This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b35491cf-f303-3fe2-beac-924e7443d2d4.roa File: b35491cf-f303-3fe2-beac-924e7443d2d4.roa (raw, json) Hash identifier: AWHrhhWIDihAhah0xKSKad464X10ybuwEfgVqJDFEjE= Subject key identifier: 5D:30:6E:6D:BF:7F:1C:55:C5:FF:98:02:66:39:5E:61:B6:90:3D:73 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BCD9F3640FAB05E04DEFB6800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b35491cf-f303-3fe2-beac-924e7443d2d4.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 36625 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9f:36:40:fa:b0:5e:04:de:fb:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=7d9a9f98-f827-4ba1-bca1-5adb0d8bc33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:98:2c:94:e1:4a:14:4d:e1:ea:49:4e:03:21: 1a:9e:3d:f7:74:45:f0:37:8d:5b:b9:b4:09:14:cf: f3:31:23:09:66:38:ae:ad:ab:7e:69:b6:22:af:62: 9b:96:9d:de:79:26:1a:e0:01:2c:b1:7b:73:95:21: 2e:8b:3b:3f:58:17:a0:fa:9e:dd:2f:bf:76:5e:f9: f6:73:06:8f:82:3a:89:77:5a:0e:a9:d9:8d:90:f9: e4:64:3a:9d:5a:4d:64:67:b7:e2:15:b9:d8:8b:57: 33:7c:2e:4b:8e:f9:2e:9d:29:d7:a7:fb:cb:e9:3a: f8:c9:23:98:8d:c2:65:98:3b:a2:b3:c5:60:a9:bb: 9e:85:dc:49:e2:43:1c:de:12:95:af:45:3c:a4:dc: 5b:e3:54:32:2a:a5:01:23:2d:b0:cf:60:e1:b7:9d: 5b:63:1f:03:7a:6a:32:b1:32:8b:d2:fb:dd:a9:80: 84:63:c3:15:9b:6f:50:93:f3:f4:9e:19:47:87:3d: ca:43:95:9c:b4:58:ed:c0:7e:b4:26:eb:bb:96:49: 8f:e5:fe:98:d2:3b:e6:19:a4:28:de:db:7a:59:69: d0:6f:c3:98:14:b0:43:b2:a4:bb:cf:43:5a:76:f4: bf:5c:94:58:68:0b:62:b1:1b:1a:1d:ca:ce:85:e1: e4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:30:6E:6D:BF:7F:1C:55:C5:FF:98:02:66:39:5E:61:B6:90:3D:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b35491cf-f303-3fe2-beac-924e7443d2d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:d5:33:45:c5:79:5f:a3:17:64:66:df:f5:db:5f:7a:7d:8b: bb:4d:fb:b2:d6:ea:cf:d1:6f:41:4e:63:69:52:35:dc:fa:94: be:44:1f:49:ad:73:d4:ee:a5:13:9a:00:5f:b1:fa:9f:95:cf: 18:d8:e4:48:56:d1:19:7c:25:f1:73:04:79:e0:8f:90:2b:21: 5e:1a:71:46:a4:fb:a7:fb:77:aa:25:a5:83:e8:ca:42:84:47: 05:00:48:f8:62:aa:7d:92:16:a9:48:b7:f3:71:4e:3d:5f:c9: 3a:b9:2c:b7:8e:13:5a:ea:57:61:3a:0e:6f:5d:2e:3c:27:23: e2:05:de:31:8a:93:2c:aa:e3:25:f5:9e:8b:8f:aa:21:5c:b9: 64:1f:05:bc:c8:b8:d8:0f:0d:7d:a8:84:c4:27:fb:c0:0e:4e: 8d:f8:00:8d:ad:2d:be:7d:c9:dd:9b:6b:09:60:9f:5d:59:78: cd:ed:54:87:e8:69:53:68:21:8c:c8:92:0b:9c:eb:3a:85:f5: fc:9c:f8:4e:48:08:e3:05:2a:46:d3:d3:5c:33:66:e0:dd:c2: 05:40:b8:e0:56:34:73:db:85:0f:a5:07:9e:19:8b:e4:d5:d5: 33:1f:22:f9:21:2e:b2:b7:fb:08:e8:47:cf:17:15:14:1b:17: 6b:80:02:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvNnzZA+rBeBN77aAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk N2Q5YTlmOTgtZjgyNy00YmExLWJjYTEtNWFkYjBkOGJjMzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopgslOFKFE3h6klOAyEanj33dEXwN41bubQJ FM/zMSMJZjiurat+abYir2Kblp3eeSYa4AEssXtzlSEuizs/WBeg+p7dL792Xvn2 cwaPgjqJd1oOqdmNkPnkZDqdWk1kZ7fiFbnYi1czfC5LjvkunSnXp/vL6Tr4ySOY jcJlmDuis8VgqbuehdxJ4kMc3hKVr0U8pNxb41QyKqUBIy2wz2Dht51bYx8Demoy sTKL0vvdqYCEY8MVm29Qk/P0nhlHhz3KQ5WctFjtwH60Juu7lkmP5f6Y0jvmGaQo 3tt6WWnQb8OYFLBDsqS7z0NadvS/XJRYaAtisRsaHcrOheHkTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF0wbm2/fxxVxf+YAmY5XmG2kD1zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjM1NDkxY2YtZjMwMy0z ZmUyLWJlYWMtOTI0ZTc0NDNkMmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACfVM0XFeV+jF2Rm3/XbX3p9i7tN+7LW6s/Rb0FOY2lSNdz6lL5E H0mtc9TupROaAF+x+p+VzxjY5EhW0Rl8JfFzBHngj5ArIV4acUak+6f7d6olpYPo ykKERwUASPhiqn2SFqlIt/NxTj1fyTq5LLeOE1rqV2E6Dm9dLjwnI+IF3jGKkyyq 4yX1nouPqiFcuWQfBbzIuNgPDX2ohMQn+8AOTo34AI2tLb59yd2bawlgn11ZeM3t VIfoaVNoIYzIkguc6zqF9fyc+E5ICOMFKkbT01wzZuDdwgVAuOBWNHPbhQ+lB54Z i+TV1TMfIvkhLrK3+wjoR88XFRQbF2uAAjA= -----END CERTIFICATE-----Generated at Sat Dec 6 13:24:41 2025 by rpki-client