This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddf0256d-f4c8-3c11-81f8-a2da66601315.roa File: ddf0256d-f4c8-3c11-81f8-a2da66601315.roa (raw, json) Hash identifier: BjZLjzavGd6tMwcHqTSJ5yK7c8Oo3NRNqMCe4yMLsSc= Subject key identifier: FC:2D:74:19:67:60:B7:22:AA:BF:83:BA:86:FC:91:F7:3F:3A:08:C4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BFBAB7746237A933C036CB980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddf0256d-f4c8-3c11-81f8-a2da66601315.roa Signing time: Wed 26 Nov 2025 02:00:31 +0000 ROA not before: Wed 26 Nov 2025 02:00:31 +0000 ROA not after: Tue 24 Feb 2026 02:00:31 +0000 asID: 397209 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fb:ab:77:46:23:7a:93:3c:03:6c:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 26 02:00:31 2025 GMT Not After : Feb 24 02:00:31 2026 GMT Subject: CN=5b69c769-615c-4082-978a-b1902ffb217a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:69:05:ce:db:9d:4a:91:d1:8b:2b:41:05:39: 9d:b9:4c:b6:9f:64:b3:0a:3f:56:2d:db:47:a9:00: 30:6c:67:95:a2:f7:95:a8:51:2a:bb:45:ef:36:07: 1c:ee:43:65:03:db:a1:51:84:6c:93:34:8a:27:a6: 3f:f6:f8:02:55:89:41:b1:c9:9f:f4:c1:94:64:7c: a8:06:ab:61:2d:54:ba:da:23:41:c7:aa:dd:02:4a: 7b:d7:58:40:f4:bc:4c:6f:96:6d:d2:f3:65:a3:11: 57:9a:89:3a:93:91:63:54:fc:de:17:9b:30:25:56: f5:1e:73:87:0f:dc:18:8b:1c:77:57:6b:88:0a:87: b0:44:f8:0c:76:73:55:cb:f9:a8:35:d4:21:d2:c7: 3d:dd:8b:3d:f3:5c:90:d0:4e:20:7c:d9:69:32:cb: b7:f8:c1:1d:a3:58:a9:9b:aa:74:0b:65:e5:66:36: 40:c4:b4:ef:e4:ac:84:46:2b:56:5e:88:d9:8a:2b: 88:61:65:82:26:6b:65:a3:ab:ac:ee:ef:7d:9e:8e: 83:2c:35:81:22:8d:d8:27:54:5b:52:55:d2:8a:b0: fb:1e:a7:8d:69:3f:cf:bc:24:5e:c7:13:b3:f6:e8: ab:e2:0c:fc:b0:d5:7b:72:fc:c3:40:ab:d3:62:cb: ec:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:2D:74:19:67:60:B7:22:AA:BF:83:BA:86:FC:91:F7:3F:3A:08:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddf0256d-f4c8-3c11-81f8-a2da66601315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b7:0d:18:81:25:c1:b2:f8:95:c6:dd:64:81:df:c3:44:d8: 40:4f:83:b2:eb:16:6c:d0:ee:61:6b:30:c4:ed:da:ef:cd:ef: 59:e2:a1:de:8c:94:c2:c5:3d:fa:ef:93:1e:bb:f9:e7:24:42: 25:56:b7:89:38:26:ea:55:9f:dc:3c:7c:ec:e5:b3:79:9c:da: c5:9e:b9:73:48:aa:48:56:9c:91:38:13:b4:c7:0f:bc:b7:de: 71:4d:a3:ad:ea:c4:ac:2b:1f:be:01:77:59:25:23:27:8d:3c: e2:e0:1d:5a:9c:83:6b:ca:c5:50:48:90:2e:a5:18:6c:e2:9a: 75:5b:0b:2c:e5:62:e8:e1:aa:31:d8:d4:dd:4f:83:91:33:5f: 7f:c4:68:f3:40:c0:b3:28:08:78:02:50:63:51:f6:09:59:f3: 9e:b4:af:06:3f:28:c9:ac:e0:37:cf:3d:ed:16:54:1e:62:c1: a1:ba:e8:4a:78:37:6d:fc:ce:41:87:d2:35:9c:9b:15:da:57: 24:93:37:4f:88:5b:58:04:cd:63:03:b2:31:e2:b3:44:d1:22: a9:b9:75:73:5e:56:a8:dc:ad:29:04:0b:1a:0d:e0:45:6f:43: 89:07:b8:b8:69:6e:33:b6:e8:53:5e:1c:22:45:b6:1b:5a:9d: 40:cb:20:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEv7q3dGI3qTPANsuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEyNjAyMDAzMVoXDTI2MDIyNDAyMDAzMVowLzEtMCsGA1UEAxMk NWI2OWM3NjktNjE1Yy00MDgyLTk3OGEtYjE5MDJmZmIyMTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2kFztudSpHRiytBBTmduUy2n2SzCj9WLdtH qQAwbGeVoveVqFEqu0XvNgcc7kNlA9uhUYRskzSKJ6Y/9vgCVYlBscmf9MGUZHyo BqthLVS62iNBx6rdAkp711hA9LxMb5Zt0vNloxFXmok6k5FjVPzeF5swJVb1HnOH D9wYixx3V2uICoewRPgMdnNVy/moNdQh0sc93Ys981yQ0E4gfNlpMsu3+MEdo1ip m6p0C2XlZjZAxLTv5KyERitWXojZiiuIYWWCJmtlo6us7u99no6DLDWBIo3YJ1Rb UlXSirD7HqeNaT/PvCRexxOz9uir4gz8sNV7cvzDQKvTYsvsMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPwtdBlnYLciqr+Duob8kfc/OgjEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGRmMDI1NmQtZjRjOC0z YzExLTgxZjgtYTJkYTY2NjAxMzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFm3DRiBJcGy+JXG3WSB38NE2EBPg7LrFmzQ7mFrMMTt2u/N71ni od6MlMLFPfrvkx67+eckQiVWt4k4JupVn9w8fOzls3mc2sWeuXNIqkhWnJE4E7TH D7y33nFNo63qxKwrH74Bd1klIyeNPOLgHVqcg2vKxVBIkC6lGGzimnVbCyzlYujh qjHY1N1Pg5EzX3/EaPNAwLMoCHgCUGNR9glZ8560rwY/KMms4DfPPe0WVB5iwaG6 6Ep4N238zkGH0jWcmxXaVySTN0+IW1gEzWMDsjHis0TRIqm5dXNeVqjcrSkECxoN 4EVvQ4kHuLhpbjO26FNeHCJFthtanUDLIJg= -----END CERTIFICATE-----Generated at Sat Dec 6 14:23:11 2025 by rpki-client