This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9cf4357a-8f27-36fe-857f-1b91cbb7b73b.roa File: 9cf4357a-8f27-36fe-857f-1b91cbb7b73b.roa (raw, json) Hash identifier: JXb0duVzcpEK3lBBvHCkxMbnft3FoLhZN39vs9By0V4= Subject key identifier: 5D:D3:63:05:A6:07:98:BB:D8:8D:D8:99:5B:3A:A6:75:F7:2E:76:2C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BF8E0C4376F13F477DE470300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9cf4357a-8f27-36fe-857f-1b91cbb7b73b.roa Signing time: Tue 25 Nov 2025 02:00:31 +0000 ROA not before: Tue 25 Nov 2025 02:00:31 +0000 ROA not after: Mon 23 Feb 2026 02:00:31 +0000 asID: 397206 IP address blocks: 2001:501:b1f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:e0:c4:37:6f:13:f4:77:de:47:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 25 02:00:31 2025 GMT Not After : Feb 23 02:00:31 2026 GMT Subject: CN=e9e705af-8d66-4791-8299-a8fdf76ccbb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ea:bd:70:c9:44:e8:e7:42:6d:ef:af:1b:e3: c0:ef:e4:79:a5:c1:17:86:dc:02:f7:b6:14:e9:72: 69:1c:e1:b7:12:ca:9f:dd:b7:db:34:b6:a4:99:2a: 07:a2:d0:1a:58:99:16:31:0d:41:f3:75:8e:6c:1c: 27:d5:a5:ed:1e:54:6e:e7:95:fb:4e:d2:7b:ad:3c: 28:c1:4a:7f:0a:ed:f4:0e:11:ce:da:7d:54:ac:87: e5:21:d1:81:0b:36:cf:82:b4:51:3a:b8:d1:2f:b1: 1c:19:7f:9e:53:68:38:a8:34:19:71:45:04:37:d8: d7:61:23:d7:57:ba:2c:f9:b0:be:bf:54:1f:a7:29: f3:26:33:53:9e:c4:7a:55:da:b7:50:5b:ec:13:c9: fb:01:e9:86:32:a7:10:ed:6d:76:f7:d8:25:28:79: 25:c8:14:5c:e8:d7:0b:ec:23:14:26:94:79:7b:ad: 60:f3:57:f2:b2:27:c9:cf:8c:90:b8:de:b9:b1:dd: 94:1b:ab:d7:80:d8:e9:c5:4e:bd:03:63:61:be:8c: 27:79:2f:cf:bd:c8:b0:a1:83:02:a9:50:ba:bd:5c: 02:e5:9b:06:dc:b6:9a:39:e3:7d:44:90:ba:e3:02: 88:bf:f5:4e:74:10:11:c8:b5:54:56:d8:fe:ae:84: 8c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D3:63:05:A6:07:98:BB:D8:8D:D8:99:5B:3A:A6:75:F7:2E:76:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9cf4357a-8f27-36fe-857f-1b91cbb7b73b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:3a:94:3e:bc:a0:2f:a6:21:c6:7e:bc:f3:75:69:3f:0c:56: e6:2a:a6:a7:d3:8a:e7:11:d5:20:14:1c:ae:60:df:39:27:36: 26:05:99:b1:eb:fd:81:bf:07:da:00:6a:84:ae:42:03:bc:e9: f0:1c:fd:79:b2:03:78:35:3a:3e:89:01:44:d8:e3:b7:5f:6a: 7f:b1:79:fa:9c:f8:c4:17:cb:82:55:b7:5d:66:f5:78:f5:1c: cc:e3:58:7a:08:c8:62:4c:2f:1f:7b:8f:c0:9b:3f:ef:5b:db: be:34:a3:a7:c6:ac:c2:50:9c:3a:19:45:03:05:cd:a0:a5:3a: d5:28:4c:6c:91:90:16:79:1b:90:2f:6d:eb:74:4d:43:84:0f: c8:02:0e:83:e7:58:45:51:cc:e5:61:78:0b:85:93:28:aa:77: 45:07:36:ae:ae:60:96:0a:e0:33:e2:89:e6:45:42:70:03:05: 6c:18:03:7b:42:df:b9:e1:9b:22:99:f9:c5:9d:ea:49:e3:8b: 5a:bb:f1:7d:5c:ff:7d:a1:b7:66:12:c9:13:87:d4:85:67:0d: 14:f2:82:86:58:14:61:89:fa:bc:8c:ef:4e:93:d4:9f:9f:2e: 83:41:d5:3e:01:bb:ef:4a:08:53:6a:f3:02:c8:4c:47:31:70: 5b:28:68:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEv44MQ3bxP0d95HAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEyNTAyMDAzMVoXDTI2MDIyMzAyMDAzMVowLzEtMCsGA1UEAxMk ZTllNzA1YWYtOGQ2Ni00NzkxLTgyOTktYThmZGY3NmNjYmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuq9cMlE6OdCbe+vG+PA7+R5pcEXhtwC97YU 6XJpHOG3Esqf3bfbNLakmSoHotAaWJkWMQ1B83WObBwn1aXtHlRu55X7TtJ7rTwo wUp/Cu30DhHO2n1UrIflIdGBCzbPgrRROrjRL7EcGX+eU2g4qDQZcUUEN9jXYSPX V7os+bC+v1QfpynzJjNTnsR6Vdq3UFvsE8n7AemGMqcQ7W1299glKHklyBRc6NcL 7CMUJpR5e61g81fysifJz4yQuN65sd2UG6vXgNjpxU69A2NhvowneS/PvciwoYMC qVC6vVwC5ZsG3LaaOeN9RJC64wKIv/VOdBARyLVUVtj+roSMNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF3TYwWmB5i72I3YmVs6pnX3LnYsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWNmNDM1N2EtOGYyNy0z NmZlLTg1N2YtMWI5MWNiYjdiNzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADw6lD68oC+mIcZ+vPN1aT8MVuYqpqfTiucR1SAUHK5g3zknNiYF mbHr/YG/B9oAaoSuQgO86fAc/XmyA3g1Oj6JAUTY47dfan+xefqc+MQXy4JVt11m 9Xj1HMzjWHoIyGJMLx97j8CbP+9b2740o6fGrMJQnDoZRQMFzaClOtUoTGyRkBZ5 G5Avbet0TUOED8gCDoPnWEVRzOVheAuFkyiqd0UHNq6uYJYK4DPiieZFQnADBWwY A3tC37nhmyKZ+cWd6knji1q78X1c/32ht2YSyROH1IVnDRTygoZYFGGJ+ryM706T 1J+fLoNB1T4Bu+9KCFNq8wLITEcxcFsoaG0= -----END CERTIFICATE-----Generated at Sat Dec 6 17:12:45 2025 by rpki-client