This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8602d12-994b-32c0-a3c1-6f2976b2d89d.roa File: b8602d12-994b-32c0-a3c1-6f2976b2d89d.roa (raw, json) Hash identifier: AL6QxcixjSUKjt5Ue6rWc7oPBLcBsY+EfM4ZaP1ntLQ= Subject key identifier: 58:C2:44:9C:29:AA:CB:4F:42:E8:E5:20:10:A1:27:FF:4E:12:94:82 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BD760545120A10911381B6380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8602d12-994b-32c0-a3c1-6f2976b2d89d.roa Signing time: Thu 13 Nov 2025 02:00:31 +0000 ROA not before: Thu 13 Nov 2025 02:00:31 +0000 ROA not after: Wed 11 Feb 2026 02:00:31 +0000 asID: 396571 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d7:60:54:51:20:a1:09:11:38:1b:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 13 02:00:31 2025 GMT Not After : Feb 11 02:00:31 2026 GMT Subject: CN=ad30240a-a350-46fc-a477-d2c5e048a111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:db:13:7b:3c:29:c5:04:85:e5:d9:fc:60:0c: 06:ab:6c:11:31:79:55:38:b7:7b:c2:20:5e:c9:11: 9f:78:ec:00:36:3d:58:b9:08:1e:91:7b:af:ee:a8: 76:d4:be:2e:6e:31:87:6d:f0:ff:1e:38:3e:4d:33: cc:f6:17:03:7f:2a:87:d6:fa:d1:3c:a4:3e:17:7e: 9d:3b:68:10:34:38:e2:26:4b:ab:1d:a8:bc:86:fd: f4:6a:7a:64:87:d3:b9:38:d9:5a:86:01:fa:8f:c4: 61:73:26:59:2f:7d:60:7b:f0:42:d0:71:e5:b0:b3: 4c:55:a6:c6:a4:c9:5e:7a:4a:01:8c:ab:c2:77:83: 66:82:7c:47:63:28:11:67:98:b0:7e:73:03:bb:22: 2b:05:e7:21:ea:bb:24:cd:52:69:9e:58:cb:32:34: 92:68:92:c3:52:60:89:04:2a:ae:10:e5:34:05:6f: 1f:96:47:0b:b4:10:08:3a:ab:9c:a0:5c:09:b1:1e: 50:e9:f6:3b:1e:9e:f3:df:e2:3e:37:38:01:a0:b3: 48:20:95:37:7c:24:69:59:ae:3c:27:50:76:1d:7d: f0:a2:33:ab:b2:14:69:18:1d:7d:9f:83:46:dd:ac: de:4d:41:f5:06:37:64:6d:b4:96:fe:7e:1c:30:e4: 22:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C2:44:9C:29:AA:CB:4F:42:E8:E5:20:10:A1:27:FF:4E:12:94:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8602d12-994b-32c0-a3c1-6f2976b2d89d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:34:7d:15:d9:4b:24:68:f4:f5:03:e2:cb:5a:82:e3:f1:a0: 88:10:53:bb:27:cc:f7:36:cf:f4:58:49:1b:f1:6e:b4:57:34: f3:8d:f7:08:b0:2b:43:43:46:25:3b:c4:b3:52:27:4f:58:6c: 9a:c0:3a:3b:4d:06:79:3a:04:73:58:9b:6b:c0:21:02:96:d2: e3:40:1d:e6:2a:81:8b:4a:d8:52:e3:ca:18:52:23:b7:12:7b: b3:08:b8:6e:c1:02:88:19:19:f6:bd:25:ee:80:45:1e:a8:48: 47:97:25:7f:3d:35:2c:e5:2c:65:7c:e6:a2:6f:71:3f:6f:11: 01:2b:93:53:b0:47:71:e0:f1:e4:6c:a6:fe:a6:69:25:ac:07: 90:68:7f:3c:b9:ab:6f:a2:2a:a6:00:91:e4:a7:50:5b:fb:be: dc:f4:45:1d:d4:a4:2c:18:18:28:71:98:9b:16:70:51:9e:02: 90:bb:b6:f5:64:2d:39:a7:97:65:bd:b5:50:18:d0:8c:5c:d3: 73:a1:a6:40:a5:39:12:e4:99:a2:57:c5:87:e3:f6:47:0b:72: 98:28:46:a0:18:86:df:48:b5:30:eb:f0:d2:f4:d2:70:ec:77: 6c:94:08:5c:49:81:e4:00:6b:37:f4:2d:ad:ae:5d:b7:d0:4a: 6c:3e:c2:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvXYFRRIKEJETgbY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTExMzAyMDAzMVoXDTI2MDIxMTAyMDAzMVowLzEtMCsGA1UEAxMk YWQzMDI0MGEtYTM1MC00NmZjLWE0NzctZDJjNWUwNDhhMTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9sTezwpxQSF5dn8YAwGq2wRMXlVOLd7wiBe yRGfeOwANj1YuQgekXuv7qh21L4ubjGHbfD/Hjg+TTPM9hcDfyqH1vrRPKQ+F36d O2gQNDjiJkurHai8hv30anpkh9O5ONlahgH6j8RhcyZZL31ge/BC0HHlsLNMVabG pMleekoBjKvCd4NmgnxHYygRZ5iwfnMDuyIrBech6rskzVJpnljLMjSSaJLDUmCJ BCquEOU0BW8flkcLtBAIOqucoFwJsR5Q6fY7Hp7z3+I+NzgBoLNIIJU3fCRpWa48 J1B2HX3wojOrshRpGB19n4NG3azeTUH1BjdkbbSW/n4cMOQiLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFjCRJwpqstPQujlIBChJ/9OEpSCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjg2MDJkMTItOTk0Yi0z MmMwLWEzYzEtNmYyOTc2YjJkODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGo0fRXZSyRo9PUD4staguPxoIgQU7snzPc2z/RYSRvxbrRXNPON 9wiwK0NDRiU7xLNSJ09YbJrAOjtNBnk6BHNYm2vAIQKW0uNAHeYqgYtK2FLjyhhS I7cSe7MIuG7BAogZGfa9Je6ARR6oSEeXJX89NSzlLGV85qJvcT9vEQErk1OwR3Hg 8eRspv6maSWsB5Bofzy5q2+iKqYAkeSnUFv7vtz0RR3UpCwYGChxmJsWcFGeApC7 tvVkLTmnl2W9tVAY0Ixc03OhpkClORLkmaJXxYfj9kcLcpgoRqAYht9ItTDr8NL0 0nDsd2yUCFxJgeQAazf0La2uXbfQSmw+wlU= -----END CERTIFICATE-----Generated at Sat Dec 6 13:23:40 2025 by rpki-client