This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8968285-2cba-3390-8083-233c982b8c35.roa File: c8968285-2cba-3390-8083-233c982b8c35.roa (raw, json) Hash identifier: SGQ8FP+NfOtCFng5fABOgIEtwlnelerpwI0pb0RiOVs= Subject key identifier: 2F:E0:A5:7B:43:7A:D0:F8:42:6C:46:72:1E:70:DB:DC:C8:2D:C5:80 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BDA2B220B9242EDCAEFEAE440 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8968285-2cba-3390-8083-233c982b8c35.roa Signing time: Fri 14 Nov 2025 02:00:30 +0000 ROA not before: Fri 14 Nov 2025 02:00:30 +0000 ROA not after: Thu 12 Feb 2026 02:00:30 +0000 asID: 396588 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:da:2b:22:0b:92:42:ed:ca:ef:ea:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 14 02:00:30 2025 GMT Not After : Feb 12 02:00:30 2026 GMT Subject: CN=fa84df09-bfc1-4e66-bcbb-fb8d0304ad50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:41:b7:bd:14:74:32:ed:ca:96:28:96:88:8a: 35:d0:9f:2f:01:5c:c4:bd:b5:f7:00:db:04:5e:5e: 8c:ab:fe:22:3c:16:b0:d8:91:77:d1:68:7a:fc:e0: 4e:8f:5f:7c:d3:92:4d:0f:5f:57:f8:a3:f9:5d:c3: 3a:98:7f:5b:51:bf:d6:ae:c5:1a:04:72:53:70:da: bd:81:1f:f7:d4:75:74:ce:9e:d1:c8:14:44:b6:72: d6:90:43:0c:24:4d:eb:85:3b:89:18:e4:72:c9:91: 34:6f:e7:44:a2:33:6d:cb:3f:ab:64:5d:37:58:2d: 82:2e:a1:84:e3:b6:d4:6b:da:a4:20:24:e7:b2:0b: 7f:6c:06:42:b5:d9:0b:3f:fb:c3:fd:aa:c5:9e:ee: f1:02:c5:f0:48:4f:2f:c5:c7:97:5d:c7:20:32:8b: 46:f1:7a:62:80:9b:d1:cc:84:3c:ef:17:e3:61:83: 84:60:e3:c3:69:fb:66:91:bd:d4:18:05:aa:87:7e: 02:05:97:3f:73:74:ed:41:10:a9:48:fc:b6:60:ae: 74:3e:84:77:bd:03:42:16:45:82:b1:ca:a7:4a:e1: 7d:1e:60:c9:7c:34:96:fc:db:96:d8:83:ef:bd:b4: a6:e6:4f:fe:ab:ec:8f:9f:66:ee:60:05:62:19:9a: 35:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E0:A5:7B:43:7A:D0:F8:42:6C:46:72:1E:70:DB:DC:C8:2D:C5:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8968285-2cba-3390-8083-233c982b8c35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:00:19:15:dd:8f:13:81:ac:11:c2:7e:3a:29:1c:00:ce:c5: c7:51:cb:7b:77:51:4b:21:a9:8b:69:3a:71:96:90:ab:dd:0f: 75:5f:41:64:9e:11:8e:f2:98:00:0a:49:c1:dc:67:91:30:5e: 1d:93:6b:d5:ae:af:e0:a1:ce:72:1c:7f:df:88:7f:f3:72:ef: 59:3d:f9:45:0b:f8:d7:35:60:c6:44:c0:08:42:f5:b2:59:fe: bd:c3:66:2a:bc:f7:81:e1:fc:91:d0:36:1a:f6:b5:50:b9:3e: 2b:ea:b9:07:62:b6:f9:4f:58:f5:ff:55:9e:f2:f9:c0:e8:ea: f0:de:3b:d9:d0:2d:77:90:77:a5:8e:f7:5a:7b:13:d6:ef:bb: 53:4e:05:4f:60:a3:2c:89:b5:e0:7e:c2:82:fc:67:22:f0:8c: 3d:ea:88:ee:6e:50:28:47:73:82:f0:d5:31:bd:8f:8d:4d:d3: 24:5c:a2:3f:d0:be:ab:5d:bf:b7:d7:9d:80:89:98:e8:97:3c: 53:38:60:49:da:54:bd:51:33:aa:00:84:04:0a:62:50:f2:e1: fd:7b:51:91:49:37:09:d7:a6:bb:2c:d3:fb:79:ef:ad:6b:5c: 21:29:b7:ec:77:91:25:33:4b:d1:76:8d:d3:d2:a6:9a:a9:4f: 5a:09:39:74 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEvaKyILkkLtyu/q5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTExNDAyMDAzMFoXDTI2MDIxMjAyMDAzMFowLzEtMCsGA1UEAxMk ZmE4NGRmMDktYmZjMS00ZTY2LWJjYmItZmI4ZDAzMDRhZDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkG3vRR0Mu3KliiWiIo10J8vAVzEvbX3ANsE Xl6Mq/4iPBaw2JF30Wh6/OBOj19805JND19X+KP5XcM6mH9bUb/WrsUaBHJTcNq9 gR/31HV0zp7RyBREtnLWkEMMJE3rhTuJGORyyZE0b+dEojNtyz+rZF03WC2CLqGE 47bUa9qkICTnsgt/bAZCtdkLP/vD/arFnu7xAsXwSE8vxceXXccgMotG8XpigJvR zIQ87xfjYYOEYOPDaftmkb3UGAWqh34CBZc/c3TtQRCpSPy2YK50PoR3vQNCFkWC scqnSuF9HmDJfDSW/NuW2IPvvbSm5k/+q+yPn2buYAViGZo1ewIDAQABo4IDYjCC A14wHQYDVR0OBBYEFC/gpXtDetD4QmxGch5w29zILcWAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzg5NjgyODUtMmNiYS0z MzkwLTgwODMtMjMzYzk4MmI4YzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAnABkV3Y8TgawRwn46KRwAzsXHUct7d1FLIamL aTpxlpCr3Q91X0FknhGO8pgACknB3GeRMF4dk2vVrq/goc5yHH/fiH/zcu9ZPflF C/jXNWDGRMAIQvWyWf69w2YqvPeB4fyR0DYa9rVQuT4r6rkHYrb5T1j1/1We8vnA 6Orw3jvZ0C13kHeljvdaexPW77tTTgVPYKMsibXgfsKC/Gci8Iw96ojublAoR3OC 8NUxvY+NTdMkXKI/0L6rXb+3152AiZjolzxTOGBJ2lS9UTOqAIQECmJQ8uH9e1GR STcJ16a7LNP7ee+ta1whKbfsd5ElM0vRdo3T0qaaqU9aCTl0 -----END CERTIFICATE-----Generated at Sat Dec 6 14:32:29 2025 by rpki-client