This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfaf6d25-2951-3a13-9688-8b35f867d1bb.roa File: bfaf6d25-2951-3a13-9688-8b35f867d1bb.roa (raw, json) Hash identifier: ZMo0YZCMW5bGJAZ8OpTnRPKjqElcmndKYsd3Wk6o6M8= Subject key identifier: 4F:00:2A:3D:0D:54:6D:30:5E:D7:B5:FD:D3:E5:92:37:C1:6A:AB:66 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BC270BC1E8F735207857BD380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfaf6d25-2951-3a13-9688-8b35f867d1bb.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 396599 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:bc:1e:8f:73:52:07:85:7b:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=22a5c11d-e7d8-47d4-bef1-c71cedfc87aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f5:85:1f:b7:99:0e:3e:06:41:c3:bf:0f:57: e1:da:99:51:ab:1e:60:44:df:1a:8c:61:06:0e:ca: 48:e6:1f:79:15:37:41:bc:89:9e:81:a1:ed:6f:cb: 24:ca:43:3f:2f:d5:28:91:bc:40:7d:42:06:ed:58: c8:a7:6e:00:c5:46:45:2d:e0:9f:0a:72:df:e3:61: 2f:eb:7c:df:e2:b0:07:f8:39:de:28:e8:c2:13:06: 68:12:2a:37:49:be:6b:7a:b6:a7:28:e8:e2:57:65: 76:3b:ad:4c:55:8f:f1:1d:fc:8b:76:19:d9:d4:81: 25:cd:6f:5c:08:cd:c9:e1:da:7c:63:12:4e:ca:08: 77:84:d7:3c:3f:2e:fc:8a:3d:1e:52:cd:3d:e8:6c: 13:13:b9:30:d3:85:13:00:39:5e:3e:05:f7:4e:d9: 8b:f6:b2:bf:35:5d:a6:3c:b6:76:83:39:8b:b8:ed: 4f:4a:ef:29:96:47:6d:2a:f5:70:b1:14:0a:13:3c: 11:e1:54:99:a4:45:bc:88:d1:06:f2:ca:e9:52:fb: fe:5a:a8:f9:24:8f:09:51:51:5b:ce:88:05:82:2f: 78:c3:13:89:80:ed:31:5b:49:f6:2e:be:98:ab:80: 8d:bb:ad:5c:50:4d:ae:70:af:1b:f4:28:d7:38:2d: d7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:00:2A:3D:0D:54:6D:30:5E:D7:B5:FD:D3:E5:92:37:C1:6A:AB:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfaf6d25-2951-3a13-9688-8b35f867d1bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c4:73:e1:19:48:73:7f:08:42:9c:e5:26:6e:be:93:22:3d: 9b:aa:ed:ef:e0:c9:ea:42:0d:46:23:46:41:82:f1:a8:19:b2: 17:94:c5:8d:5f:a7:1e:c8:cc:98:d7:6e:ba:b3:82:45:99:04: 42:5a:dc:c4:8d:89:14:ca:a6:62:d0:8a:06:38:c6:21:94:96: bb:80:c1:f1:c7:7a:57:b9:8b:a6:7c:40:83:ac:6a:b3:3a:57: 45:3c:e1:4e:5d:52:85:8d:bd:1d:6e:94:36:ca:c6:36:65:74: 6b:38:48:bf:7c:e9:d9:bc:7a:95:03:35:98:98:62:a7:54:9b: d1:d4:3d:e0:43:f1:05:d8:81:72:4f:37:77:ee:50:7f:3e:8e: b2:69:a4:cf:2e:38:50:48:44:89:29:bd:93:32:4b:cc:d6:21: a8:02:7b:2a:fa:1a:db:17:11:cd:bd:81:e9:2a:79:f4:5b:f9: 74:f1:98:c4:66:13:ac:28:d2:a8:af:e5:23:57:7b:9e:3b:8e: 26:83:15:02:d9:11:70:28:18:00:c7:b1:6b:3e:e6:c1:91:08: 7d:a0:af:55:c6:3c:8a:db:99:ea:4d:89:a2:e0:8d:ae:6c:d2: 52:03:23:ab:10:ba:22:6c:00:36:0a:a3:95:90:33:51:30:3a: 59:a2:71:0d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEvCcLwej3NSB4V704AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk MjJhNWMxMWQtZTdkOC00N2Q0LWJlZjEtYzcxY2VkZmM4N2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/WFH7eZDj4GQcO/D1fh2plRqx5gRN8ajGEG DspI5h95FTdBvImegaHtb8skykM/L9UokbxAfUIG7VjIp24AxUZFLeCfCnLf42Ev 63zf4rAH+DneKOjCEwZoEio3Sb5reranKOjiV2V2O61MVY/xHfyLdhnZ1IElzW9c CM3J4dp8YxJOygh3hNc8Py78ij0eUs096GwTE7kw04UTADlePgX3TtmL9rK/NV2m PLZ2gzmLuO1PSu8plkdtKvVwsRQKEzwR4VSZpEW8iNEG8srpUvv+Wqj5JI8JUVFb zogFgi94wxOJgO0xW0n2Lr6Yq4CNu61cUE2ucK8b9CjXOC3XZQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFE8AKj0NVG0wXte1/dPlkjfBaqtmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmZhZjZkMjUtMjk1MS0z YTEzLTk2ODgtOGIzNWY4NjdkMWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAqxHPhGUhzfwhCnOUmbr6TIj2bqu3v4MnqQg1G I0ZBgvGoGbIXlMWNX6ceyMyY1266s4JFmQRCWtzEjYkUyqZi0IoGOMYhlJa7gMHx x3pXuYumfECDrGqzOldFPOFOXVKFjb0dbpQ2ysY2ZXRrOEi/fOnZvHqVAzWYmGKn VJvR1D3gQ/EF2IFyTzd37lB/Po6yaaTPLjhQSESJKb2TMkvM1iGoAnsq+hrbFxHN vYHpKnn0W/l08ZjEZhOsKNKor+UjV3ueO44mgxUC2RFwKBgAx7FrPubBkQh9oK9V xjyK25nqTYmi4I2ubNJSAyOrELoibAA2CqOVkDNRMDpZonEN -----END CERTIFICATE-----Generated at Sat Dec 6 20:22:33 2025 by rpki-client