKsyug0IrhT5TCpER I+6OKQGu59Cv5m/kKkFlbImlBS+3iDO5AXdigkwqwTuIXHNg4OWr1em22TyKFEVe 6FDe5t9n5Xgr4bwTs8BnqUMkLwJvSvHg7xlYQYmU3AXNMpIU59Ocs3wHu60DsM/n aAZiR13lictHVXjujn6gww2oKWcHZhf324pHcoNrDBbK1MLGG2+tjGSYkT5avlqL w5UmruYAibKwdLmph3NbTTwYQw1aAnXCmu0fLlppD3Qpr++kmRo4wpAIcDdhj7/f ieAaGVll3vaMd5JgHRlrtG/ZPVYMEjykM2s= -----END CERTIFICATE-----Generated at Sat Dec 6 16:07:45 2025 by rpki-client