This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17b64331-a48c-3b2b-b463-c1cf6a79f7ca.roa File: 17b64331-a48c-3b2b-b463-c1cf6a79f7ca.roa (raw, json) Hash identifier: lc1slhnPSbW8lN4wYWLZo8+CHLFUvU8pk0vqG3yOWBY= Subject key identifier: 62:30:2B:15:9D:10:AB:6B:82:12:F6:B1:0F:41:12:33:89:A6:3C:64 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C401135E27C099DE03CED8000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17b64331-a48c-3b2b-b463-c1cf6a79f7ca.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 396603 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:35:e2:7c:09:9d:e0:3c:ed:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=90696dda-859b-4eae-867e-5ab475ab3703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c3:ef:1b:bd:80:c1:5d:e5:39:4a:ef:f1:ce: 70:41:a7:14:69:24:82:ae:58:d7:b0:aa:cf:30:81: 10:a4:e7:de:6c:87:cb:69:dd:47:8a:0d:5e:3a:f4: 87:50:f7:1a:ca:4a:a8:29:90:78:4f:07:c2:11:f8: 91:dd:3a:fb:94:f6:52:2e:8f:54:26:68:fb:6d:09: 07:85:bc:9d:37:dc:9f:91:ec:39:ae:37:ec:eb:fd: 8c:8b:76:36:e1:51:8e:f4:74:61:66:1f:7b:17:f7: 8d:62:c3:d2:aa:09:da:11:ca:94:d0:23:ff:0a:d2: 10:c8:83:8d:ba:21:57:7e:6b:44:a3:5e:57:78:e5: 8d:56:9f:5c:e4:6c:3a:bc:9f:e7:2e:ea:17:93:9b: d9:95:67:38:db:06:da:01:62:ad:24:4d:7e:33:b6: cd:2b:a4:bc:bd:03:22:65:c0:55:dc:a0:03:5d:24: 98:c0:9a:02:bf:0a:f4:b5:79:dd:97:2d:6c:56:c0: 38:c9:91:41:2c:2a:a4:ef:7a:9e:8a:9e:3f:3e:ed: 6a:fa:be:ce:0a:4e:fb:f0:b4:46:ed:79:d6:65:65: 40:8a:7c:2e:2e:2c:d0:f7:e2:c4:98:45:af:99:ba: 81:b1:51:81:73:02:b8:b9:72:58:65:fa:eb:7d:fc: bb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:30:2B:15:9D:10:AB:6B:82:12:F6:B1:0F:41:12:33:89:A6:3C:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17b64331-a48c-3b2b-b463-c1cf6a79f7ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:0f:98:3f:9f:81:8d:c1:85:a9:3c:25:d5:16:c0:e5:67:86: 90:0d:58:76:98:37:fe:ee:73:07:2c:eb:05:39:73:b7:6a:31: 70:55:20:bd:63:87:e5:14:fc:3d:15:97:0b:54:82:7d:be:f7: 33:3e:91:2b:20:44:27:ec:87:bb:f7:9a:76:77:c9:7f:75:79: 99:fa:38:00:6a:13:d2:c0:48:93:66:57:3d:6d:9c:96:45:2a: 4c:05:52:91:d6:bf:04:20:4a:15:b4:3e:51:2d:ec:a8:73:5a: 83:b2:8f:69:10:6d:94:e1:4d:fe:7b:24:96:a8:44:b6:cd:f5: 2b:50:48:bb:7e:55:9c:09:3e:e9:ed:50:f4:ab:83:ab:28:4f: ee:eb:fb:65:77:a6:b8:14:0c:88:8f:d5:47:e2:25:f8:ef:10: 87:0e:b7:32:e7:fa:c2:41:2f:62:28:f3:03:da:87:fc:88:be: 68:74:84:c9:da:79:ff:74:92:4d:08:7c:d4:93:41:d8:db:46: 24:d7:d9:35:5c:dc:e7:d3:8f:7f:cf:d1:9b:4e:a9:6e:e4:4b: 6b:43:ad:3c:3a:99:ac:7c:e6:c5:52:4d:8f:0c:27:0b:55:50: 34:54:e3:36:40:7a:5f:81:7f:52:c8:1a:42:09:67:a0:ad:87: 57:76:c8:39 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExAETXifAmd4DztgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk OTA2OTZkZGEtODU5Yi00ZWFlLTg2N2UtNWFiNDc1YWIzNzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcPvG72AwV3lOUrv8c5wQacUaSSCrljXsKrP MIEQpOfebIfLad1Hig1eOvSHUPcaykqoKZB4TwfCEfiR3Tr7lPZSLo9UJmj7bQkH hbydN9yfkew5rjfs6/2Mi3Y24VGO9HRhZh97F/eNYsPSqgnaEcqU0CP/CtIQyION uiFXfmtEo15XeOWNVp9c5Gw6vJ/nLuoXk5vZlWc42wbaAWKtJE1+M7bNK6S8vQMi ZcBV3KADXSSYwJoCvwr0tXndly1sVsA4yZFBLCqk73qeip4/Pu1q+r7OCk778LRG 7XnWZWVAinwuLizQ9+LEmEWvmbqBsVGBcwK4uXJYZfrrffy7JwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGIwKxWdEKtrghL2sQ9BEjOJpjxkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTdiNjQzMzEtYTQ4Yy0z YjJiLWI0NjMtYzFjZjZhNzlmN2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCTD5g/n4GNwYWpPCXVFsDlZ4aQDVh2mDf+7nMH LOsFOXO3ajFwVSC9Y4flFPw9FZcLVIJ9vvczPpErIEQn7Ie795p2d8l/dXmZ+jgA ahPSwEiTZlc9bZyWRSpMBVKR1r8EIEoVtD5RLeyoc1qDso9pEG2U4U3+eySWqES2 zfUrUEi7flWcCT7p7VD0q4OrKE/u6/tld6a4FAyIj9VH4iX47xCHDrcy5/rCQS9i KPMD2of8iL5odITJ2nn/dJJNCHzUk0HY20Yk19k1XNzn049/z9GbTqlu5EtrQ608 OpmsfObFUk2PDCcLVVA0VOM2QHpfgX9SyBpCCWegrYdXdsg5 -----END CERTIFICATE-----Generated at Sun Dec 21 10:32:24 2025 by rpki-client