This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbf8ece9-a4a3-3aa0-b2b1-efa2e486c303.roa File: bbf8ece9-a4a3-3aa0-b2b1-efa2e486c303.roa (raw, json) Hash identifier: EV2ZY2qnjSwdCmuv2lTP7emAqzmHohycG7Tcbx4V56k= Subject key identifier: 71:19:86:2E:D6:CE:C8:36:D6:BD:43:48:AF:CC:BE:BC:A1:01:34:4C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C470BCFE7744FD20E0785BAE0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbf8ece9-a4a3-3aa0-b2b1-efa2e486c303.roa Signing time: Tue 23 Dec 2025 02:00:31 +0000 ROA not before: Tue 23 Dec 2025 02:00:31 +0000 ROA not after: Mon 23 Mar 2026 01:00:31 +0000 asID: 36616 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:0b:cf:e7:74:4f:d2:0e:07:85:ba:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 23 02:00:31 2025 GMT Not After : Mar 23 01:00:31 2026 GMT Subject: CN=1fb5e2cd-b4d7-486d-88fb-a000f6608a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f9:19:b6:79:02:af:0c:15:c2:50:d8:3f:ab: 33:ae:fa:9c:44:24:d2:65:71:21:28:4c:b8:dd:b5: ff:e5:e3:4a:07:ca:9c:91:07:27:83:b0:1a:3a:ed: 07:ce:7e:fd:98:0c:c3:a1:e8:45:b0:2a:16:5d:af: 11:82:29:3d:56:75:50:f3:8c:78:90:b5:7e:b0:cd: 60:85:a3:ca:67:b1:cc:14:a8:c3:b3:15:9f:d3:57: 75:4b:b5:9d:73:db:14:46:81:e7:ba:26:33:94:98: c2:ae:c1:57:14:5d:eb:63:10:96:e5:1b:84:36:eb: 0f:ed:a6:9f:d0:b6:d9:71:81:11:5b:9b:97:95:2e: 9e:47:d6:81:8a:68:b0:09:6a:ea:34:1b:f7:16:0b: 25:38:b6:58:ea:2a:e3:b9:89:0b:31:fd:19:9a:4a: 8a:57:41:18:f8:c3:9f:6c:9e:eb:9c:a3:64:85:15: 40:d4:fc:6f:4b:98:02:d8:c4:d5:f3:c9:67:21:4f: 7b:85:6c:66:2c:cb:42:a6:a4:3e:27:82:cf:a1:6f: 3c:ca:60:f5:2d:19:64:4d:7e:43:40:97:d9:f9:e1: f6:b3:e3:79:9c:d2:15:dd:a2:76:ff:25:f9:28:ac: 9f:c9:ed:50:5e:75:7f:50:da:ad:52:46:44:bc:70: 58:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:19:86:2E:D6:CE:C8:36:D6:BD:43:48:AF:CC:BE:BC:A1:01:34:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbf8ece9-a4a3-3aa0-b2b1-efa2e486c303.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:2c:ee:05:17:1f:b7:42:a0:5b:f8:82:40:d5:ad:f4:c8:f8: 6b:1e:63:44:12:b3:83:f5:4d:ad:3d:a5:d2:5c:ba:6b:73:aa: 9e:40:b9:5f:d8:39:a9:ff:9e:db:1b:cf:c2:af:17:25:44:22: 03:2a:6c:d3:f5:4a:f3:a2:31:04:45:a5:a5:fe:16:e1:4c:2a: 1c:a6:46:0a:b9:83:a6:35:3a:3b:f4:d0:68:f3:bf:85:43:08: 5f:7e:55:50:9c:ac:50:3f:6a:06:95:a2:6d:71:29:1e:3c:6d: d4:09:cb:41:ae:f5:f5:7a:e2:a3:9a:4a:4d:77:77:57:01:65: 42:3d:d5:4c:71:a7:a4:44:39:1c:82:1b:e5:4f:c6:ca:36:25: 47:aa:c9:bb:44:72:b9:04:9c:1a:72:c5:e4:5f:fb:d3:aa:a0: 2b:15:cc:9c:6f:9c:36:44:e9:97:03:4a:7d:b1:c9:16:4a:b8: 6e:f6:cc:c5:aa:13:e7:b9:e4:15:2e:35:57:04:48:b7:ab:40: b6:b0:fd:64:ee:02:5b:c5:6f:ef:1c:36:c8:a0:bb:bc:56:c8: 1e:70:cc:1e:55:0b:40:8f:f5:67:a5:04:54:93:13:75:5c:23: 5e:f5:64:9a:e1:51:71:fb:ff:4a:78:00:d3:46:e3:79:c6:22: 47:a5:28:3f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExHC8/ndE/SDgeFuuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk MWZiNWUyY2QtYjRkNy00ODZkLTg4ZmItYTAwMGY2NjA4YTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvkZtnkCrwwVwlDYP6szrvqcRCTSZXEhKEy4 3bX/5eNKB8qckQcng7AaOu0Hzn79mAzDoehFsCoWXa8Rgik9VnVQ84x4kLV+sM1g haPKZ7HMFKjDsxWf01d1S7Wdc9sURoHnuiYzlJjCrsFXFF3rYxCW5RuENusP7aaf 0LbZcYERW5uXlS6eR9aBimiwCWrqNBv3FgslOLZY6irjuYkLMf0ZmkqKV0EY+MOf bJ7rnKNkhRVA1PxvS5gC2MTV88lnIU97hWxmLMtCpqQ+J4LPoW88ymD1LRlkTX5D QJfZ+eH2s+N5nNIV3aJ2/yX5KKyfye1QXnV/UNqtUkZEvHBYVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHEZhi7Wzsg21r1DSK/MvryhATRMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmJmOGVjZTktYTRhMy0z YWEwLWIyYjEtZWZhMmU0ODZjMzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEMs7gUXH7dCoFv4gkDVrfTI+GseY0QSs4P1Ta09pdJcumtzqp5A uV/YOan/ntsbz8KvFyVEIgMqbNP1SvOiMQRFpaX+FuFMKhymRgq5g6Y1Ojv00Gjz v4VDCF9+VVCcrFA/agaVom1xKR48bdQJy0Gu9fV64qOaSk13d1cBZUI91Uxxp6RE ORyCG+VPxso2JUeqybtEcrkEnBpyxeRf+9OqoCsVzJxvnDZE6ZcDSn2xyRZKuG72 zMWqE+e55BUuNVcESLerQLaw/WTuAlvFb+8cNsigu7xWyB5wzB5VC0CP9WelBFST E3VcI171ZJrhUXH7/0p4ANNG43nGIkelKD8= -----END CERTIFICATE-----Generated at Mon Jan 26 00:44:16 2026 by rpki-client