This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba8a8476-a074-346c-a5ea-c1378d1ddb9e.roa File: ba8a8476-a074-346c-a5ea-c1378d1ddb9e.roa (raw, json) Hash identifier: 4bOFll9paksCy8rNQJdjyf0w/4tF6Cq9nCBolUsCLGk= Subject key identifier: 3E:BD:CA:BD:D4:AC:4A:6B:BA:05:34:A0:92:60:3F:96:D9:D0:A7:9C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BEAEB59EA2379DB93DE66AD00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba8a8476-a074-346c-a5ea-c1378d1ddb9e.roa Signing time: Thu 20 Nov 2025 02:00:30 +0000 ROA not before: Thu 20 Nov 2025 02:00:30 +0000 ROA not after: Wed 18 Feb 2026 02:00:30 +0000 asID: 396617 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ea:eb:59:ea:23:79:db:93:de:66:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 20 02:00:30 2025 GMT Not After : Feb 18 02:00:30 2026 GMT Subject: CN=bd686344-dd17-4c48-8203-e35f0afb5cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2a:c1:24:a4:fb:7c:d6:fb:b2:fc:d2:16:ab: ce:72:d6:0c:87:4d:73:c2:29:b7:78:bb:37:91:18: 9f:a1:dc:bd:1a:a1:fa:57:7e:0d:22:79:d8:ef:af: 89:b2:24:3d:5d:6c:ba:90:20:4a:17:f6:dc:e5:58: 98:81:3c:8d:9c:9b:19:ec:25:60:f4:3c:cf:10:18: dc:c8:9d:13:02:eb:28:38:23:cc:b3:d7:bd:f8:5d: cb:64:0c:b5:bf:d3:68:b1:f1:83:20:8f:d6:c3:2a: 95:46:1b:2c:88:85:6d:97:5d:2c:1e:0e:72:bd:c2: 11:d6:30:6d:c8:ac:02:f1:2d:df:53:e6:ce:64:b9: 4c:07:ce:d8:d2:5b:a8:e0:a8:41:2a:f1:1f:17:77: 04:be:25:df:2c:60:d8:9f:00:e7:89:68:4a:1e:1b: 5e:bf:2e:01:cd:e1:66:77:96:cb:15:1d:32:78:1f: d3:c2:8b:e2:e6:cc:be:09:3c:c9:59:eb:24:d4:57: 04:95:cc:78:e4:f1:3a:33:cb:ac:e0:8c:14:04:c6: 99:ff:be:86:70:e2:c7:72:f9:47:4d:a7:62:68:15: 6c:17:ec:95:65:6d:49:27:c1:4b:0e:aa:84:64:83: d1:0d:95:01:7a:11:16:ad:65:eb:11:a2:ba:e1:5b: 27:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BD:CA:BD:D4:AC:4A:6B:BA:05:34:A0:92:60:3F:96:D9:D0:A7:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba8a8476-a074-346c-a5ea-c1378d1ddb9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:62:5d:78:c9:a7:58:c8:b1:f8:35:a4:52:ec:1c:0c:8f:d4: a8:68:90:88:03:97:77:c0:5c:e1:96:71:7e:e4:8a:69:24:e0: a4:da:17:58:3b:72:22:40:a6:62:9e:9c:cd:6a:0d:6a:c3:f3: 04:03:80:94:7b:b1:ba:d4:95:5a:a7:ac:50:8a:24:e0:83:7a: 9a:2d:65:06:0b:aa:48:ea:f3:5f:d1:54:ad:11:b6:5d:44:de: 13:11:8c:40:7b:8c:d9:2f:58:7b:84:f9:89:f9:09:a0:6f:e3: 6e:31:08:64:6d:1f:9a:1f:48:16:9a:34:7a:5c:12:40:d5:81: da:b5:31:5d:cb:11:6b:cf:8c:54:8f:bf:80:68:9f:69:04:d6: a9:02:b3:20:3b:52:2f:58:78:ba:b4:c8:73:f1:55:b1:c3:bf: c2:8b:ae:2b:43:b4:b9:10:eb:6e:67:0e:21:37:23:ba:d0:27: e4:40:d2:3f:30:67:18:b4:c3:55:01:f9:ea:b9:32:72:e3:b8: 66:7a:e9:69:48:ac:30:81:eb:fb:d9:e5:c8:94:77:a1:71:65: d8:68:90:c9:a6:c8:83:a5:0b:46:a5:ea:e3:83:88:c6:59:4f: 2f:f6:f8:7b:5b:7d:bc:00:23:c2:1b:2f:13:60:7f:08:ce:5e: a6:9d:13:35 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvq61nqI3nbk95mrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEyMDAyMDAzMFoXDTI2MDIxODAyMDAzMFowLzEtMCsGA1UEAxMk YmQ2ODYzNDQtZGQxNy00YzQ4LTgyMDMtZTM1ZjBhZmI1Y2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyrBJKT7fNb7svzSFqvOctYMh01zwim3eLs3 kRifody9GqH6V34NInnY76+JsiQ9XWy6kCBKF/bc5ViYgTyNnJsZ7CVg9DzPEBjc yJ0TAusoOCPMs9e9+F3LZAy1v9NosfGDII/WwyqVRhssiIVtl10sHg5yvcIR1jBt yKwC8S3fU+bOZLlMB87Y0luo4KhBKvEfF3cEviXfLGDYnwDniWhKHhtevy4BzeFm d5bLFR0yeB/Twovi5sy+CTzJWesk1FcElcx45PE6M8us4IwUBMaZ/76GcOLHcvlH TadiaBVsF+yVZW1JJ8FLDqqEZIPRDZUBehEWrWXrEaK64VsnXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD69yr3UrEprugU0oJJgP5bZ0KecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmE4YTg0NzYtYTA3NC0z NDZjLWE1ZWEtYzEzNzhkMWRkYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHRiXXjJp1jIsfg1pFLsHAyP1KhokIgDl3fAXOGWcX7kimkk4KTa F1g7ciJApmKenM1qDWrD8wQDgJR7sbrUlVqnrFCKJOCDepotZQYLqkjq81/RVK0R tl1E3hMRjEB7jNkvWHuE+Yn5CaBv424xCGRtH5ofSBaaNHpcEkDVgdq1MV3LEWvP jFSPv4Bon2kE1qkCsyA7Ui9YeLq0yHPxVbHDv8KLritDtLkQ625nDiE3I7rQJ+RA 0j8wZxi0w1UB+eq5MnLjuGZ66WlIrDCB6/vZ5ciUd6FxZdhokMmmyIOlC0al6uOD iMZZTy/2+HtbfbwAI8IbLxNgfwjOXqadEzU= -----END CERTIFICATE-----Generated at Sat Dec 6 19:05:15 2025 by rpki-client