This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fe88e4d-4b67-3eba-9afd-8a2e81c32bc2.roa File: 8fe88e4d-4b67-3eba-9afd-8a2e81c32bc2.roa (raw, json) Hash identifier: 2pN0d5rffWRx9OTLpe5Ve6WApEuNys3qKQfP3oePVO0= Subject key identifier: 9C:63:33:65:E3:ED:99:2D:CE:D3:25:A4:60:8C:1B:16:60:94:75:90 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BDA2B215AD6C61F3A3E5ED6C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fe88e4d-4b67-3eba-9afd-8a2e81c32bc2.roa Signing time: Fri 14 Nov 2025 02:00:30 +0000 ROA not before: Fri 14 Nov 2025 02:00:30 +0000 ROA not after: Thu 12 Feb 2026 02:00:30 +0000 asID: 36630 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:da:2b:21:5a:d6:c6:1f:3a:3e:5e:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 14 02:00:30 2025 GMT Not After : Feb 12 02:00:30 2026 GMT Subject: CN=7cfdea0f-7c01-4de9-b66d-0c9a9c4a5521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1c:fa:90:fb:85:3f:dd:19:19:59:71:81:7f: a5:62:2b:0d:ed:2e:e7:11:1d:4b:ea:dd:d6:2f:72: 2b:d9:6b:75:cf:f5:9e:11:97:8f:4d:9e:c4:de:88: 98:36:fd:a5:e2:f5:1e:65:62:79:36:f3:10:d7:9f: 96:b0:e8:f8:77:2b:93:46:77:78:45:b2:50:3a:00: 90:e9:df:de:97:74:e0:f4:42:4f:ab:c3:7a:ba:a1: ad:af:2e:b7:24:79:50:d8:ac:24:1f:3a:67:8f:fd: 2a:0c:74:cb:28:7d:84:83:57:39:ef:0c:31:3c:bf: 1e:72:b2:e4:e5:89:af:2f:03:ae:d3:36:60:a4:b6: 23:2c:f6:31:1c:f5:0c:fa:b7:69:28:d0:b5:53:58: f6:04:42:c0:34:b7:a6:39:08:91:c1:32:e5:82:d2: 5e:9a:dd:de:9e:6a:e7:37:d6:63:4d:d6:d3:ee:b7: 58:1e:9f:3e:79:44:a4:02:23:7f:0e:c5:14:6c:c4: e5:15:bf:a0:1e:7a:5f:ea:39:7c:bc:3c:6d:8e:1d: 1d:39:32:bb:0a:25:d3:41:31:ed:b5:75:62:5b:76: b2:da:4e:fd:a5:45:98:e2:45:9f:ec:41:f1:51:22: de:88:38:27:df:48:81:74:5d:0b:33:e0:95:f5:73: 73:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:63:33:65:E3:ED:99:2D:CE:D3:25:A4:60:8C:1B:16:60:94:75:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fe88e4d-4b67-3eba-9afd-8a2e81c32bc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ae:63:82:09:80:7e:71:aa:f2:c3:6b:30:81:93:d0:db:4a: 23:77:5b:79:11:0c:ba:ba:7c:ed:ab:12:6f:70:c1:25:71:3c: 53:06:03:66:cc:1d:b7:89:e2:d4:09:f0:ac:36:04:49:35:73: e2:04:d5:31:a0:a6:20:8f:7d:e8:ab:07:b8:31:53:d3:b0:d5: e0:5b:82:7a:21:14:59:55:37:21:64:1f:2f:1b:e8:21:6e:ae: 89:f0:74:9d:f4:77:8b:e8:6e:56:77:08:99:2a:87:ed:95:bb: a3:bc:cd:45:fe:54:b5:b0:b9:1f:86:fc:74:cf:11:5f:9f:55: 65:b2:67:f7:a7:ab:1d:3d:d7:ac:2e:f6:a4:fb:8c:a3:e6:fd: b6:eb:95:9d:fd:7a:3b:ce:12:aa:33:51:96:27:cd:1c:38:b0: 57:8b:98:07:73:27:ed:21:0e:5c:8f:3c:99:4c:44:11:2f:37: 1d:17:1a:76:d1:09:8d:18:2f:9f:8c:e7:38:e2:92:72:c0:7b: 16:79:ad:61:81:15:20:bf:a3:ce:4b:30:cd:39:cd:1a:d1:6c: 68:5e:26:1c:f1:9d:91:d8:6a:fe:01:dc:9b:9a:23:8a:c2:68: e1:e0:51:96:66:14:d2:1d:b7:b9:fd:b2:e9:d0:8e:38:0e:92: f2:c1:0f:e5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEvaKyFa1sYfOj5e1sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTExNDAyMDAzMFoXDTI2MDIxMjAyMDAzMFowLzEtMCsGA1UEAxMk N2NmZGVhMGYtN2MwMS00ZGU5LWI2NmQtMGM5YTljNGE1NTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhz6kPuFP90ZGVlxgX+lYisN7S7nER1L6t3W L3Ir2Wt1z/WeEZePTZ7E3oiYNv2l4vUeZWJ5NvMQ15+WsOj4dyuTRnd4RbJQOgCQ 6d/el3Tg9EJPq8N6uqGtry63JHlQ2KwkHzpnj/0qDHTLKH2Eg1c57wwxPL8ecrLk 5YmvLwOu0zZgpLYjLPYxHPUM+rdpKNC1U1j2BELANLemOQiRwTLlgtJemt3enmrn N9ZjTdbT7rdYHp8+eUSkAiN/DsUUbMTlFb+gHnpf6jl8vDxtjh0dOTK7CiXTQTHt tXViW3ay2k79pUWY4kWf7EHxUSLeiDgn30iBdF0LM+CV9XNzWQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJxjM2Xj7ZktztMlpGCMGxZglHWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGZlODhlNGQtNGI2Ny0z ZWJhLTlhZmQtOGEyZTgxYzMyYmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBqrmOCCYB+caryw2swgZPQ20ojd1t5EQy6unzt qxJvcMElcTxTBgNmzB23ieLUCfCsNgRJNXPiBNUxoKYgj33oqwe4MVPTsNXgW4J6 IRRZVTchZB8vG+ghbq6J8HSd9HeL6G5WdwiZKoftlbujvM1F/lS1sLkfhvx0zxFf n1Vlsmf3p6sdPdesLvak+4yj5v2265Wd/Xo7zhKqM1GWJ80cOLBXi5gHcyftIQ5c jzyZTEQRLzcdFxp20QmNGC+fjOc44pJywHsWea1hgRUgv6POSzDNOc0a0WxoXiYc 8Z2R2Gr+AdybmiOKwmjh4FGWZhTSHbe5/bLp0I44DpLywQ/l -----END CERTIFICATE-----Generated at Sat Dec 6 17:11:48 2025 by rpki-client