This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33d3fe5a-2cfe-3d96-a299-a62a549204e7.roa File: 33d3fe5a-2cfe-3d96-a299-a62a549204e7.roa (raw, json) Hash identifier: 2iqG0Hi+gEafoP7IoVEVxrS5Aafs2bZzbQtHbNEs3k8= Subject key identifier: 90:77:F7:AF:CB:91:7C:A7:42:B4:C9:78:84:C9:41:BE:CA:E4:C3:02 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C3A7BB9A0DFD9F5F0138D9D40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33d3fe5a-2cfe-3d96-a299-a62a549204e7.roa Signing time: Thu 18 Dec 2025 14:00:39 +0000 ROA not before: Thu 18 Dec 2025 14:00:39 +0000 ROA not after: Wed 18 Mar 2026 13:00:39 +0000 asID: 396594 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3a:7b:b9:a0:df:d9:f5:f0:13:8d:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 18 14:00:39 2025 GMT Not After : Mar 18 13:00:39 2026 GMT Subject: CN=bdc552fe-0895-4eb1-a752-07ede9793d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5e:b2:86:87:2c:23:c0:67:08:46:b9:7e:f8: cf:28:54:77:90:b2:f3:9f:32:62:a5:6c:5d:a2:ff: fe:f9:27:21:d0:96:84:3f:6d:26:56:9a:d5:7f:ae: db:e3:23:fd:67:4d:7f:15:18:1e:d2:27:12:88:2b: cc:3a:cf:d3:e7:87:fb:bb:8b:a1:6d:01:a5:46:12: 08:78:63:5c:51:8e:4c:e9:9d:66:fd:3a:29:3c:cf: 3a:2f:00:98:4d:8f:25:38:1f:8e:d1:2a:d3:a1:55: 67:5f:e4:20:75:93:83:f3:22:fc:b4:46:e0:53:5a: 86:8d:3d:e0:c4:6f:03:72:a0:ca:c7:3c:96:0a:1b: 80:65:d1:b2:2f:b3:9a:90:b6:ee:e4:52:d4:4b:b5: 1f:bb:de:a1:90:0e:f6:e2:70:45:93:a6:1f:de:46: 7b:f4:18:3f:39:88:ba:83:bf:63:4e:2c:ed:ed:d1: 99:ea:44:6d:80:ff:f4:48:5e:3a:50:1b:47:30:c4: 7c:4b:28:27:09:ea:24:16:1f:2c:5d:d2:ba:7d:d4: 15:6b:9e:3d:b7:25:a4:a4:02:ce:bf:02:fe:10:07: 3a:d3:76:5b:5c:a1:a7:9b:70:8e:ab:bb:a4:b6:b2: 36:de:3d:e4:d0:6d:26:42:db:24:e0:c5:f1:ec:ce: 9a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:77:F7:AF:CB:91:7C:A7:42:B4:C9:78:84:C9:41:BE:CA:E4:C3:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33d3fe5a-2cfe-3d96-a299-a62a549204e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:eb:f8:f5:34:c1:0f:ec:e8:01:01:b9:34:4c:d0:f1:e8:5a: 9d:5b:3d:29:b5:22:08:dd:f2:5c:1f:44:de:e0:fd:e7:14:5e: c1:da:6d:a3:38:8f:35:7d:7c:7f:99:86:c8:e8:e4:60:23:34: 01:ec:e8:02:48:6f:88:a2:ab:6b:03:cd:3b:0d:01:bd:b3:bf: 27:cd:f2:da:1e:6a:49:cc:0d:f2:e7:e1:2e:2e:0e:75:82:ab: f3:2e:8f:8e:4f:3d:3b:2c:e4:25:e6:de:e4:09:6b:89:2b:a7: eb:18:cf:00:03:f2:b4:48:64:71:41:6d:6c:89:a4:0e:38:ed: 28:ed:1f:2d:9b:24:2e:ed:b3:5c:92:24:07:59:34:5e:7f:38: f4:69:39:58:9d:01:e6:83:10:b3:62:7a:1a:22:db:89:b8:e2: 6a:5d:71:75:0a:d0:0a:50:50:e8:df:b4:25:2a:97:f9:60:d8: ae:81:b5:17:1a:04:c0:60:43:29:ce:52:39:92:d7:20:16:bb: 89:22:a3:5e:96:87:46:76:19:93:5f:5b:7d:57:39:8c:83:88: 09:81:83:5b:c7:4d:44:53:21:91:06:98:15:1e:d4:0a:b7:aa: ae:6f:95:23:87:6f:0a:52:0e:ed:70:51:df:0c:b0:77:fc:d6: 22:da:48:ef -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEw6e7mg39n18BONnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIxODE0MDAzOVoXDTI2MDMxODEzMDAzOVowLzEtMCsGA1UEAxMk YmRjNTUyZmUtMDg5NS00ZWIxLWE3NTItMDdlZGU5NzkzZDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi16yhocsI8BnCEa5fvjPKFR3kLLznzJipWxd ov/++Sch0JaEP20mVprVf67b4yP9Z01/FRge0icSiCvMOs/T54f7u4uhbQGlRhII eGNcUY5M6Z1m/TopPM86LwCYTY8lOB+O0SrToVVnX+QgdZOD8yL8tEbgU1qGjT3g xG8DcqDKxzyWChuAZdGyL7OakLbu5FLUS7Ufu96hkA724nBFk6Yf3kZ79Bg/OYi6 g79jTizt7dGZ6kRtgP/0SF46UBtHMMR8SygnCeokFh8sXdK6fdQVa549tyWkpALO vwL+EAc603ZbXKGnm3COq7uktrI23j3k0G0mQtsk4MXx7M6a5wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJB396/LkXynQrTJeITJQb7K5MMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzNkM2ZlNWEtMmNmZS0z ZDk2LWEyOTktYTYyYTU0OTIwNGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCM6/j1NMEP7OgBAbk0TNDx6FqdWz0ptSII3fJc H0Te4P3nFF7B2m2jOI81fXx/mYbI6ORgIzQB7OgCSG+IoqtrA807DQG9s78nzfLa HmpJzA3y5+EuLg51gqvzLo+OTz07LOQl5t7kCWuJK6frGM8AA/K0SGRxQW1siaQO OO0o7R8tmyQu7bNckiQHWTRefzj0aTlYnQHmgxCzYnoaItuJuOJqXXF1CtAKUFDo 37QlKpf5YNiugbUXGgTAYEMpzlI5ktcgFruJIqNelodGdhmTX1t9VzmMg4gJgYNb x01EUyGRBpgVHtQKt6qub5Ujh28KUg7tcFHfDLB3/NYi2kjv -----END CERTIFICATE-----Generated at Sat Dec 20 21:16:47 2025 by rpki-client