This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa34a4ff-c634-389d-becf-d4663564708a.roa File: fa34a4ff-c634-389d-becf-d4663564708a.roa (raw, json) Hash identifier: j8ixeSVav06hSXI13DX5PG2aSll/B+Zu0XQIweXk2Ec= Subject key identifier: 70:14:33:66:00:BB:95:2D:BB:23:EA:F7:9A:D1:F8:85:43:9C:F6:4D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BCD9F354F35B16CDB37F9B180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa34a4ff-c634-389d-becf-d4663564708a.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 396827 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9f:35:4f:35:b1:6c:db:37:f9:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=c609ccce-e523-4167-8c75-d2cc59538826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ca:a6:83:9e:6c:0b:50:ae:1b:be:17:bc:f9: 0d:66:82:0b:94:07:fe:44:f4:a5:1e:28:dc:70:10: ad:f8:0d:53:05:33:15:ce:e0:0b:f9:6e:80:eb:45: 5d:a7:21:54:9b:a4:81:d9:9b:d9:d1:c3:45:33:8c: 59:64:3e:63:78:46:44:37:fc:7e:60:ca:75:d2:fd: 76:56:7f:0e:b9:d8:ec:ac:5c:90:0a:87:3e:af:43: b4:aa:b4:88:42:f3:3a:58:2b:13:3e:85:d7:23:b6: 1d:cf:e9:1c:2e:71:ce:9e:dc:3f:c0:45:50:0f:c9: be:98:fa:87:5f:75:da:9d:66:f8:e3:19:d8:1b:21: 3b:cc:3d:37:b3:00:31:3f:69:96:af:b6:04:1e:78: 16:ea:2a:7a:ba:94:c4:ca:ca:60:de:e1:a9:f3:f5: b2:e5:de:28:a5:43:66:ed:b8:29:04:76:0b:60:e0: f8:85:23:e5:7d:d7:94:5b:59:1f:7d:19:4d:0d:ae: 14:65:b7:31:55:d5:e1:29:86:c9:d3:4d:22:9f:79: d1:8f:b2:db:b7:fa:91:0c:a4:8d:b2:3f:05:8b:88: 81:a1:54:b9:ed:44:0d:ff:42:2b:67:86:4b:e6:3a: bc:ab:da:39:1a:58:40:d4:0f:cb:c8:53:e3:a5:ac: b3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:14:33:66:00:BB:95:2D:BB:23:EA:F7:9A:D1:F8:85:43:9C:F6:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa34a4ff-c634-389d-becf-d4663564708a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:6f:b3:5e:95:41:a7:97:dc:66:5a:4d:da:f8:0b:a6:49:73: 34:44:52:b0:eb:cd:e0:13:e0:8a:46:c1:a4:c5:11:da:c6:e2: 9a:b2:e6:6f:6c:63:a6:8c:4b:5b:6a:4a:ce:a4:45:84:3c:72: bf:0f:8d:e6:8e:a7:19:0f:73:31:a6:8a:ba:18:78:49:b3:68: e3:41:65:68:fc:7e:cd:53:eb:bc:9b:5a:c0:cd:12:9e:ed:35: 3f:b8:8c:ce:27:32:f0:96:25:d8:08:21:8f:77:31:d8:7c:02: ca:d0:3e:e3:d6:41:65:eb:af:0a:55:d5:28:7d:18:92:c2:63: 4b:20:52:88:bc:45:47:e6:19:06:af:fb:a7:bc:52:28:8b:de: b7:ee:83:6e:49:5c:c2:09:64:e6:59:ee:f6:87:0f:99:ac:0e: 02:9e:ca:a8:45:3f:d1:11:1d:16:5c:b8:9d:c3:65:f9:86:23: 8c:8f:01:97:2a:d9:0a:70:02:e6:77:e0:29:f9:8b:d3:f3:2b: 9c:2c:bb:69:87:81:e2:bd:2a:37:b6:0d:34:4f:04:9b:09:e6: 1a:c7:0c:15:31:ac:4b:18:1d:fa:94:94:30:af:df:a9:33:cc: 06:90:ce:cb:42:76:95:7c:b6:12:39:d1:de:73:4a:d6:e8:db: aa:d5:4d:cf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvNnzVPNbFs2zf5sYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk YzYwOWNjY2UtZTUyMy00MTY3LThjNzUtZDJjYzU5NTM4ODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcqmg55sC1CuG74XvPkNZoILlAf+RPSlHijc cBCt+A1TBTMVzuAL+W6A60VdpyFUm6SB2ZvZ0cNFM4xZZD5jeEZEN/x+YMp10v12 Vn8OudjsrFyQCoc+r0O0qrSIQvM6WCsTPoXXI7Ydz+kcLnHOntw/wEVQD8m+mPqH X3XanWb44xnYGyE7zD03swAxP2mWr7YEHngW6ip6upTEyspg3uGp8/Wy5d4opUNm 7bgpBHYLYOD4hSPlfdeUW1kffRlNDa4UZbcxVdXhKYbJ000in3nRj7Lbt/qRDKSN sj8Fi4iBoVS57UQN/0IrZ4ZL5jq8q9o5GlhA1A/LyFPjpayzCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHAUM2YAu5UtuyPq95rR+IVDnPZNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmEzNGE0ZmYtYzYzNC0z ODlkLWJlY2YtZDQ2NjM1NjQ3MDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALBvs16VQaeX3GZaTdr4C6ZJczREUrDrzeAT4IpGwaTFEdrG4pqy 5m9sY6aMS1tqSs6kRYQ8cr8PjeaOpxkPczGmiroYeEmzaONBZWj8fs1T67ybWsDN Ep7tNT+4jM4nMvCWJdgIIY93Mdh8AsrQPuPWQWXrrwpV1Sh9GJLCY0sgUoi8RUfm GQav+6e8UiiL3rfug25JXMIJZOZZ7vaHD5msDgKeyqhFP9ERHRZcuJ3DZfmGI4yP AZcq2QpwAuZ34Cn5i9PzK5wsu2mHgeK9Kje2DTRPBJsJ5hrHDBUxrEsYHfqUlDCv 36kzzAaQzstCdpV8thI50d5zStbo26rVTc8= -----END CERTIFICATE-----Generated at Sat Dec 6 16:30:06 2025 by rpki-client